last executing test programs: 17.493501047s ago: executing program 4 (id=475): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x1, 0x2}) 16.629923744s ago: executing program 4 (id=478): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x1, 0x2}) 14.89576571s ago: executing program 1 (id=481): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x2, "ee4f6da8d2cf4011ac7b00", 0x43353039}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r5, r5, 0x0, 0x2) 12.916576639s ago: executing program 4 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0, 0x1, 0x20000001}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x40000000008, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r2, &(0x7f0000000340)=@known='user.syz\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.515755868s ago: executing program 1 (id=487): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2f, 0x6}, {0x9, 0x1}]}, 0x14, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) semop(0x0, &(0x7f0000000040)=[{0x4, 0x70, 0x800}], 0x1) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200), 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) lstat(0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) 10.672415055s ago: executing program 1 (id=488): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x1, 0x2}) 10.301027642s ago: executing program 0 (id=489): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2f, 0x6}, {0x9, 0x1}]}, 0x14, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) semop(0x0, &(0x7f0000000040)=[{0x4, 0x70, 0x800}], 0x1) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200), 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) lstat(0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) 9.358797141s ago: executing program 2 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={0x0, 0x0, 0x4, 0x0, 0x1, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) 9.206388894s ago: executing program 0 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f0000000c00)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {&(0x7f0000000cc0)="3d044f36f5552e866c3e5bb625333ef189fed6d8891dcfb57a8af0678117c5669c82577417732f234f36a56f0d93d87af4c5fc3ab6cee7349ad7727eb4a3c5112fe13630c22e2455ea850820fbcbf233c0313409a9988cdff271cee9ed03d0d21e5ce72041046a8f77a63ff19fc8b050c522430571530885a968f466dca589223abdb0d2ef3d65ae3d3330e20d2b0a65514313c8a11f2aabb1a771b5704198da9cf8c4650ca654d2fa047c4b8800efa103147f9d2a94c6d1b4e21b3c9dbd8cb8d2aaaef558253cfc76e7b5541cf74c26d20a3ac061f8cb7a92b4c4e38f5db671b3b065a358d76662135ddd869b42e4dc2e9ed3b4b232a4215e30f688caef66ebac74f58ef34139266bcfb7055a838fe80dc25a1b541c8e673e56e94b1263c900122a5bd4a1670b9fabface28fef99d81bcce6727eea3403ae2ecdd69b1c6b5c84c7ce6b0ee500aafde6a7c87d3e2dad571e2a983cb9a5b02d2779033f95e2eb88cee8fd792f8354acf392a73ea69e724634f7858d351c564f2206ab6001cafc78bd91c10de8b370920b085f76fbf49a1b30c52ede89d87f59dff53a4c17fa2450904fdd726f33510e200166034a078434064cc018035d45e242feb43840240944a9f056d105350cca3ed1a58253fd70b292e4a61c0178ed37d7dce2164a7607fdf9e0ea2f0e48d3b94c05db51566f9c9e6c5d8db185723fc3fd74408a33f98682fd5bd371db5d87ae8d7f9969a7b7975a97030445a959cde1a0910d37b1cc2be02c7b924288dbdef1edcb1005679ff13d3e42df5f35e5a2db1782e76ff2b54b11dc6245b7c974d61c730bec067a2f4869c45e1d984914dd253e9318173925918dac1199fd8f920c8412d2db567374fb8b662c718f462aeafd5bfa0ac8ab0d084a6bac390cb0375159a988f784ad996a48c8813d3dec5c0d1e0922f3a9a35d17883e93d141b0df2727aa61f4e6fb3b363773e0ea670b2d22781b1ea0464047397a028840d05eac44c0463218b0b345306b68da577c019d8f9349854f7feae6211c8d901399f26c5cb06ad60dc4d6e0db1c3f266b0c11a8f3fe30575cef7ae4195c1aa2be4816d2a1e00bb22cc0992e19b7cae73e8cce4878c5d0413965426344b1f58668869969113c5cf5d2dcbc74395c93d871b1df40750a3e2bf415d0cebb2c4398885cd59c06e8a8efecab9e4088350f17ad68d21b9ab92beb888b0cd8ea0fa91d4d41bbdb7b8a10bef8b04027a66db34dd6dbc67615e1f2b794019303861e312366980ff015aaaa3e89ea627318c530ee2b2340b3d57027701413e00a2e22072380123e8749e3b5d19021d750b435b2c6c08ae7710c5e90bd918ad9e6c3f520616a19fa5fda161ab24d56d4b29d6e71880575fcb4fb66c6f1a22a7bbfcdfdfd39d8302f722f9aab98fc4b7474f151e1bc7ead7271b63ca5a51215cf0b417b6c0ca8ca3f72b723ffa66a96f70f281f98dabab1956cb4e4decffa7cf4a272b3b811b833b1db02a7a785d39d62c315d7a6aba26a0f86a0e9194f1c2d42b472333d8e077ffaa2f9c100198d5a857d5d1789c14a0ddf0560045ce96a109514c38580e29988c669ca2838b555304294338112ad52e6ab89cd2c1b2de6aa8c7c07d2d955905fa79577f3ad12bcfb919440c4610082ac7da2cb2d2d81ae8cafad94f53776a5f49816d0588c03868e432863e28024cbc9270bac8886cdf8c95768ee50475cc4502cf3f51f217c04050fc5623a21a1e0b034e55d3610158af853ed0d091aaa94b5ad4e1ea4ffce865fb3d5f8867f3a67b48c2c8028bd9f42afa88c0d3fe5c2fe3f7c99a9609eaa8c1d50f542b55c5673a3f761fad232afecaaee20792a97e9bb196dda2cfb26f770adc2250deb8e0f8db9c1416e5c2cf6f5be7383efa377ca4594d65c370bbf1713e30e2dd0b159a88a2928eea13a285d08f83eaed977ca380960e070e57bb689aa034ebedc9e6cbf6f57d13f3f9a79722a97a3875629077b33fc5fbcb62a11fdfa932ec5d89bab5b076f902c9fb62fa1289dca4cb0845cf95d6838748b741d1a3d4ccd37d2a40ce4ef881032dffc44148e93672d380d0fdd7677a4a295cd377f8e48f10dd691ae2e288ad632d5e7c6c57da71885e3935d8839e0a05a8ff7749a0fed7b7cb23de745cde57982ce362503d26659e2080fb9ff5ca63bd610460a5dc119f05cb1b006b64de5a078f84a1e302565f414fa6316b6607e03c18805948ff6c16d8b8eeab2ad5fa7ce5940f3fcd911ec6d80230b15563fbd2be0dc09e529327a2374d5c15fe667b8168c88ecb0d13cd2ee4f994cce0272c99be012a0d092f4000756be625284f9aecd9565c43bb0f69ea5b16284b024f31122e3e6e7104d0f8d5ac96f0cd4a9e53372f0a5df793e1b4d57a0f91619b2daf21299fd9fcfacfbbe0b27643a4597073c6da888d85d873ac26190bd6386967da5f1da6b18b19944d1279aae4aba62c4120171deb0eb1e1a1ac4f8d0bfe73e7dd0204e3682fa83c11f3b695a54a3e024a7937b87bd891326bf8b1061e9a49d3a660c49eb4a39bb92259ebdc4982475c873b1d85e9713f3271882eebd090ccb167ae9a59829b62235352b664f1c050766a55350f7981b1f885aae6a84a99547530cf5dcfe30b27328d5c2561692358d1acbe9bc1999a927c8daf630a4cb945e15d441cfed27874cee9dd820f4f59331b66a3b86b24540bd3dd2207081564c0d9e5788fa908cbbbc5eb8b3b39cf0944ddeb452913013de160b83013a6ce6c71a4ebb9fba0c64e69d11296b386252bea3dc03e0b3c415fcd8a53a5cd49f3e725ef7e7bd43144f51f78a79713e3f2a12f5fe4ee52164d48aec30e8688dc3b5b5fe5f23dec7abf0aee5b148d09d948c1afeae1e0cbff4563423118b5bfbedb74e01486d2c1eef94c7b66ff3e76db46ece84154aa8ec462f6ec84f0942c6cad475aafd7d2647a58606a24c182669705b273545ecadcf9d6eef33c95dcb1f09ac944ef816ffe3586c322afcf3d750a87bef633cdc9fb413134494e972b7ca65c091822346a1fa0223e77a41c937b7e0ab71