last executing test programs: 1m8.61629006s ago: executing program 1 (id=378): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) socket(0x10, 0x803, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000940), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) 1m5.072279676s ago: executing program 1 (id=384): syz_usb_connect(0x3, 0x51, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x9, 0x21, 0x12, 0x20, 0x1199, 0x224, 0xa40d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x81, 0x8, 0x80, 0x6, "", [{{0x9, 0x4, 0x6, 0x0, 0x5, 0x40, 0x3, 0xd3, 0x2, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x36, 0x0, 0x13}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7e, 0xfe, 0x8}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x1a, 0x4, 0x68}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_connect$uac3(0x1, 0xd2, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4750, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x20, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x9a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x4}, [@power_domain={0xc, 0x24, 0x10, 0x2, 0x4, 0x80, 0x9, "a4cb3c"}, @processing_unit={0x9, 0x24, 0x9, 0x6, 0x5, [0x1]}, @feature_unit={0x15, 0x24, 0x7, 0x5, 0x5, [0x6, 0x7, 0x4, 0xe]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x40, "a178", "d7c631"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x80, 0x10, 0xe}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7fff, 0xd6, 0x9, "f3a7e6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x7, 0xc, {0xa, 0x25, 0x25, 0x7, 0x8, 0x2799}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xa7c, 0xb, 0x7}}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x200, 0x0, 0x4, 0xf0, 0x8, 0x3}, 0x13, &(0x7f0000001280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x10, 0x9, 0xa44, 0x5}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_connect(0x0, 0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff0000000904010102ff000000070587024000"], 0x0) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101023000090501"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m1.317255203s ago: executing program 1 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000840)={0x18, 0x0, 0x0, {0xb6d}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000880)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000980)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x3, 0x2bc, &(0x7f0000000380)="$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") 59.666469563s ago: executing program 1 (id=393): r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000019300)='./tracefs_dir\x00', &(0x7f0000019340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 58.366241288s ago: executing program 1 (id=399): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002980)=0x6) syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000002b00), 0x0, 0x0) read$msr(r2, &(0x7f0000002b40)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f000001bb40)='./file0\x00', 0x1000, 0xfffffff7) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f000001bc80)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) 56.708173518s ago: executing program 1 (id=401): syz_usb_connect(0x3, 0x51, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x9, 0x21, 0x12, 0x20, 0x1199, 0x224, 0xa40d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x81, 0x8, 0x80, 0x6, "", [{{0x9, 0x4, 0x6, 0x0, 0x5, 0x40, 0x3, 0xd3, 0x2, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x36, 0x0, 0x13}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7e, 0xfe, 0x8}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x1a, 0x4, 0x68}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_connect$uac3(0x1, 0xd2, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4750, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x20, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x9a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x4}, [@power_domain={0xc, 0x24, 0x10, 0x2, 0x4, 0x80, 0x9, "a4cb3c"}, @processing_unit={0x9, 0x24, 0x9, 0x6, 0x5, [0x1]}, @feature_unit={0x15, 0x24, 0x7, 0x5, 0x5, [0x6, 0x7, 0x4, 0xe]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x40, "a178", "d7c631"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x80, 0x10, 0xe}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7fff, 0xd6, 0x9, "f3a7e6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x7, 0xc, {0xa, 0x25, 0x25, 0x7, 0x8, 0x2799}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xa7c, 0xb, 0x7}}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x200, 0x0, 0x4, 0xf0, 0x8, 0x3}, 0x13, &(0x7f0000001280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x10, 0x9, 0xa44, 0x5}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_connect(0x0, 0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff0000000904010102ff000000070587024000"], 0x0) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101023000090501"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 40.262567366s ago: executing program 32 (id=401): syz_usb_connect(0x3, 0x51, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x9, 0x21, 0x12, 0x20, 0x1199, 0x224, 0xa40d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x81, 0x8, 0x80, 0x6, "", [{{0x9, 0x4, 0x6, 0x0, 0x5, 0x40, 0x3, 0xd3, 0x2, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x36, 0x0, 0x13}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7e, 0xfe, 0x8}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x1a, 0x4, 0x68}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_connect$uac3(0x1, 0xd2, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4750, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x20, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x9a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x4}, [@power_domain={0xc, 0x24, 0x10, 0x2, 0x4, 0x80, 0x9, "a4cb3c"}, @processing_unit={0x9, 0x24, 0x9, 0x6, 0x5, [0x1]}, @feature_unit={0x15, 0x24, 0x7, 0x5, 0x5, [0x6, 0x7, 0x4, 0xe]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x40, "a178", "d7c631"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x80, 0x10, 0xe}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7fff, 0xd6, 0x9, "f3a7e6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x7, 0xc, {0xa, 0x25, 0x25, 0x7, 0x8, 0x2799}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xa7c, 0xb, 0x7}}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x200, 0x0, 0x4, 0xf0, 0x8, 0x3}, 0x13, &(0x7f0000001280)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x10, 0x9, 0xa44, 0x5}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_connect(0x0, 0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff0000000904010102ff000000070587024000"], 0x0) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101023000090501"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 40.233845929s ago: executing program 2 (id=425): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000300)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f0000019640)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000019680)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000019700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000019980)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) 34.944439144s ago: executing program 2 (id=430): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x52, 0x1, 0x0, 0x4, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f00000196c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) 24.003907773s ago: executing program 4 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000100)={&(0x7f0000000140)="92", 0x1a000}}, 0xee) 21.877135852s ago: executing program 4 (id=444): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.417264033s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r0, &(0x7f00000005c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000195c0)=ANY=[], 0x2a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100), 0x4) 19.664452731s ago: executing program 4 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 17.204544454s ago: executing program 3 (id=448): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000300)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f0000019640)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000019680)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000019700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000019980)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) 17.140458611s ago: executing program 2 (id=449): write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001240)=0x6) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001280), 0x0, 0x0) read$msr(r2, &(0x7f00000012c0)=""/102392, 0x18ff8) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a700)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000001a780), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000040)={0x0, 0x595f, 0x10000, 0x0, 0x3a3}, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f000001a7c0)=""/4080, 0xff0}], 0x11) 15.480574153s ago: executing program 3 (id=450): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000010b00)=""/102392, 0x18ff8) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 14.226920152s ago: executing program 0 (id=451): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x1bd, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000500)={0xf0f01d, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f0000000680)=""/154, 0x9a, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000058c80)={0x1, 0x0, 0x0, &(0x7f0000030a80)}) 11.786940694s ago: executing program 0 (id=452): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000000000010700c0df000000000000109022400010000e80b09040000010300020009210800040122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000980)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.779584125s ago: executing program 3 (id=453): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000004600)=@getchain={0x2c, 0x66, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0xffec, 0xb}, {0xffff, 0x10}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000004680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000046c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000004740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000004780), 0x0, 0x0) read$msr(r3, &(0x7f00000047c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001d7c0)=0x80000000000003) r4 = syz_open_dev$sndctrl(&(0x7f000001d800), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f000001d840)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f000001d880), 0x88b02, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f000001d900)={0x0, 0x0, &(0x7f000001d940)={&(0x7f000001d980)=ANY=[@ANYBLOB, @ANYBLOB], 0x30}}, 0x4004090) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10008, &(0x7f00000001c0)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 11.14242339s ago: executing program 4 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(0x0, 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, &(0x7f0000000b80)="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", 0x18d, 0x12, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x5, 0xbf, 0x0, 0x0, @tick=0x7d90, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x38) 11.089848736s ago: executing program 2 (id=455): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x150) recvmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000) socket$rxrpc(0x21, 0x2, 0x2) 8.773027585s ago: executing program 2 (id=456): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000940), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) 8.706299202s ago: executing program 0 (id=457): userfaultfd(0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 8.704966822s ago: executing program 4 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r0, &(0x7f00000005c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000195c0)=ANY=[], 0x2a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100), 0x4) 7.583813218s ago: executing program 0 (id=459): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.472552422s ago: executing program 4 (id=460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x96, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x4, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 5.085513625s ago: executing program 0 (id=461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001dc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001ae80)=0x80000000000003) pipe(&(0x7f000001af00)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) 4.903570554s ago: executing program 3 (id=462): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000500)={0xf0f01d, 0x5}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f0000000680)=""/154, 0x9a, 0x4) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CHANINFO(r7, 0x80306403, &(0x7f0000058c80)={0x1, 0x0, 0x0, &(0x7f0000030a80)}) 3.337788925s ago: executing program 0 (id=463): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f00000196c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) write(r0, &(0x7f0000019740)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000019780)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000197c0)='oom_adj\x00') writev(r4, &(0x7f0000019800)=[{&(0x7f0000019840)='2', 0x1}, {&(0x7f0000019880)="38f518", 0x3}], 0x2) syz_clone(0x8280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f00000198c0)='ext4\x00', &(0x7f0000019900)='./file0\x00', 0xc0ed0044, &(0x7f0000019940)={[{@noblock_validity}, {@resuid}, {@nodioread_nolock}, {@noload}, {@nobarrier}, {@noinit_itable}]}, 0xfe, 0x47e, &(0x7f00000199c0)="$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") add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x1d8, 0xffffffffffffffff) 427.750126ms ago: executing program 3 (id=464): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 0s ago: executing program 3 (id=465): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x150) recvmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000) socket$rxrpc(0x21, 0x2, 0x2) kernel console output (not intermixed with test programs): uetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.055055][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.064609][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.067943][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.074975][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.086907][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.089456][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.096482][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.103038][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.109584][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.118783][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.129577][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.133361][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.144759][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.151961][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.159924][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.189209][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.205692][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.213799][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.213812][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.215375][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.222596][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.296345][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.305194][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.313624][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.322451][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.347081][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.354420][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.369498][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.393658][ T4280] rdma_rxe: rxe_register_device failed with error -23 [ 79.397857][ T4277] rdma_rxe: rxe_register_device failed with error -23 [ 79.409215][ T4277] rdma_rxe: failed to add rxe_eth0 [ 79.412324][ T4276] rdma_rxe: rxe_register_device failed with error -23 [ 79.422854][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.430379][ T4280] rdma_rxe: failed to add rxe_eth0 [ 79.438589][ T4291] rdma_rxe: rxe_register_device failed with error -23 [ 79.445513][ T4291] rdma_rxe: failed to add rxe_eth0 [ 79.453032][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.459572][ T4276] rdma_rxe: failed to add rxe_eth0 [ 79.671520][ T4275] infiniband rxe0: set active [ 79.677355][ T4275] infiniband rxe0: added rxe_eth0 [ 79.695457][ T22] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.790625][ T4275] RDS/IB: rxe0: added [ 79.795806][ T4275] smc: adding ib device rxe0 with port count 1 [ 79.802390][ T4275] smc: ib device rxe0 port 1 has pnetid [ 79.811539][ T128] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.851872][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.973352][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 80.118631][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.232881][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.268456][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.282264][ T4277] device bridge_slave_0 entered promiscuous mode [ 80.297796][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 80.310731][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.322830][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 80.344466][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 80.373160][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.381181][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.397952][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.552336][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.592682][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.632113][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.753451][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.767647][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.775950][ T4276] device bridge_slave_0 entered promiscuous mode [ 80.801942][ T4277] team0: Port device team_slave_0 added [ 80.839238][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.846752][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.855000][ T4280] device bridge_slave_0 entered promiscuous mode [ 80.876347][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.884875][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.893436][ T4291] device bridge_slave_0 entered promiscuous mode [ 80.901810][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.910267][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.918764][ T4276] device bridge_slave_1 entered promiscuous mode [ 80.928206][ T4277] team0: Port device team_slave_1 added [ 80.961729][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.973584][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.991196][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.012649][ T4280] device bridge_slave_1 entered promiscuous mode [ 81.031944][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.051627][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.072829][ T4291] device bridge_slave_1 entered promiscuous mode [ 81.155838][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.166522][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.174393][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.210687][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.225560][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.233143][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.250587][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 81.266332][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.285618][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.297129][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.320124][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.329526][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 81.336663][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 81.337650][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 81.350157][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.362057][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.406697][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 81.437165][ T4280] team0: Port device team_slave_0 added [ 81.473423][ T4280] team0: Port device team_slave_1 added [ 81.504249][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.511222][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.521475][ T4291] team0: Port device team_slave_0 added [ 81.530577][ T4276] team0: Port device team_slave_0 added [ 81.541222][ T4276] team0: Port device team_slave_1 added [ 81.554394][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.561543][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.588103][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.601316][ T4291] team0: Port device team_slave_1 added [ 81.641192][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.648360][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.674938][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.700583][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.707706][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.734722][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.754245][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.761297][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.787345][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.806364][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.813623][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.839881][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.924772][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.931963][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.958699][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.005968][ T4291] device hsr_slave_0 entered promiscuous mode [ 82.014673][ T4291] device hsr_slave_1 entered promiscuous mode [ 82.021773][ T4291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.029846][ T4291] Cannot create hsr debugfs directory [ 82.069399][ T4280] device hsr_slave_0 entered promiscuous mode [ 82.081674][ T4280] device hsr_slave_1 entered promiscuous mode [ 82.088951][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.096996][ T4280] Cannot create hsr debugfs directory [ 82.222985][ T4276] device hsr_slave_0 entered promiscuous mode [ 82.240943][ T4276] device hsr_slave_1 entered promiscuous mode [ 82.250968][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.261529][ T4276] Cannot create hsr debugfs directory [ 82.290861][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 82.653989][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.666432][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.680608][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.712389][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.723184][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.733997][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.745645][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.758619][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.803582][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.824931][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.835989][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.860660][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.912384][ T4291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.961660][ T4291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.984347][ T4275] team0: Port device team_slave_0 added [ 82.991799][ T4291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.002855][ T4291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.019699][ T4275] team0: Port device team_slave_1 added [ 83.105821][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.145827][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.189456][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.196470][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.224581][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.236401][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.245667][ T4352] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.267148][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.274163][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.301197][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.312996][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.327589][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 83.345267][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.397459][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.406919][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 83.412990][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 83.417041][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 83.461205][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.484439][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.491341][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 83.540273][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.570795][ T4275] device hsr_slave_0 entered promiscuous mode [ 83.582924][ T4275] device hsr_slave_1 entered promiscuous mode [ 83.590534][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.598673][ T4275] Cannot create hsr debugfs directory [ 83.620235][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.635574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.652899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.715631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.738318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.749632][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.842853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.861931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.875559][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.883047][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.908400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.917566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.926133][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.933332][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.948806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.961047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.971037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.985818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.001997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.025585][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.043713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.064306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.075849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.094523][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.101764][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.115657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.126326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.140805][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.147995][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.184489][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.218135][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.230494][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.256043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.267572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.283244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.294619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.311219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.325256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.337482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.349829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.358638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.377178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.385653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.396112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.405494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.421331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.486504][ T4291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.499970][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.516500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.532263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.559105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.573569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.584171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.599478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.625363][ T3937] infiniband rxe0: set active [ 84.640193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.650516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.679333][ T4359] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.688967][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.716439][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.774191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.791759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.800707][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.807901][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.843937][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.884415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.895656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.911585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.922712][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.929927][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.945968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.955604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.970569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.980876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.990439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.001230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.011312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.038070][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.055998][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.078698][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.085863][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.121452][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.133201][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.204155][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.215641][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.230889][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.243382][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.253680][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.269401][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.276662][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.291743][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.302981][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.315531][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.324942][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.342971][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.353437][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.368974][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.393465][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.406855][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 85.439151][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.461598][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.486883][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 85.492987][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 85.499337][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 85.509743][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.543193][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.566814][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 