d243c65d3a09fb57bca2e2a2c2941bac03bfba3bb38c56d5478eab5dbf6b33f3aba56cb0d9ee8d55dd98bc48d6beb246d3fb0aa52eab253d10802ef7e70bccdd3ec265381896bd3623600f7904752055317d67e3f36494a8e0d8ac911b46e1b36c0dc57d13174ff05886303ae3c2ef4f06071132cc1885219a699ba1d79a985f9b21d2147497152eca2308e9c9a3be3ee5e0c0b7fa5fc3f33fe12cb2c026334e453db615b4f74d1c0288c184a4c14b053c3a071513f4f7c8a3997693f111753739bd0eeef4f890a420bd0110f7296799a505762ae44297f2a04304b71563ad9cc8f68b927790d18f58da8804394a4d0919d939167b0e4cdee6ba88208c628a466a05d52ef09126271e82c4a7e4b0fd66885d2d6bf563b01d9ce1ce58f1dea91312a9031b335ba7665da23d15e259008b56b89b49bf1aa1007ea35b125f78f43f619fe4c6ceb8445cf5fb866faca2902ae303142525401dfa24b148307e0a18620baba8fea648b551e6c3092d126192ff51b396b00dafc2fc4f1149e3d7d4572d2dca69b262dfe69b2d1d7ac61ebe61a2ae46b18c20e98db24ff39e314c1c62520af9d1847c104caca86a3df151fea892463ceb0929f44934a67c09ffc3ced430f38b1f3889e87fd3f99bf1f467a6c763965d8bc69ae5a77655798daea573345647c312362f3a86cb043baef0a4ccb1aee536229a821c6897ff5cb1e5b8a818d12e6482155caa6d151de00d5eeb50d83543d73c2cc486a7c86326a92e184fd822bc750aed095442f3e6eaaced52ae72e80b39a8e663af9dc26341798dbe5e4863b823485f5cd25f35f9f16b2578201a7662a831ded8f2afbe9ebf233e504824727eb9605e2f1097ca9d17640ac489a61c11c5d76c7afd1dfcd09210c89856654ea4be6460ae9af5a0950b5a20a28a2b2b28387f985d981d072b5c0561d1eb8b9075038eda12ee2fa1224f6ca2b67c7193df72ddc4e910c93d7544fb594833b204a01baa0e1079e4a1cad6b6edb2a31dea3814bdeb411f1a1a4d854dc99f000662957872005db01471a95e53475263b22a47087b0c85e33db6ac30ee6f26e81b06ec9b5bd781cf386b10b0d156a703ad451b3589960a546310ae8483fe60609801e242c63125652ac8857447a0478fd98d3822afef3f9146e336eba1b241004b4bee86cc1087453ef6aceb55a2d80b57624cf149b35da9a145f08211e7880276748c37d7326fff19be41535707ef4dbeaccf9c2555b1ef3e24ac6b6065e97dacc8c514e11ab822537baf0da7f32198d1bbf74008138b4fab7453f02db9a996c98ccb0cff4e40a1e502f2a1bba20462067ea38928a42a30d844626a7feaaccede8d3f7861741d9e62bff08e621dcadb3303c836dbb7ade37633b314ca8ec219c03ba4a1c720bb37ba3727c85b6c87f0b2a4a956f4a2e9db625465479faf63b4c5cd14188ce71cd28fd610ea32306dcf7a6133d79475cbdb03dee71ab095258b34a0d02a6e138e8a386caca078eba537c42e6f7e095116dcdb70321312ed238be621404a58cf29b65c5b2ee5dc568f02bf208201215e3cefdd2e435ed11e5ae0dc85c6cf06965dcabebf25fdd10d485037ca4bb864abb907c77ce4fa817f57c7707b21ca892eb9f4d3251f4948c3145c55a7f26e0b54ca45e4c6cd189b56516a0c99ef3f9f54e5ea859565bf2595e9b41d2c350cebc830f06073c215e00bfa38e4852803d757c4b1fb756bd675446452eae04316d4dc613b9b43421156fa642019d7c23ca77a52a3841b3f0d356d18ed34f864243a14b8c84ed5933d2a3d48038127b838311781198c8493d1fa462bd558953ff1ed6607e610051b1c337a741fc42a7cedd5a4ffa08cdeb59e08734833657cb59e05bf22989475f1fa7a17fbbb9a6996e17e67012b4e84de956a6540d5b62d29bb56eeb25", 0xdc7}, {&(0x7f0000001cc0)="7e8868c4fa91f7287c4914d238ba5b3168d743ba56132b7ca796aa41b127c5059e5332aec14e81434e04624a61e2c081e134a10dd7506a4a5fb431e9a25e9e37da2ba01830a7a005049e2cf7ffa27863b52a8ec33ebb8c04721a7a6eb72b1c928632c24762428c6fcd35290535bf7ec8ca332f52f754d870e5f820eaee95af433941ddd2db5bb153dde9b00bbba72bb4c2cf2ee29c8e8d67536b4824d37f4f7a2117f93f3ebbf95f1b31a22159fefe9e08f7cabddca0eb226531ae41a8096b0092b7ce63ee48c8ff3f7e12821d20636a0c36815747739c1e8a719fd97ce76f9583cfb6eefbde737325dd96b060ab964323e0124efe1dad5e", 0xf8}], 0x5) 8.313459662s ago: executing program 2 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x24, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(&(0x7f0000000040), 0xd0f, 0x103000) keyctl$set_reqkey_keyring(0xe, 0x3) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.543423388s ago: executing program 2 (id=496): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) getpid() r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) vmsplice(r6, &(0x7f0000000540)=[{&(0x7f0000000140)="e1", 0x1}], 0x1, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x20040020) 6.395180931s ago: executing program 0 (id=497): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 5.832086562s ago: executing program 4 (id=498): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.540227408s ago: executing program 1 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={0x0, 0x0, 0x4, 0x0, 0x1, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) 5.48286494s ago: executing program 0 (id=501): io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.310268533s ago: executing program 2 (id=502): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pipe2(0x0, 0x4000) gettid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x6000, 0x5, 0x3, 0x2, 0x0, [{0x3, 0xe, 0x5, '\x00', 0x1}, {0x8, 0x8, 0xd4, '\x00', 0x40}, {0x6, 0x8, 0x6b, '\x00', 0x9}, {0x2, 0x9, 0x4}, {0x8, 0x8, 0x6, '\x00', 0x7}, {0xfa, 0x3, 0x0, '\x00', 0x6}, {0x3, 0x8, 0x0, '\x00', 0xa}, {0x81, 0x0, 0x3, '\x00', 0x4}, {0x2, 0xf6, 0x1, '\x00', 0xf}, {0xfb, 0xfe, 0x0, '\x00', 0x1}, {0x7, 0xb, 0x6, '\x00', 0x4}, {0x7, 0x74, 0x7d, '\x00', 0xa}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x7, 0xd, 0x60, '\x00', 0x8}, {0x7f, 0x1, 0x2, '\x00', 0x1}, {0x8, 0x8, 0x9, '\x00', 0x3}, {0x6, 0x7, 0x3, '\x00', 0xc}, {0x8, 0xbe, 0xd6, '\x00', 0x6}, {0x5, 0xe, 0x2, '\x00', 0x1}, {0xcf, 0x7f, 0xd4, '\x00', 0x9}, {0x70, 0x81, 0x2, '\x00', 0x81}, {0x9, 0xf5, 0xff, '\x00', 0x7f}, {0x91, 0x1, 0x6, '\x00', 0x7c}, {0x9c, 0x8, 0x40, '\x00', 0x6}]}}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48}) getrlimit(0xf, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x3) clock_gettime(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x151, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 5.128105246s ago: executing program 0 (id=503): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2f, 0x6}, {0x9, 0x1}]}, 0x14, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) semop(0x0, &(0x7f0000000040)=[{0x4, 0x70, 0x800}], 0x1) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200), 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) lstat(0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) 4.314828483s ago: executing program 1 (id=504): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 3.587930487s ago: executing program 1 (id=506): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x69, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x2, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x6, 0x24, 0x6, 0x0, 0x0, 'c'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x3, 0x8}, [@mdlm_detail={0xc, 0x24, 0x13, 