85.581047][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.618138][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.626907][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.635822][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.644811][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.654580][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.663733][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.672636][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.688258][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.706803][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.722914][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.737616][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.756398][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.775891][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.790199][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.839247][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.859453][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.930360][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.948005][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.975344][ T4277] device veth0_vlan entered promiscuous mode [ 86.021331][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.047657][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.091842][ T4277] device veth1_vlan entered promiscuous mode [ 86.122309][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.131768][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.149774][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.165345][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.174383][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.195693][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.210998][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.227736][ T4291] device veth0_vlan entered promiscuous mode [ 86.284373][ T4291] device veth1_vlan entered promiscuous mode [ 86.303179][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.314025][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.329505][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.344883][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.361381][ T4277] device veth0_macvtap entered promiscuous mode [ 86.388349][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.411588][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.420960][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.430251][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.453603][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.496074][ T4277] device veth1_macvtap entered promiscuous mode [ 86.537153][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.544781][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.556507][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.584772][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.600823][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.618937][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.630369][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.640000][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.649361][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.660564][ T4291] device veth0_macvtap entered promiscuous mode [ 86.680817][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.700521][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.718087][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.741981][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.758028][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.767419][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.778171][ T4291] device veth1_macvtap entered promiscuous mode [ 86.791201][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.818987][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.828207][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837618][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863313][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.935545][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.972679][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.015130][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.039256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.048676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.066517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.082644][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.089842][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.112052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.139050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.157504][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.164659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.187242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.203277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.213378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.224662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.240078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.254453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.308156][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.319017][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.339569][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.363713][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.381391][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.400992][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.428004][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.443892][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.452910][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.468702][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.494994][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 87.504427][ T4276] device veth0_vlan entered promiscuous mode [ 87.520242][ T4291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.530213][ T4291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.541016][ T4291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.549989][ T4291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567343][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 87.573403][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 87.579858][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 87.602557][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.617715][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.625528][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.646986][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 87.692114][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.723614][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.734033][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.743859][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.773090][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.781876][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.799079][ T4276] device veth1_vlan entered promiscuous mode [ 87.820745][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.858419][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.874830][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.975881][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.997692][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.017357][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.025601][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.058178][ T4280] device veth0_vlan entered promiscuous mode [ 88.077511][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.085600][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.104759][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.121211][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.134412][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.148674][ T4276] device veth0_macvtap entered promiscuous mode [ 88.183397][ T4276] device veth1_macvtap entered promiscuous mode [ 88.201357][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.215574][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.226332][ T4280] device veth1_vlan entered promiscuous mode [ 88.245399][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.258919][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.272842][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.281522][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.321498][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.335613][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.356807][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.369991][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.382814][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.406101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.415785][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.424778][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.434538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.445176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.466378][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.483589][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.506511][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.523801][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.555162][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.572236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.588431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.598297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.623500][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.633207][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645104][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656812][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.687844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.698608][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.706506][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.708075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.752492][ T4280] device veth0_macvtap entered promiscuous mode [ 88.772096][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.789292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.802515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.811358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.819200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.837746][ T4280] device veth1_macvtap entered promiscuous mode [ 88.958119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.968646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.978387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.988640][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.003030][ T4411] ipt_ECN: cannot use operation on non-tcp rule [ 89.012166][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.025552][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.037694][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.047894][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.058773][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.070742][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.103601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.127601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.179656][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.190753][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.199705][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.219788][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.230946][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.241792][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.252992][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.264191][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.276809][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.285591][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.297624][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.312081][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.322911][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.340011][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.361894][ T4275] device veth0_vlan entered promiscuous mode [ 89.371705][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.381398][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.394500][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403702][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.419740][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.428276][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.456700][ T4359] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.475548][ T4275] device veth1_vlan entered promiscuous mode [ 89.485230][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.517870][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.527393][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.544962][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.554526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.596777][ T4355] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.651315][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.668808][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.683398][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 89.712438][ T4359] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 89.729671][ T4275] device veth0_macvtap entered promiscuous mode [ 89.736742][ T4359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.757903][ T4359] usb 4-1: config 1 has no interface number 0 [ 89.764118][ T4359] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.788403][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.796286][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.809252][ T4355] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 89.835690][ T4355] usb 3-1: config 1 has no interface number 0 [ 89.841925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.851921][ T4355] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 89.872215][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.877308][ T4359] usb 4-1: config 1 interface 105 has no altsetting 0 [ 89.888174][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.895620][ T4275] device veth1_macvtap entered promiscuous mode [ 89.896277][ T4355] usb 3-1: Product: syz [ 89.923123][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.935082][ T4359] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 89.946848][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.957477][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 89.970291][ T4355] usb 3-1: Manufacturer: syz [ 89.988013][ T4355] usb 3-1: SerialNumber: syz [ 89.989072][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.997086][ T4359] usb 4-1: Product: syz [ 90.004367][ T4359] usb 4-1: Manufacturer: syz [ 90.010247][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.031668][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.072013][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.114337][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.183025][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.236816][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.293646][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.346247][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.412592][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.478112][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.517969][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.550998][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.600266][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.664793][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.729356][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.786679][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.856443][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.927591][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.982387][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.052212][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.056846][ T4359] usb 4-1: SerialNumber: syz [ 