0x3, "e6efa8c7ea13200a"}, @ncm={0x6, 0x24, 0x1a, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xe2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8a, 0x7f, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf7, 0x1, 0x3}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.870821622s ago: executing program 2 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x800}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sched_getparam(0xffffffffffffffff, &(0x7f0000000000)) 2.765035614s ago: executing program 3 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000006000000000308000440000000"], 0xc0}}, 0x0) 2.190793326s ago: executing program 0 (id=509): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc0102030109021200"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 2.140638936s ago: executing program 2 (id=510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.129735117s ago: executing program 3 (id=511): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 2.057232598s ago: executing program 4 (id=512): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1.313504123s ago: executing program 3 (id=513): io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.217863725s ago: executing program 3 (id=514): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000140)="e1", 0x1}], 0x1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 1.085875028s ago: executing program 3 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={0x0, 0x0, 0x4, 0x0, 0x1, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) 105.878657ms ago: executing program 3 (id=516): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 0s ago: executing program 4 (id=517): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 63.502728][ T4260] cgroup: Unknown subsys name 'net' [ 63.635932][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.934469][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.603275][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.611392][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.624989][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.633247][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.641976][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.649636][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.657326][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.665080][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.673058][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.681127][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.689492][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.697468][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.706414][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.713563][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.720652][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.728822][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.736673][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.736755][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.743952][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.752081][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.758181][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.765518][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.779512][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.786861][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.801557][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.834241][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.839707][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.850295][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.852292][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.865062][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.288208][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 67.319699][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 67.353037][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 67.372847][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 67.382694][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 67.497857][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.505703][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.514496][ T4281] device bridge_slave_0 entered promiscuous mode [ 67.548064][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.555378][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.563273][ T4281] device bridge_slave_1 entered promiscuous mode [ 67.589337][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.596584][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.604881][ T4280] device bridge_slave_0 entered promiscuous mode [ 67.624329][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.631574][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.639588][ T4280] device bridge_slave_1 entered promiscuous mode [ 67.647002][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.657014][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.665053][ T4276] device bridge_slave_0 entered promiscuous mode [ 67.673585][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.680860][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.688588][ T4276] device bridge_slave_1 entered promiscuous mode [ 67.729404][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.743814][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.752077][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.759750][ T4285] device bridge_slave_0 entered promiscuous mode [ 67.768788][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.778675][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.785898][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.793813][ T4272] device bridge_slave_0 entered promiscuous mode [ 67.804788][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.821493][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.828590][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.836675][ T4285] device bridge_slave_1 entered promiscuous mode [ 67.845692][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.856136][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.863275][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.871344][ T4272] device bridge_slave_1 entered promiscuous mode [ 67.891679][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.909346][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.933054][ T4280] team0: Port device team_slave_0 added [ 67.964193][ T4280] team0: Port device team_slave_1 added [ 67.973462][ T4281] team0: Port device team_slave_0 added [ 67.981383][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.998539][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.009901][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.028289][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.039698][ T4281] team0: Port device team_slave_1 added [ 68.048250][ T4276] team0: Port device team_slave_0 added [ 68.087335][ T4276] team0: Port device team_slave_1 added [ 68.095315][ T4285] team0: Port device team_slave_0 added [ 68.104814][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.111884][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.138215][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.156692][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.163695][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.190923][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.215132][ T4285] team0: Port device team_slave_1 added [ 68.237346][ T4272] team0: Port device team_slave_0 added [ 68.245231][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.252513][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.278915][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.305013][ T4280] device hsr_slave_0 entered promiscuous mode [ 68.312321][ T4280] device hsr_slave_1 entered promiscuous mode [ 68.334394][ T4272] team0: Port device team_slave_1 added [ 68.340768][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.347727][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.373833][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.408746][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.415828][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.441862][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.464035][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.476483][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.502716][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.514937][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.524306][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.551213][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.562844][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.569805][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.599008][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.619452][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.626657][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.652816][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.668909][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.676725][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.705894][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.788679][ T4281] device hsr_slave_0 entered promiscuous mode [ 68.795718][ T4281] device hsr_slave_1 entered promiscuous mode [ 68.803689][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.812245][ T4281] Cannot create hsr debugfs directory [ 68.829570][ T4272] device hsr_slave_0 entered promiscuous mode [ 68.836389][ T4272] device hsr_slave_1 entered promiscuous mode [ 68.843493][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.851198][ T4272] Cannot create hsr debugfs directory [ 68.871373][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 68.871382][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 68.884897][ T4285] device hsr_slave_0 entered promiscuous mode [ 68.891681][ T4285] device hsr_slave_1 entered promiscuous mode [ 68.898342][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.906786][ T4285] Cannot create hsr debugfs directory [ 68.930386][ T4276] device hsr_slave_0 entered promiscuous mode [ 68.937470][ T4276] device hsr_slave_1 entered promiscuous mode [ 68.944620][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.952546][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 68.957008][ T4276] Cannot create hsr debugfs directory [ 68.958745][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 68.975565][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 69.257877][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.269609][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.279663][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.301012][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.357364][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.373336][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.385541][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.397987][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.444925][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.454313][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.479177][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.489369][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.559329][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.573632][ T4285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.586400][ T4285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.613595][ T4285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.625798][ T4285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.645616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.655489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.706034][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.714399][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.726708][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.739114][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.748208][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.783374][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.802929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.812476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.821905][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.829157][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.838264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.848826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.857336][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.864485][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.878493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.907970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.919011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.929338