91.094315][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.116597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.156656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.165711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.219802][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.229054][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.238111][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.256891][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.270903][ T4355] usb 3-1: 3:0 : does not exist [ 91.276887][ T4355] usb 3-1: 3:0 : does not exist [ 91.334393][ T4359] aqc111: probe of 4-1:1.105 failed with error -22 [ 91.389380][ T4359] usb 4-1: USB disconnect, device number 2 [ 91.443639][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.462494][ T4355] usb 3-1: USB disconnect, device number 2 [ 92.085444][ T7] cfg80211: failed to load regulatory.db [ 92.526149][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.554595][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.589412][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.640573][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.661528][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.682969][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.716601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.726602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.736599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.746606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.756608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.766615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.776609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 92.786602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 92.796598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 94.959511][ T4460] syz.4.10 (4460): /proc/4454/oom_adj is deprecated, please use /proc/4454/oom_score_adj instead. [ 95.227285][ T4461] loop4: detected capacity change from 0 to 512 [ 95.247403][ T4461] ======================================================= [ 95.247403][ T4461] WARNING: The mand mount option has been deprecated and [ 95.247403][ T4461] and is ignored by this kernel. Remove the mand [ 95.247403][ T4461] option from the mount to silence this warning. [ 95.247403][ T4461] ======================================================= [ 95.367014][ T4461] EXT4-fs error (device loop4): ext4_get_journal_inode:5769: comm syz.4.10: inode #2147418112: comm syz.4.10: iget: illegal inode # [ 95.390104][ T4461] EXT4-fs (loop4): no journal found [ 95.395402][ T4461] EXT4-fs (loop4): can't get journal size [ 95.478698][ T4461] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 95.586940][ T4461] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 95.595665][ T4461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.702010][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 101.446841][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.066620][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 103.078730][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 103.115566][ T26] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 103.166706][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.213930][ T26] usb 4-1: config 0 descriptor?? [ 103.229088][ T4500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.321941][ T4512] netlink: 76 bytes leftover after parsing attributes in process `syz.4.22'. [ 103.673273][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.681866][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.690140][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.698784][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.707193][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.715456][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.723864][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.732394][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.740695][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.753980][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 103.780097][ T26] aquacomputer_d5next 0003:0C70:F00D.0001: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.3-1/input0 [ 103.846695][ T4445] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.922354][ T26] usb 4-1: USB disconnect, device number 3 [ 104.067160][ T4445] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 104.105999][ T4445] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.136602][ T4445] usb 5-1: config 0 has no interface number 0 [ 104.163612][ T4445] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 104.195349][ T4519] fido_id[4519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 104.206432][ T4445] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 104.253874][ T4445] usb 5-1: config 0 interface 255 has no altsetting 0 [ 104.297747][ T4445] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 104.316871][ T4445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.332610][ T4445] usb 5-1: Product: syz [ 104.346928][ T4445] usb 5-1: Manufacturer: syz [ 104.357519][ T4445] usb 5-1: SerialNumber: syz [ 104.373728][ T4445] usb 5-1: config 0 descriptor?? [ 104.390430][ T4445] streamzap 5-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 104.566640][ T4445] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.601303][ T26] usb 5-1: USB disconnect, device number 2 [ 106.186649][ T4445] usb 2-1: Using ep0 maxpacket: 8 [ 106.193584][ T4445] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.226647][ T4445] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.253945][ T4445] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 106.272974][ T4445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.303051][ T4445] usb 2-1: Product: syz [ 106.307683][ T4445] usb 2-1: Manufacturer: syz [ 106.312331][ T4445] usb 2-1: SerialNumber: syz [ 106.360226][ T4445] ti_usb_3410_5052 2-1:1.0: required endpoints missing [ 106.440416][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.564337][ T4445] usb 2-1: USB disconnect, device number 2 [ 107.706829][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.928162][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.389626][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.512738][ T22] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 109.526295][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.771995][ T22] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 109.856796][ T22] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 109.864332][ T22] cxacru: probe of 1-1:1.0 failed with error -22 [ 109.967838][ T22] usb 1-1: USB disconnect, device number 2 [ 110.026082][ T4563] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.079393][ T4562] loop0: detected capacity change from 0 to 1024 [ 110.676770][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.956960][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 110.979843][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 111.083843][ T22] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 111.827243][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.911610][ T22] usb 2-1: config 0 descriptor?? [ 111.952788][ T4570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.400153][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 112.408131][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.429547][ T22] usb 2-1: USB disconnect, device number 3 [ 114.564684][ T4612] can0: slcan on ttyS3. [ 116.149495][ T4612] can0 (unregistered): slcan off ttyS3. [ 117.026778][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.226650][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 117.237094][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.291382][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.336681][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.407065][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.483190][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.548876][ T22] usb 1-1: config 0 descriptor?? [ 117.766881][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.875857][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.548464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.608548][ T4643] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 118.997475][ T4643] UDC core: g1: couldn't find an available UDC or it's busy [ 119.177078][ T27] audit: type=1800 audit(1793420731.677:2): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.52" name="UDC" dev="configfs" ino=34952 res=0 errno=0 [ 119.205355][ T22] hid_parser_main: 465 callbacks suppressed [ 119.205377][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.313234][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.379068][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.421032][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.437031][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.453173][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.470341][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.478281][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.485769][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.495366][ T22] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 119.517734][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 119.603354][ T22] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 119.656859][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.667346][ T22] usb 1-1: USB disconnect, device number 3 [ 119.785925][ T4662] fido_id[4662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 121.378381][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 121.404198][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.416960][ T7] usb 2-1: config 243 has an invalid interface number: 8 but max is 0 [ 121.426777][ T7] usb 2-1: config 243 has no interface number 0 [ 121.436673][ T7] usb 2-1: config 243 interface 8 has no altsetting 0 [ 121.457660][ T7] usb 2-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 121.471840][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.481379][ T7] usb 2-1: Product: syz [ 121.485647][ T7] usb 2-1: Manufacturer: syz [ 121.490491][ T7] usb 2-1: SerialNumber: syz [ 123.824113][ T7] cypress_m8 2-1:243.8: HID->COM RS232 Adapter converter detected [ 123.867815][ T7] cyphidcom ttyUSB0: required endpoint is missing [ 123.882797][ T7] usb 2-1: USB disconnect, device number 4 [ 123.899343][ T7] cypress_m8 2-1:243.8: device disconnected [ 124.655931][ T4694] 9pnet_fd: Insufficient options for proto=fd [ 125.480806][ T4698] loop0: detected capacity change from 0 to 256 [ 125.588009][ T4698] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.596720][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.426629][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 128.433812][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.457154][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.471920][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.499854][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.086154][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.156926][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.205888][ T22] usb 2-1: config 0 descriptor?? [ 130.296725][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 130.304096][ T7] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 130.347661][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.392887][ T7] usb 3-1: config 1 has no interface number 0 [ 130.404442][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 130.416686][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 130.426143][ T7] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.475601][ T22] usb 2-1: USB disconnect, device number 5 [ 130.476973][ T7] usb 3-1: config 1 interface 105 has no altsetting 0 [ 130.539224][ T7] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 130.569400][ T7] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 130.606661][ T7] usb 3-1: Product: syz [ 130.610976][ T7] usb 3-1: Manufacturer: syz [ 130.615795][ T7] usb 3-1: SerialNumber: syz [ 130.686337][ T4730] loop4: detected capacity change from 0 to 512 [ 130.734418][ T4730] ext2: Unknown parameter 'pcr' [ 130.871616][ T7] aqc111: probe of 3-1:1.105 failed with error -22 [ 130.901454][ T7] usb 3-1: USB disconnect, device number 3 [ 131.140881][ T4736] loop4: detected capacity change from 0 to 128 [ 131.449358][ T4736] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.549159][ T4736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.789651][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.046659][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 132.058038][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.067644][ T22] usb 2-1: config 129 has an invalid interface number: 6 but max is 0 [ 132.075877][ T22] usb 2-1: config 129 has no interface number 0 [ 132.102772][ T22] usb 2-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 132.144851][ T22] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 132.166700][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.174810][ T22] usb 2-1: Product: syz [ 132.216812][ T22] usb 2-1: Manufacturer: syz [ 132.232041][ T22] usb 2-1: SerialNumber: syz [ 132.490441][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.533692][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.975831][ T4753] sched: RT throttling activated [ 133.984348][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.992236][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.992249][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.184212][ T4748] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.236735][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 134.260287][ T26] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 135.586706][ T26] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.643322][ T22] hub 2-1:129.6: bad descriptor, ignoring hub [ 135.672147][ T22] hub: probe of 2-1:129.6 failed with error -5 [ 135.686723][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.703443][ T22] sierra 2-1:129.6: Sierra USB modem converter detected [ 135.721305][ T26] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 135.747507][ T22] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 135.756450][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.892014][ T22] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 135.909655][ T26] usb 5-1: config 0 descriptor?? [ 135.916072][ T26] usb 5-1: can't set config #0, error -71 [ 135.932295][ T26] usb 5-1: USB disconnect, device number 3 [ 135.958035][ T22] usb 2-1: USB disconnect, device number 6 [ 136.048909][ T22] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 136.064858][ T22] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 136.086468][ T22] sierra 2-1:129.6: device disconnected [ 136.123208][ T4773] loop4: detected capacity change from 0 to 128 [ 137.446825][ T4355] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.603903][ T4789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.724070][ T4790] loop1: detected capacity change from 0 to 512 [ 137.733550][ T4355] usb 3-1: Using ep0 maxpacket: 16 [ 137.765958][ T4355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.786854][ T4790] EXT4-fs error (device loop1): ext4_get_journal_inode:5769: comm syz.1.89: inode #2147418112: comm syz.1.89: iget: illegal inode # [ 137.801458][ T4790] EXT4-fs (loop1): no journal found [ 137.807041][ T4790] EXT4-fs (loop1): can't get journal size [ 137.822853][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.870496][ T4790] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 137.909455][ T4790] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 137.919159][ T4790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.996901][ T4355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.037389][ T4796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.059202][ T4355] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.149952][ T4355] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.204085][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.265584][ T4355] usb 3-1: config 0 descriptor?? [ 138.312673][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 138.362055][ T4789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.566719][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.711540][ T4355] hid_parser_main: 5 callbacks suppressed [ 138.711569][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.745261][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.756717][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 138.764805][ T26] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 138.796806][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.817215][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.846700][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.897043][ T26] usb 5-1: config 1 has no interface number 0 [ 138.903406][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.915982][ T26] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.957974][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 138.975738][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 139.001959][ T26] usb 5-1: config 1 interface 105 has no altsetting 0 [ 139.020311][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 139.039070][ T26] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 139.053219][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 139.066671][ T26] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 139.076035][ T4355] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 139.096410][ T26] usb 5-1: Product: syz [ 139.112169][ T26] usb 5-1: Manufacturer: syz [ 139.124872][ T4355] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 139.146856][ T26] usb 5-1: SerialNumber: syz [ 139.251596][ T4355] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 139.331513][ T4355] usb 3-1: USB disconnect, device number 4 [ 139.376049][ T26] aqc111: probe of 5-1:1.105 failed with error -22 [ 139.406139][ T26] usb 5-1: USB disconnect, device number 4 [ 140.330610][ T4808] fido_id[4808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.900430][ T4819] loop3: detected capacity change from 0 to 512 [ 140.944793][ T4819] ext2: Unknown parameter 'pcr' [ 141.020211][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.978411][ T4821] loop3: detected capacity change from 0 to 128 [ 143.340528][ T4821] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.359820][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 143.484334][ T26] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 143.507890][ T4821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.565976][ T26] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.674358][ T27] audit: type=1326 audit(1793420756.357:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 143.699058][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.716657][ T26] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 143.756348][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.789604][ T27] audit: type=1326 audit(1793420756.417:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 143.854872][ T26] usb 5-1: config 0 descriptor?? [ 143.908720][ T27] audit: type=1326 audit(1793420756.417:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 143.942331][ T26] usb 5-1: can't set config #0, error -71 [ 144.076867][ T26] usb 5-1: USB disconnect, device number 5 [ 144.114752][ T27] audit: type=1326 audit(1793420756.417:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 144.485018][ T27] audit: type=1326 audit(1793420756.417:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 144.843383][ T4836] block device autoloading is deprecated and will be removed. [ 147.348383][ T4853] overlayfs: unrecognized mount option "verity=off" or missing value [ 148.367107][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.106610][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 149.137298][ T26] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 149.145585][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.155923][ T26] usb 4-1: config 1 has no interface number 0 [ 149.162157][ T26] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.175384][ T26] usb 4-1: config 1 interface 105 has no altsetting 0 [ 149.199313][ T26] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 149.215651][ T26] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 149.224284][ T26] usb 4-1: Product: syz [ 149.228813][ T26] usb 4-1: Manufacturer: syz [ 149.233454][ T26] usb 4-1: SerialNumber: syz [ 149.523939][ T26] aqc111: probe of 4-1:1.105 failed with error -22 [ 149.563380][ T26] usb 4-1: USB disconnect, device number 4 [ 149.623663][ T4866] netlink: 76 bytes leftover after parsing attributes in process `syz.2.97'. [ 149.887716][ T27] audit: type=1326 audit(1793420762.577:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.3.112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f319f559 code=0x7ffc0000 [ 149.986748][ T27] audit: type=1326 audit(1793420762.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.3.112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f319f559 code=0x7ffc0000 [ 150.429924][ T27] audit: type=1326 audit(1793420762.607:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.3.112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f56f319f559 code=0x7ffc0000 [ 150.959082][ T27] audit: type=1326 audit(1793420762.607:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.3.112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f319f559 code=0x7ffc0000 [ 152.405673][ T27] audit: type=1326 audit(1793420762.607:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.3.112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f319f559 code=0x7ffc0000 [ 152.522253][ T4901] loop3: detected capacity change from 0 to 512 [ 152.535090][ T4901] ext2: Unknown parameter 'pcr' [ 152.719232][ T4904] Zero length message leads to an empty skb [ 153.968531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.048180][ T4910] loop2: detected capacity change from 0 to 1024 [ 154.716878][ T4350] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.866789][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.880184][ T4923] netlink: 76 bytes leftover after parsing attributes in process `syz.1.125'. [ 154.906648][ T4350] usb 1-1: Using ep0 maxpacket: 16 [ 154.914529][ T4350] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 154.931640][ T4350] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.978864][ T4350] usb 1-1: config 1 has no interface number 0 [ 154.985039][ T4350] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.038313][ T27] audit: type=1326 audit(1793420767.727:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4926 comm="syz.2.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 155.056918][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 155.068377][ T4350] usb 1-1: config 1 interface 105 has no altsetting 0 [ 155.088796][ T4350] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 155.099588][ T22] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.107319][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 155.126744][ T27] audit: type=1326 audit(1793420767.727:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4926 comm="syz.2.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 155.137081][ T22] usb 4-1: config 0 has no interface number 0 [ 155.176696][ T4350] usb 1-1: Product: syz [ 155.182865][ T4350] usb 1-1: Manufacturer: syz [ 155.201790][ T4350] usb 1-1: SerialNumber: syz [ 155.203347][ T22] usb 4-1: config 0 interface 12 has no altsetting 0 [ 155.220871][ T4929] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 155.238776][ T27] audit: type=1326 audit(1793420767.727:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4926 comm="syz.2.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 155.263861][ T22] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.263893][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.263915][ T22] usb 4-1: Product: syz [ 155.263931][ T22] usb 4-1: Manufacturer: syz [ 155.263948][ T22] usb 4-1: SerialNumber: syz [ 155.279327][ T22] usb 4-1: config 0 descriptor?? [ 155.332725][ T27] audit: type=1326 audit(1793420767.727:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4926 comm="syz.2.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 155.357497][ T27] audit: type=1326 audit(1793420767.727:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4926 comm="syz.2.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 155.418128][ T4929] device bond1 entered promiscuous mode [ 155.456421][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.568953][ T4931] bond1: (slave bridge1): making interface the new active one [ 155.589480][ T4931] device bridge1 entered promiscuous mode [ 155.642018][ T4931] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 155.721647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 156.043815][ T22] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 156.179400][ T22] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 156.327385][ T22] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 156.464169][ T22] f81534: probe of 4-1:0.12 failed with error -71 [ 156.724351][ T22] usb 4-1: USB disconnect, device number 5 [ 156.941146][ T4350] aqc111: probe of 1-1:1.105 failed with error -22 [ 156.951872][ T4350] usb 1-1: USB disconnect, device number 4 [ 158.085722][ T4965] loop4: detected capacity change from 0 to 1024 [ 162.482120][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.676655][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 162.697186][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 162.739052][ T22] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 162.769405][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.799334][ T22] usb 3-1: config 0 descriptor?? [ 162.825424][ T4992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.262365][ T22] hid_parser_main: 5 callbacks suppressed [ 163.262388][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.286722][ T4999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.138'. [ 163.316615][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.324842][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.346706][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.410275][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.427954][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.461794][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.489242][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.516442][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.543096][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: unknown main item tag 0x0 [ 163.594672][ T22] aquacomputer_d5next 0003:0C70:F00D.0004: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 163.743923][ T22] usb 3-1: USB disconnect, device number 5 [ 163.926660][ T4348] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.013721][ T5006] fido_id[5006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.126827][ T4348] usb 4-1: Using ep0 maxpacket: 16 [ 164.134674][ T4348] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 164.166631][ T4348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.207802][ T4348] usb 4-1: config 1 has no interface number 0 [ 164.217618][ T4348] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.254008][ T4348] usb 4-1: config 1 interface 105 has no altsetting 0 [ 164.271025][ T5018] loop4: detected capacity change from 0 to 512 [ 164.291507][ T4348] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 164.312802][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 164.400612][ T5018] ext2: Unknown parameter 'pcr' [ 164.464972][ T4348] usb 4-1: Product: syz [ 164.529172][ T4348] usb 4-1: Manufacturer: syz [ 164.607597][ T4348] usb 4-1: SerialNumber: syz [ 166.376733][ T4348] aqc111: probe of 4-1:1.105 failed with error -22 [ 166.598522][ T4348] usb 4-1: USB disconnect, device number 6 [ 172.128384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029410800: rx timeout, send abort [ 172.145596][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029410800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.754157][ T27] audit: type=1800 audit(1793420785.437:18): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 173.838469][ T5063] loop2: detected capacity change from 0 to 512 [ 173.845882][ T5063] ext2: Unknown parameter 'pcr' [ 176.739587][ T3603] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.812437][ T5103] loop3: detected capacity change from 0 to 1024 [ 178.468211][ T3603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.493364][ T3603] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.534177][ T3603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.598431][ T3603] usb 2-1: config 0 descriptor?? [ 178.649543][ T3603] pwc: Askey VC010 type 2 USB webcam detected. [ 180.288884][ T5111] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.298904][ T5111] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 180.380256][ T3603] pwc: send_video_command error -71 [ 180.385650][ T3603] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 180.470851][ T3603] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 181.356848][ T3603] usb 2-1: USB disconnect, device number 7 [ 181.689319][ T5129] ip_tables: iptables: counters copy to user failed while replacing table [ 182.441322][ T5117] comedi comedi2: Buffer allocation failed [ 183.178035][ T5132] loop4: detected capacity change from 0 to 512 [ 183.188565][ T5132] EXT4-fs error (device loop4): ext4_get_journal_inode:5769: comm syz.4.171: inode #2147418112: comm syz.4.171: iget: illegal inode # [ 183.202620][ T5132] EXT4-fs (loop4): no journal found [ 183.208590][ T5132] EXT4-fs (loop4): can't get journal size [ 183.257002][ T5132] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 183.278851][ T5132] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 183.287288][ T5132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.288074][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 190.216743][ T3603] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.415680][ T3603] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 190.449612][ T3603] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 190.476453][ T3603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.503329][ T3603] usb 5-1: Product: syz [ 190.514233][ T3603] usb 5-1: Manufacturer: syz [ 190.523574][ T3603] usb 5-1: SerialNumber: syz [ 190.544593][ T5170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.241889][ T27] audit: type=1326 audit(1793420804.017:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 192.291264][ T3603] usb 5-1: USB disconnect, device number 6 [ 192.378981][ T27] audit: type=1326 audit(1793420804.017:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 192.439157][ T27] audit: type=1326 audit(1793420804.057:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 192.526687][ T27] audit: type=1326 audit(1793420804.057:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 192.578710][ T27] audit: type=1326 audit(1793420804.057:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 192.633707][ T27] audit: type=1326 audit(1793420804.067:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 194.167882][ T27] audit: type=1326 audit(1793420804.067:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 194.291610][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298127][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.328931][ T27] audit: type=1326 audit(1793420804.077:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 194.415558][ T27] audit: type=1326 audit(1793420804.087:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 194.468109][ T27] audit: type=1326 audit(1793420804.087:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f91d9f559 code=0x7ffc0000 [ 194.556722][ T4359] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.746638][ T4359] usb 4-1: Using ep0 maxpacket: 32 [ 194.764118][ T4359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.788666][ T4359] usb 4-1: config 129 has an invalid interface number: 6 but max is 0 [ 