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.944573][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.961994][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.973261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.998821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.008313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.017546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.026941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.036826][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.044048][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.053334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.062348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.071039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.079688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.088570][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.095693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.104444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.112440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.120115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.128328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.139751][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.169324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.179498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.188785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.197530][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.211528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.220308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.229744][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.236888][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.255410][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.267098][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.279990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.291796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.300429][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.311157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.321076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.329728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.339062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.347560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.357496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.366197][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.373368][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.393381][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.411225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.419719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.429326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.442178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.452205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.460785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.473720][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.496910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.519739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.541501][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.575062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.603957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.618918][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.643462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.663400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.683711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.701419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.721280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.742412][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.758437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.768950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.789958][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.804971][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.821285][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.833432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.845112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.857320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.868783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.884464][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.891638][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.906327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.918437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.933569][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.940738][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.948995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.956477][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 70.961475][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 70.969549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.987202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.996857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.013159][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.020280][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.030876][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 71.030988][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 71.036902][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 71.100668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.109434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.126977][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.134152][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.146113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.155586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.165006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.173796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.182489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.191453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.199845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.208741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.217138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.224740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.232596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.241453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.250938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.259649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.268803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.274577][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.278253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.283329][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.305281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.319791][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.331979][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.340489][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.392541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.412102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.432848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.441848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.450708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.458402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.466169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.477183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.493807][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.515811][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.543293][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.578715][ T4280] device veth0_vlan entered promiscuous mode [ 71.612113][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.623619][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.636331][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.651720][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.666416][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.705550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.726603][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.758630][ T4280] device veth1_vlan entered promiscuous mode [ 71.802224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.821411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.853874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.870362][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.910302][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.933260][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.956210][ T4280] device veth0_macvtap entered promiscuous mode [ 71.989339][ T4272] device veth0_vlan entered promiscuous mode [ 72.001752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.027605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.044450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.073499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.094177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.115007][ T4280] device veth1_macvtap entered promiscuous mode [ 72.150127][ T4272] device veth1_vlan entered promiscuous mode [ 72.177930][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.188059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.211499][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.219022][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.257650][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.268369][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.287907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.301560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.310367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.331059][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.357785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.367631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.376432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.385641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.397011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.405572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.425962][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.435725][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.444967][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.453757][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.466401][ T4272] device veth0_macvtap entered promiscuous mode [ 72.480476][ T4272] device veth1_macvtap entered promiscuous mode [ 72.501788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.512625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.521216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.530016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.539378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.548343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.582045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.593986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.605758][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.620243][ T4285] device veth0_vlan entered promiscuous mode [ 72.629639][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.641576][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654037][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.662020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.669834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.678174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.703627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.717607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.726713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.736247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.744373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.757661][ T4281] device veth0_vlan entered promiscuous mode [ 72.773333][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.784586][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.797103][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.821034][ T4285] device veth1_vlan entered promiscuous mode [ 72.837840][ T4281] device veth1_vlan entered promiscuous mode [ 72.846066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.855566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.863762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.873301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.893439][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.902902][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.911943][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.920728][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.944916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.963374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.974719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.030131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.037876][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 