194.816685][ T4359] usb 4-1: config 129 has no interface number 0 [ 194.843538][ T4359] usb 4-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 194.877882][ T4359] usb 4-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 194.906599][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.926703][ T4359] usb 4-1: Product: syz [ 194.930950][ T4359] usb 4-1: Manufacturer: syz [ 194.956010][ T4359] usb 4-1: SerialNumber: syz [ 195.219292][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.249677][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.293678][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.329319][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.553727][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.934650][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.066719][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.217017][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.281791][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.350512][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.404888][ T5201] loop1: detected capacity change from 0 to 256 [ 196.451786][ T4359] hub 4-1:129.6: bad descriptor, ignoring hub [ 196.476769][ T4359] hub: probe of 4-1:129.6 failed with error -5 [ 196.524853][ T5201] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.547147][ T4359] sierra 4-1:129.6: Sierra USB modem converter detected [ 196.629497][ T4359] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 197.126154][ T5199] 9pnet: Could not find request transport: fd0x0000000000000003 [ 197.531869][ T4359] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 197.789140][ T4359] usb 4-1: USB disconnect, device number 7 [ 197.896862][ T4359] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 198.004609][ T4359] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 198.050747][ T4359] sierra 4-1:129.6: device disconnected [ 201.956980][ T4352] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.166901][ T4352] usb 2-1: Using ep0 maxpacket: 32 [ 202.180579][ T4352] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.230638][ T4352] usb 2-1: config 129 has an invalid interface number: 6 but max is 0 [ 202.272021][ T4352] usb 2-1: config 129 has no interface number 0 [ 202.279070][ T4352] usb 2-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 202.321029][ T4352] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 202.350486][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.370418][ T4352] usb 2-1: Product: syz [ 202.374663][ T4352] usb 2-1: Manufacturer: syz [ 202.387996][ T4352] usb 2-1: SerialNumber: syz [ 202.687992][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 202.694857][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 202.701048][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 202.701688][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 202.701748][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 202.802808][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.999500][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.302432][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.378276][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.430024][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.451188][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.517081][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.556748][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.597863][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.632379][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.681158][ T4352] hub 2-1:129.6: bad descriptor, ignoring hub [ 203.699303][ T4352] hub: probe of 2-1:129.6 failed with error -5 [ 203.813908][ T4352] sierra 2-1:129.6: Sierra USB modem converter detected [ 203.825200][ T4352] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 203.836308][ T4352] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 203.884182][ T4352] usb 2-1: USB disconnect, device number 8 [ 203.926488][ T4352] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 203.971481][ T4352] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 203.996630][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.032396][ T4352] sierra 2-1:129.6: device disconnected [ 204.176754][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 204.184196][ T26] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 204.236729][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.263108][ T26] usb 4-1: config 1 has no interface number 0 [ 204.289591][ T26] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.338807][ T26] usb 4-1: config 1 interface 105 has no altsetting 0 [ 204.351931][ T26] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 204.387821][ T26] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 204.396004][ T26] usb 4-1: Product: syz [ 204.426623][ T26] usb 4-1: Manufacturer: syz [ 204.431353][ T26] usb 4-1: SerialNumber: syz [ 205.805430][ T26] aqc111: probe of 4-1:1.105 failed with error -22 [ 205.994712][ T26] usb 4-1: USB disconnect, device number 8 [ 206.542364][ T5291] 9pnet_fd: Insufficient options for proto=fd [ 206.585056][ T5291] loop4: detected capacity change from 0 to 256 [ 206.644585][ T5291] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.700208][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 206.700224][ T27] audit: type=1800 audit(1793420819.387:54): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.215" name="file1" dev="loop4" ino=1048663 res=0 errno=0 [ 207.876962][ T5299] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.920270][ T5299] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 208.007530][ T5305] binder: 5304:5305 ioctl c0046209 0 returned -22 [ 208.037068][ T27] audit: type=1800 audit(1793420820.707:55): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.218" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 209.666670][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.606651][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 211.417160][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.437058][ T26] usb 4-1: config 129 has an invalid interface number: 6 but max is 0 [ 211.445302][ T26] usb 4-1: config 129 has no interface number 0 [ 211.451983][ T26] usb 4-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 211.474424][ T26] usb 4-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 211.483681][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.492410][ T26] usb 4-1: Product: syz [ 211.496829][ T26] usb 4-1: Manufacturer: syz [ 211.501474][ T26] usb 4-1: SerialNumber: syz [ 212.377807][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.462880][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.523876][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.554968][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.626672][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.662352][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.728403][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.761903][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.067287][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.266806][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 213.289085][ T22] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 213.318978][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.406651][ T22] usb 2-1: config 1 has no interface number 0 [ 213.423530][ T22] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.476932][ T22] usb 2-1: config 1 interface 105 has no altsetting 0 [ 213.500682][ T22] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 213.516566][ T22] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 213.525139][ T22] usb 2-1: Product: syz [ 213.529973][ T22] usb 2-1: Manufacturer: syz [ 213.534663][ T22] usb 2-1: SerialNumber: syz [ 213.664578][ T26] hub 4-1:129.6: bad descriptor, ignoring hub [ 213.673147][ T26] hub: probe of 4-1:129.6 failed with error -5 [ 213.688561][ T26] sierra 4-1:129.6: Sierra USB modem converter detected [ 213.710396][ T26] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 213.723790][ T26] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 213.765853][ T22] aqc111: probe of 2-1:1.105 failed with error -22 [ 214.002910][ T26] usb 4-1: USB disconnect, device number 9 [ 214.009188][ T22] usb 2-1: USB disconnect, device number 9 [ 214.460509][ T26] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 214.474584][ T26] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 214.485255][ T26] sierra 4-1:129.6: device disconnected [ 216.407248][ T27] audit: type=1800 audit(1793420829.087:56): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.232" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 219.156748][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.204355][ T5391] loop0: detected capacity change from 0 to 512 [ 219.346823][ T26] usb 3-1: device descriptor read/64, error -71 [ 219.387200][ T5391] ext2: Unknown parameter 'pcr' [ 219.504263][ T5393] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.719828][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.916696][ T26] usb 3-1: device descriptor read/64, error -71 [ 220.038148][ T26] usb usb3-port1: attempt power cycle [ 220.456785][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 220.512091][ T26] usb 3-1: device descriptor read/8, error -71 [ 220.786669][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.844518][ T26] usb 3-1: device descriptor read/8, error -71 [ 220.976941][ T26] usb usb3-port1: unable to enumerate USB device [ 225.010746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 226.179368][ T5435] svc: failed to register lockdv1 RPC service (errno 111). [ 226.240478][ T5435] lockd_up: makesock failed, error=-111 [ 226.302977][ T5445] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 226.312297][ T5445] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 228.682777][ T27] audit: type=1326 audit(1793420841.367:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.2.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 228.927778][ T27] audit: type=1326 audit(1793420841.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.2.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 230.055842][ T3603] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.716611][ T27] audit: type=1326 audit(1793420841.397:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.2.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 231.740898][ T3603] usb 2-1: Using ep0 maxpacket: 16 [ 231.750920][ T3603] usb 2-1: device descriptor read/all, error -71 [ 231.884283][ T27] audit: type=1326 audit(1793420841.397:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.2.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777d59f559 code=0x7ffc0000 [ 232.399828][ T5474] loop1: detected capacity change from 0 to 512 [ 232.417853][ T5474] ext2: Unknown parameter 'pcr' [ 232.498608][ T5466] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.096682][ T5481] loop1: detected capacity change from 0 to 128 [ 234.108729][ T5481] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.958455][ T5481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.297166][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 240.523971][ T22] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 240.542603][ T22] usb 3-1: config 1 has no interface number 0 [ 240.576415][ T22] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 240.616560][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.624843][ T22] usb 3-1: Product: syz [ 240.649765][ T22] usb 3-1: Manufacturer: syz [ 240.654951][ T22] usb 3-1: SerialNumber: syz [ 240.982504][ T22] usb 3-1: 3:0 : does not exist [ 241.675905][ T22] usb 3-1: 3:0 : does not exist [ 241.706875][ T22] usb 3-1: USB disconnect, device number 10 [ 242.019462][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.208105][ T5535] loop3: detected capacity change from 0 to 512 [ 245.036790][ T5535] ext2: Unknown parameter 'pcr' [ 247.289963][ T27] audit: type=1326 audit(1793420859.977:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c84f9f559 code=0x7ffc0000 [ 247.326253][ T27] audit: type=1326 audit(1793420859.977:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c84f9f559 code=0x7ffc0000 [ 247.376834][ T27] audit: type=1326 audit(1793420860.057:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6c84f9f559 code=0x7ffc0000 [ 247.431301][ T27] audit: type=1326 audit(1793420860.117:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c84f9f559 code=0x7ffc0000 [ 247.506574][ T27] audit: type=1326 audit(1793420860.117:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c84f9f559 code=0x7ffc0000 [ 247.648675][ T5562] loop0: detected capacity change from 0 to 512 [ 247.679279][ T5562] ext2: Unknown parameter 'pcr' [ 247.913160][ T5570] ip_tables: iptables: counters copy to user failed while replacing table [ 254.888758][ T5611] ip_tables: iptables: counters copy to user failed while replacing table [ 255.730790][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.737568][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.534091][ T5624] loop3: detected capacity change from 0 to 512 [ 258.552294][ T5624] ext2: Unknown parameter 'pcr' [ 258.624606][ T5625] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.918492][ T5626] loop3: detected capacity change from 0 to 128 [ 258.927508][ T5626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 258.956986][ T5626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.865155][ T5678] loop1: detected capacity change from 0 to 512 [ 264.963987][ T5680] loop4: detected capacity change from 0 to 512 [ 264.985003][ T5680] ext2: Unknown parameter 'pcr' [ 265.024087][ T5678] EXT4-fs error (device loop1): ext4_get_journal_inode:5769: comm syz.1.302: inode #2147418112: comm syz.1.302: iget: illegal inode # [ 265.155684][ T5678] EXT4-fs (loop1): no journal found [ 265.188919][ T5678] EXT4-fs (loop1): can't get journal size [ 265.236201][ T5678] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 265.293387][ T5678] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 265.354033][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 265.543516][ T5682] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 267.144366][ T5628] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.272247][ T3603] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 267.447832][ T5688] loop4: detected capacity change from 0 to 128 [ 267.455978][ T5688] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 267.469084][ T5688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.716770][ T3603] usb 4-1: device descriptor read/64, error -71 [ 269.958170][ T5704] ip_tables: iptables: counters copy to user failed while replacing table [ 270.026585][ T3603] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.659749][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 270.856571][ T3603] usb 4-1: Using ep0 maxpacket: 16 [ 271.596967][ T3603] usb 4-1: device descriptor read/all, error -71 [ 271.614112][ T3603] usb usb4-port1: attempt power cycle [ 274.137727][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 274.360721][ T22] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 274.412724][ T22] usb 2-1: config 1 has no interface number 0 [ 274.521233][ T22] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 276.076775][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.156368][ T22] usb 2-1: Product: syz [ 276.171775][ T22] usb 2-1: Manufacturer: syz [ 276.188569][ T22] usb 2-1: SerialNumber: syz [ 279.220761][ T22] usb 2-1: 3:0 : does not exist [ 279.225750][ T22] usb 2-1: 3:0 : does not exist [ 279.310294][ T22] usb 2-1: USB disconnect, device number 12 [ 279.549665][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.978769][ T5754] loop1: detected capacity change from 0 to 512 [ 280.216048][ T5754] ext2: Unknown parameter 'pcr' [ 282.059565][ T5754] loop1: detected capacity change from 0 to 128 [ 282.102575][ T5754] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 282.167084][ T5754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.064792][ T5780] loop1: detected capacity change from 0 to 512 [ 283.087527][ T5780] ext2: Unknown parameter 'pcr' [ 283.182326][ T3603] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 283.580939][ T3603] usb 4-1: device descriptor read/64, error -71 [ 286.668282][ T3603] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.240672][ T5851] overlayfs: unrecognized mount option "verity=off" or missing value [ 301.006782][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 301.196584][ T22] usb 4-1: device descriptor read/64, error -71 [ 301.469854][ T5874] loop1: detected capacity change from 0 to 256 [ 301.653671][ T5877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.360'. [ 304.701919][ T5893] overlayfs: unrecognized mount option "verity=off" or missing value [ 305.666840][ T4353] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 305.896577][ T4353] usb 2-1: Using ep0 maxpacket: 16 [ 306.566538][ T4353] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 306.596594][ T4353] usb 2-1: can't read configurations, error -71 [ 306.780085][ T5906] loop1: detected capacity change from 0 to 512 [ 307.830309][ T5906] ext2: Unknown parameter 'pcr' [ 307.914521][ T5867] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.253256][ T5910] loop1: detected capacity change from 0 to 128 [ 308.268022][ T5910] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 308.280203][ T5910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.386652][ T4352] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 310.419914][ T5920] loop4: detected capacity change from 0 to 512 [ 310.448997][ T5920] ext2: Unknown parameter 'pcr' [ 310.696555][ T4352] usb 2-1: Using ep0 maxpacket: 16 [ 310.704227][ T4352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.726549][ T4352] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.756738][ T4352] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 310.765956][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.777138][ T4352] usb 2-1: config 0 descriptor?? [ 310.787888][ T4352] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 312.549202][ T4352] usb 2-1: USB disconnect, device number 15 [ 314.711627][ T5944] overlayfs: unrecognized mount option "verity=off" or missing value [ 316.773412][ T5949] loop0: detected capacity change from 0 to 256 [ 317.040155][ T5951] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.169848][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176395][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590906][ T5964] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 320.206707][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 320.214610][ T4348] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 320.506713][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 320.506760][ T4348] usb 4-1: Using ep0 maxpacket: 16 [ 320.710549][ T4348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.825102][ T4348] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 321.098451][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.128311][ T22] usb 2-1: config 129 has an invalid interface number: 6 but max is 0 [ 321.156574][ T22] usb 2-1: config 129 has no interface number 0 [ 321.162933][ T22] usb 2-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 321.174661][ T4348] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.186688][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.224200][ T22] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 321.237581][ T4348] usb 4-1: config 0 descriptor?? [ 321.260083][ T4348] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 321.267876][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.276015][ T22] usb 2-1: Product: syz [ 321.304728][ T22] usb 2-1: Manufacturer: syz [ 321.314872][ T22] usb 2-1: SerialNumber: syz [ 322.858534][ T4348] usb 4-1: USB disconnect, device number 17 [ 322.866225][ T22] hub 2-1:129.6: bad descriptor, ignoring hub [ 322.886031][ T22] hub: probe of 2-1:129.6 failed with error -5 [ 322.937580][ T22] sierra 2-1:129.6: Sierra USB modem converter detected [ 322.989610][ T22] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 323.046891][ T22] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 323.127869][ T22] usb 2-1: USB disconnect, device number 16 [ 323.138541][ T22] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 323.294572][ T6009] loop1: detected capacity change from 0 to 256 [ 323.356915][ T22] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 323.382830][ T6009] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.172645][ T22] sierra 2-1:129.6: device disconnected [ 324.463468][ T6019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.390'. [ 324.852042][ T6023] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.933348][ T6023] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 328.634746][ T6045] overlayfs: unrecognized mount option "verity=off" or missing value [ 332.143278][ T6068] ip_tables: iptables: counters copy to user failed while replacing table [ 332.266684][ T4353] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 333.002978][ T6075] ip_tables: iptables: counters copy to user failed while replacing table [ 333.076598][ T4353] usb 5-1: Using ep0 maxpacket: 32 [ 333.734928][ T4353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.756290][ T4353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.775540][ T4353] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 333.784880][ T4353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.801241][ T4353] usb 5-1: config 0 descriptor?? [ 334.231755][ T4353] usbhid 5-1:0.0: can't add hid device: -71 [ 334.250741][ T4353] usbhid: probe of 5-1:0.0 failed with error -71 [ 334.287398][ T4353] usb 5-1: USB disconnect, device number 7 [ 334.466703][ T4352] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 335.406580][ T4352] usb 3-1: Using ep0 maxpacket: 16 [ 335.546634][ T4352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.606894][ T4352] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 335.726655][ T4352] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.767094][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.834160][ T4352] usb 3-1: config 0 descriptor?? [ 335.880795][ T4352] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 337.499583][ T6102] loop0: detected capacity change from 0 to 512 [ 337.554090][ T6102] ext2: Unknown parameter 'pcr' [ 337.818961][ T6102] loop0: detected capacity change from 0 to 128 [ 337.827665][ T6102] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 337.841161][ T6102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.170284][ T3603] usb 3-1: USB disconnect, device number 11 [ 338.196661][ T4353] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 338.386768][ T4353] usb 2-1: Using ep0 maxpacket: 32 [ 338.415174][ T4353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 338.447874][ T4353] usb 2-1: config 129 has an invalid interface number: 6 but max is 0 [ 338.488707][ T6120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.416'. [ 338.500243][ T4353] usb 2-1: config 129 has no interface number 0 [ 339.591257][ T4353] usb 2-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 339.620631][ T4353] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 339.636538][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.673141][ T4353] usb 2-1: Product: syz [ 339.696860][ T4353] usb 2-1: Manufacturer: syz [ 339.701542][ T4353] usb 2-1: SerialNumber: syz [ 340.041158][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.095915][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.265039][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.355785][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.423625][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.658718][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.261319][ T6138] overlayfs: unrecognized mount option "verity=off" or missing value [ 342.205569][ T6144] ip_tables: iptables: counters copy to user failed while replacing table [ 343.814544][ T4353] hub 2-1:129.6: bad descriptor, ignoring hub [ 343.866592][ T4353] hub: probe of 2-1:129.6 failed with error -5 [ 343.922031][ T4353] sierra 2-1:129.6: Sierra USB modem converter detected [ 343.988409][ T4353] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 344.034076][ T4353] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 344.185688][ T4353] usb 2-1: USB disconnect, device number 17 [ 344.766653][ T4353] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 344.817929][ T4353] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 344.857640][ T4353] sierra 2-1:129.6: device disconnected [ 344.992255][ T6157] loop0: detected capacity change from 0 to 512 [ 345.067410][ T6157] ext2: Unknown parameter 'pcr' [ 345.742857][ T6164] ip_tables: iptables: counters copy to user failed while replacing table [ 347.787286][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.157705][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.166115][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.175223][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.191544][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 349.199820][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.238984][ T6167] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.247512][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 352.852744][ T6192] overlayfs: unrecognized mount option "verity=off" or missing value [ 353.632139][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 354.203540][ T4444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.918676][ T6204] netlink: 76 bytes leftover after parsing attributes in process `syz.0.428'. [ 354.967606][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 355.059283][ T4444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.632481][ T4444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.647330][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 356.923413][ T4444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.727045][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 358.739670][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.752514][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.777768][ T6167] device bridge_slave_0 entered promiscuous mode [ 359.167187][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.176779][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.237495][ T6167] device bridge_slave_1 entered promiscuous mode [ 360.177118][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.284794][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.552196][ T6167] team0: Port device team_slave_0 added [ 360.589114][ T6167] team0: Port device team_slave_1 added [ 361.261941][ T6238] overlayfs: unrecognized mount option "verity=off" or missing value [ 363.637354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.748890][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.823178][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.946615][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.998764][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.005861][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.176962][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.963010][ T6271] loop0: detected capacity change from 0 to 512 [ 367.031131][ T6167] device hsr_slave_0 entered promiscuous mode [ 367.058221][ T6271] ext2: Unknown parameter 'pcr' [ 367.142587][ T6167] device hsr_slave_1 entered promiscuous mode [ 367.151202][ T6273] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.219497][ T6167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.234326][ T6167] Cannot create hsr debugfs directory [ 367.359787][ T6278] loop0: detected capacity change from 0 to 128 [ 368.777278][ T6278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 368.789756][ T6278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.886612][ T3603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 373.076613][ T3603] usb 1-1: Using ep0 maxpacket: 16 [ 373.083378][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.157281][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.183576][ T3603] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 373.216489][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.241911][ T3603] usb 1-1: config 0 descriptor?? [ 373.446198][ T6316] ip_tables: iptables: counters copy to user failed while replacing table [ 374.163479][ T3603] hid_parser_main: 465 callbacks suppressed [ 374.163498][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.181399][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.189643][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.197825][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.205966][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.214208][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.222654][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.230878][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.239160][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 374.247368][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 375.296968][ T3603] aquacomputer_d5next 0003:0C70:F00D.0005: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 375.440732][ T3603] usb 1-1: USB disconnect, device number 5 [ 376.858860][ T6167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.975426][ T6167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.990873][ T6323] fido_id[6323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 378.332927][ T6341] overlayfs: unrecognized mount option "verity=off" or missing value [ 379.068842][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.075206][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.457684][ T6167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.571630][ T6167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.966509][ T4347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 382.166660][ T4347] usb 5-1: Using ep0 maxpacket: 16 [ 382.184194][ T4347] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 382.268313][ T4347] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.326539][ T4347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 382.343320][ T4347] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 382.416834][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.477415][ T4347] usb 5-1: config 0 descriptor?? [ 383.630872][ T4347] hid_parser_main: 465 callbacks suppressed [ 383.630895][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.666647][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.673698][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.826376][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.836488][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.843539][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.912558][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.925452][ T4347] a4tech 0003:09DA:0006.0006: unknown main item tag 0x0 [ 383.965442][ T4347] a4tech 0003:09DA:0006.0006: unbalanced collection at end of report description [ 383.996591][ T4347] a4tech 0003:09DA:0006.0006: parse failed [ 384.002493][ T4347] a4tech: probe of 0003:09DA:0006.0006 failed with error -22 [ 384.067149][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.156032][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.242440][ T6379] loop0: detected capacity change from 0 to 512 [ 384.266501][ T4444] device hsr_slave_0 left promiscuous mode [ 384.287407][ T4444] device hsr_slave_1 left promiscuous mode [ 384.937923][ C0] ================================================================== [ 384.946023][ C0] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 384.953700][ C0] Write of size 8 at addr ffff88807dc19268 by task syz.3.465/6385 [ 384.961511][ C0] [ 384.963859][ C0] CPU: 0 PID: 6385 Comm: syz.3.465 Not tainted syzkaller #0 [ 384.971151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.981232][ C0] Call Trace: [ 384.984556][ C0] [ 384.987424][ C0] dump_stack_lvl+0x188/0x24e [ 384.992224][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 384.997299][ C0] ? show_regs_print_info+0x12/0x12 [ 385.002547][ C0] ? load_image+0x410/0x410 [ 385.007077][ C0] ? __virt_addr_valid+0x467/0x540 [ 385.012220][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 385.017522][ C0] print_report+0xa8/0x210 [ 385.021963][ C0] kasan_report+0x10b/0x140 [ 385.026512][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 385.031907][ C0] __xfrm_state_delete+0x3db/0x940 [ 385.037045][ C0] xfrm_timer_handler+0x10b/0x970 [ 385.042098][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 385.047138][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 385.053054][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 385.058272][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 385.064186][ C0] ? _raw_spin_unlock+0x40/0x40 [ 385.069058][ C0] __hrtimer_run_queues+0x522/0xc90 [ 385.074480][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 385.079518][ C0] ? hrtimer_interrupt+0x980/0x980 [ 385.084646][ C0] hrtimer_run_softirq+0x173/0x290 [ 385.089772][ C0] handle_softirqs+0x291/0x910 [ 385.094613][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 385.099479][ C0] ? do_softirq+0x210/0x210 [ 385.103995][ C0] ? hrtimer_interrupt+0x775/0x980 [ 385.109132][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 385.114398][ C0] __irq_exit_rcu+0x13b/0x230 [ 385.119098][ C0] ? irq_exit_rcu+0x20/0x20 [ 385.123627][ C0] irq_exit_rcu+0x5/0x20 [ 385.127906][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 385.133598][ C0] [ 385.136566][ C0] [ 385.139579][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.145633][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 385.152183][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9f 64 17 f7 65 8b 05 30 01 c1 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 385.171822][ C0] RSP: 0000:ffffc900038e6d20 EFLAGS: 00000206 [ 385.177910][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ef1f1bc5e5546400 [ 385.185914][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: 0000000000000001 [ 385.193988][ C0] RBP: ffffc900038e6db0 R08: ffffffff91b62287 R09: 1ffffffff236c450 [ 385.201989][ C0] R10: dffffc0000000000 R11: fffffbfff236c451 R12: dffffc0000000000 [ 385.209980][ C0] R13: dffffc0000000000 R14: ffff88807944a050 R15: 1ffff9200071cda4 [ 385.217975][ C0] ? _raw_spin_unlock+0x40/0x40 [ 385.222844][ C0] ? lru_add_fn+0xaa1/0x1890 [ 385.227449][ C0] folio_batch_move_lru+0x524/0x690 [ 385.232674][ C0] ? folio_add_lru+0xcf0/0xcf0 [ 385.237490][ C0] ? lru_add_drain_cpu+0x880/0x880 [ 385.242644][ C0] ? folio_batch_add_and_move+0x7b/0x250 [ 385.248326][ C0] ? folio_add_lru+0x319/0xcf0 [ 385.253100][ C0] folio_add_lru+0x412/0xcf0 [ 385.257721][ C0] shmem_get_folio_gfp+0x1750/0x35e0 [ 385.263027][ C0] shmem_write_begin+0xee/0x3f0 [ 385.267889][ C0] generic_perform_write+0x2fa/0x5c0 [ 385.273206][ C0] ? generic_file_direct_write+0x330/0x330 [ 385.279042][ C0] ? __file_remove_privs+0x5f0/0x5f0 [ 385.284335][ C0] ? rwsem_write_trylock+0x135/0x1c0 [ 385.289632][ C0] ? clear_nonspinnable+0x60/0x60 [ 385.294663][ C0] ? generic_write_checks_count+0x363/0x440 [ 385.300566][ C0] __generic_file_write_iter+0x148/0x2a0 [ 385.306229][ C0] generic_file_write_iter+0xab/0x2e0 [ 385.311684][ C0] __kernel_write_iter+0x298/0x690 [ 385.316848][ C0] ? vfs_read+0x960/0x960 [ 385.321214][ C0] ? dump_user_range+0x279/0x7b0 [ 385.326158][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 385.330862][ C0] dump_user_range+0x374/0x7b0 [ 385.335679][ C0] ? dump_skip+0x40/0x40 [ 385.339951][ C0] elf_core_dump+0x30ca/0x3630 [ 385.344739][ C0] ? load_elf_binary+0x2820/0x2820 [ 385.349871][ C0] ? dump_vma_snapshot+0xaea/0xe40 [ 385.355002][ C0] ? verify_lock_unused+0x140/0x140 [ 385.360217][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 385.365267][ C0] ? mas_next_entry+0xe03/0xe90 [ 385.370151][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 385.375628][ C0] ? 0xffffffffff600000 [ 385.379803][ C0] ? getname_kernel+0x142/0x2f0 [ 385.384666][ C0] do_coredump+0x1702/0x25c0 [ 385.389277][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 385.394406][ C0] ? lock_chain_count+0x20/0x20 [ 385.399280][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 385.404502][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 385.409726][ C0] get_signal+0x1093/0x1340 [ 385.414272][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 385.420312][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 385.425960][ C0] ? do_user_addr_fault+0x818/0xbb0 [ 385.431171][ C0] ? get_sigframe_size+0x10/0x10 [ 385.436118][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 385.442113][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 385.447585][ C0] exit_to_user_mode_loop+0x70/0x110 [ 385.452880][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 385.458437][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 385.463904][ C0] exc_page_fault+0x88/0x100 [ 385.468520][ C0] asm_exc_page_fault+0x22/0x30 [ 385.473378][ C0] RIP: 0033:0x7f56f319f561 [ 385.477810][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 385.497432][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 385.503506][ C0] RAX: 0000000000000000 RBX: 00007f56f3425fa0 RCX: 00007f56f319f559 [ 385.511485][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 385.519479][ C0] RBP: 00007f56f3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 385.527457][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 385.535443][ C0] R13: 00007f56f3426038 R14: 00007f56f3425fa0 R15: 00007ffe78c03c38 [ 385.543514][ C0] [ 385.546544][ C0] [ 385.548868][ C0] Allocated by task 4348: [ 385.553211][ C0] kasan_set_track+0x4b/0x70 [ 385.557829][ C0] __kasan_kmalloc+0x8e/0xa0 [ 385.562426][ C0] __kmalloc+0xb3/0x240 [ 385.566583][ C0] xfrm_hash_resize+0x84/0xff0 [ 385.571353][ C0] process_one_work+0x8ab/0x1160 [ 385.576297][ C0] worker_thread+0xaf5/0x12a0 [ 385.581064][ C0] kthread+0x29d/0x330 [ 385.585149][ C0] ret_from_fork+0x1f/0x30 [ 385.589574][ C0] [ 385.591897][ C0] Freed by task 3603: [ 385.595875][ C0] kasan_set_track+0x4b/0x70 [ 385.600475][ C0] kasan_save_free_info+0x27/0x40 [ 385.605514][ C0] ____kasan_slab_free+0x126/0x1f0 [ 385.611695][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 385.617177][ C0] __kmem_cache_free+0xb6/0x200 [ 385.622027][ C0] xfrm_hash_resize+0xdce/0xff0 [ 385.626878][ C0] process_one_work+0x8ab/0x1160 [ 385.631818][ C0] worker_thread+0xaf5/0x12a0 [ 385.636503][ C0] kthread+0x29d/0x330 [ 385.640587][ C0] ret_from_fork+0x1f/0x30 [ 385.645014][ C0] [ 385.647352][ C0] The buggy address belongs to the object at ffff88807dc19000 [ 385.647352][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 385.661404][ C0] The buggy address is located 616 bytes inside of [ 385.661404][ C0] 1024-byte region [ffff88807dc19000, ffff88807dc19400) [ 385.674782][ C0] [ 385.677106][ C0] The buggy address belongs to the physical page: [ 385.683525][ C0] page:ffffea0001f70600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807dc1f800 pfn:0x7dc18 [ 385.694982][ C0] head:ffffea0001f70600 order:3 compound_mapcount:0 compound_pincount:0 [ 385.703396][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 385.711394][ C0] raw: 00fff00000010200 ffffea0000c86c08 ffffea00015ad008 ffff888018441dc0 [ 385.719988][ C0] raw: ffff88807dc1f800 000000000010000f 00000001ffffffff 0000000000000000 [ 385.728657][ C0] page dumped because: kasan: bad access detected [ 385.735090][ C0] page_owner tracks the page as allocated [ 385.740807][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4101, tgid 4101 (dhcpcd-run-hook), ts 62412966898, free_ts 62406456497 [ 385.762429][ C0] post_alloc_hook+0x173/0x1a0 [ 385.767211][ C0] get_page_from_freelist+0x206b/0x2180 [ 385.772789][ C0] __alloc_pages+0x1ec/0x4f0 [ 385.777409][ C0] alloc_slab_page+0x5d/0x180 [ 385.782096][ C0] new_slab+0x87/0x2d0 [ 385.786181][ C0] ___slab_alloc+0xbc5/0x1240 [ 385.790883][ C0] __kmem_cache_alloc_node+0x126/0x270 [ 385.796350][ C0] __kmalloc+0xa3/0x240 [ 385.800506][ C0] load_elf_binary+0x26e/0x2820 [ 385.805366][ C0] bprm_execve+0xaf7/0x17e0 [ 385.809896][ C0] do_execveat_common+0x501/0x6b0 [ 385.814931][ C0] __x64_sys_execve+0x8e/0xa0 [ 385.819619][ C0] do_syscall_64+0x4c/0xa0 [ 385.824046][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.829969][ C0] page last free stack trace: [ 385.834658][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 385.840144][ C0] free_unref_page+0x2e/0x3f0 [ 385.844833][ C0] __unfreeze_partials+0x188/0x1e0 [ 385.849967][ C0] put_cpu_partial+0x17c/0x250 [ 385.854761][ C0] qlist_free_all+0x76/0xe0 [ 385.859270][ C0] kasan_quarantine_reduce+0x144/0x160 [ 385.864734][ C0] __kasan_slab_alloc+0x1e/0x80 [ 385.869598][ C0] slab_post_alloc_hook+0x4b/0x490 [ 385.874726][ C0] __kmem_cache_alloc_node+0x19d/0x270 [ 385.880188][ C0] kmalloc_trace+0x26/0xe0 [ 385.884625][ C0] tomoyo_init_log+0x10a3/0x1f90 [ 385.889576][ C0] tomoyo_supervisor+0x361/0x11b0 [ 385.894608][ C0] tomoyo_env_perm+0x14e/0x1f0 [ 385.899381][ C0] tomoyo_find_next_domain+0x12dd/0x1a30 [ 385.905044][ C0] tomoyo_bprm_check_security+0x100/0x150 [ 385.910771][ C0] security_bprm_check+0x5e/0x90 [ 385.915762][ C0] [ 385.918083][ C0] Memory state around the buggy address: [ 385.923724][ C0] ffff88807dc19100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.931790][ C0] ffff88807dc19180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.939871][ C0] >ffff88807dc19200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.947936][ C0] ^ [ 385.955389][ C0] ffff88807dc19280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.963448][ C0] ffff88807dc19300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 385.971509][ C0] ================================================================== [ 385.979681][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 385.986908][ C0] CPU: 0 PID: 6385 Comm: syz.3.465 Not tainted syzkaller #0 [ 385.994229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.004309][ C0] Call Trace: [ 386.007594][ C0] [ 386.010453][ C0] dump_stack_lvl+0x188/0x24e [ 386.015173][ C0] ? memcpy+0x3c/0x60 [ 386.019168][ C0] ? show_regs_print_info+0x12/0x12 [ 386.024385][ C0] ? load_image+0x410/0x410 [ 386.028902][ C0] panic+0x2d3/0x710 [ 386.032900][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 386.037409][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 386.043315][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.049216][ C0] ? _raw_spin_unlock+0x40/0x40 [ 386.054081][ C0] ? print_memory_metadata+0x314/0x400 [ 386.059550][ C0] check_panic_on_warn+0x80/0xa0 [ 386.064515][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 386.069809][ C0] end_report+0x66/0x110 [ 386.074073][ C0] kasan_report+0x118/0x140 [ 386.078592][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 386.083896][ C0] __xfrm_state_delete+0x3db/0x940 [ 386.089015][ C0] xfrm_timer_handler+0x10b/0x970 [ 386.094048][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 386.099073][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 386.104985][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 386.110190][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.116099][ C0] ? _raw_spin_unlock+0x40/0x40 [ 386.120961][ C0] __hrtimer_run_queues+0x522/0xc90 [ 386.126177][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 386.131225][ C0] ? hrtimer_interrupt+0x980/0x980 [ 386.136374][ C0] hrtimer_run_softirq+0x173/0x290 [ 386.141559][ C0] handle_softirqs+0x291/0x910 [ 386.146342][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 386.151205][ C0] ? do_softirq+0x210/0x210 [ 386.155717][ C0] ? hrtimer_interrupt+0x775/0x980 [ 386.160928][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 386.166138][ C0] __irq_exit_rcu+0x13b/0x230 [ 386.170828][ C0] ? irq_exit_rcu+0x20/0x20 [ 386.175343][ C0] irq_exit_rcu+0x5/0x20 [ 386.179595][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 386.185244][ C0] [ 386.188180][ C0] [ 386.191125][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.197133][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 386.203655][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9f 64 17 f7 65 8b 05 30 01 c1 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 386.223285][ C0] RSP: 0000:ffffc900038e6d20 EFLAGS: 00000206 [ 386.229364][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ef1f1bc5e5546400 [ 386.237352][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: 0000000000000001 [ 386.245335][ C0] RBP: ffffc900038e6db0 R08: ffffffff91b62287 R09: 1ffffffff236c450 [ 386.253309][ C0] R10: dffffc0000000000 R11: fffffbfff236c451 R12: dffffc0000000000 [ 386.261290][ C0] R13: dffffc0000000000 R14: ffff88807944a050 R15: 1ffff9200071cda4 [ 386.269291][ C0] ? _raw_spin_unlock+0x40/0x40 [ 386.274163][ C0] ? lru_add_fn+0xaa1/0x1890 [ 386.278767][ C0] folio_batch_move_lru+0x524/0x690 [ 386.283984][ C0] ? folio_add_lru+0xcf0/0xcf0 [ 386.288764][ C0] ? lru_add_drain_cpu+0x880/0x880 [ 386.293897][ C0] ? folio_batch_add_and_move+0x7b/0x250 [ 386.299543][ C0] ? folio_add_lru+0x319/0xcf0 [ 386.304327][ C0] folio_add_lru+0x412/0xcf0 [ 386.308936][ C0] shmem_get_folio_gfp+0x1750/0x35e0 [ 386.314248][ C0] shmem_write_begin+0xee/0x3f0 [ 386.319115][ C0] generic_perform_write+0x2fa/0x5c0 [ 386.324441][ C0] ? generic_file_direct_write+0x330/0x330 [ 386.330272][ C0] ? __file_remove_privs+0x5f0/0x5f0 [ 386.335621][ C0] ? rwsem_write_trylock+0x135/0x1c0 [ 386.340921][ C0] ? clear_nonspinnable+0x60/0x60 [ 386.345963][ C0] ? generic_write_checks_count+0x363/0x440 [ 386.351873][ C0] __generic_file_write_iter+0x148/0x2a0 [ 386.357560][ C0] generic_file_write_iter+0xab/0x2e0 [ 386.362959][ C0] __kernel_write_iter+0x298/0x690 [ 386.368083][ C0] ? vfs_read+0x960/0x960 [ 386.372444][ C0] ? dump_user_range+0x279/0x7b0 [ 386.377408][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 386.382098][ C0] dump_user_range+0x374/0x7b0 [ 386.386876][ C0] ? dump_skip+0x40/0x40 [ 386.391141][ C0] elf_core_dump+0x30ca/0x3630 [ 386.395925][ C0] ? load_elf_binary+0x2820/0x2820 [ 386.401054][ C0] ? dump_vma_snapshot+0xaea/0xe40 [ 386.406186][ C0] ? verify_lock_unused+0x140/0x140 [ 386.411403][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 386.416461][ C0] ? mas_next_entry+0xe03/0xe90 [ 386.421349][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 386.426829][ C0] ? 0xffffffffff600000 [ 386.430996][ C0] ? getname_kernel+0x142/0x2f0 [ 386.435872][ C0] do_coredump+0x1702/0x25c0 [ 386.440489][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 386.445627][ C0] ? lock_chain_count+0x20/0x20 [ 386.450491][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 386.455716][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 386.460963][ C0] get_signal+0x1093/0x1340 [ 386.465498][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.471509][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 386.477177][ C0] ? do_user_addr_fault+0x818/0xbb0 [ 386.482396][ C0] ? get_sigframe_size+0x10/0x10 [ 386.487346][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.493351][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 386.498836][ C0] exit_to_user_mode_loop+0x70/0x110 [ 386.504169][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 386.509738][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 386.515236][ C0] exc_page_fault+0x88/0x100 [ 386.519853][ C0] asm_exc_page_fault+0x22/0x30 [ 386.524724][ C0] RIP: 0033:0x7f56f319f561 [ 386.529144][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 386.548771][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 386.554854][ C0] RAX: 0000000000000000 RBX: 00007f56f3425fa0 RCX: 00007f56f319f559 [ 386.562832][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 386.570841][ C0] RBP: 00007f56f3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 386.578828][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 386.586836][ C0] R13: 00007f56f3426038 R14: 00007f56f3425fa0 R15: 00007ffe78c03c38 [ 386.594915][ C0] [ 386.598526][ C0] Kernel Offset: disabled [ 386.602859][ C0] Rebooting in 86400 seconds..