73.037910][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 73.053356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.062856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.075558][ T4285] device veth0_macvtap entered promiscuous mode [ 73.099007][ T4276] device veth0_vlan entered promiscuous mode [ 73.111356][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 73.117399][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 73.123653][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 73.133606][ T4285] device veth1_macvtap entered promiscuous mode [ 73.141847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.150099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.158960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.167614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.176854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.185029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.214790][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.223194][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.257776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.266283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.277572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.289439][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.299962][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.312609][ T4276] device veth1_vlan entered promiscuous mode [ 73.335437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.343268][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.353422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.361379][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.369468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.384156][ T4281] device veth0_macvtap entered promiscuous mode [ 73.395302][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.404139][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.416249][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.421191][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.434536][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.445064][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.456948][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.472393][ T4281] device veth1_macvtap entered promiscuous mode [ 73.482807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.492526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.501329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.516468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.525571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.534434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.543756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.552663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.575528][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.588016][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.600436][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.611615][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.626341][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.637050][ T4276] device veth0_macvtap entered promiscuous mode [ 73.651492][ T4276] device veth1_macvtap entered promiscuous mode [ 73.672121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.681269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.695951][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.708977][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.719633][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.730692][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745174][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.756443][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.771580][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.782247][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.792100][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.802563][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814479][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861768][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.892969][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.213351][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.393954][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.409844][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.420536][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.430402][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.446960][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.459169][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.475950][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490000][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503381][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.518873][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612136][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.638340][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.650321][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.720532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 75.060631][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.264125][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 75.270406][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 75.276574][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 75.283312][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 75.289378][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 75.300558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 75.308831][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.321464][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.331823][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.342434][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.357097][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.423377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.438190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.447790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.458788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.474506][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.500653][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515610][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.526350][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546668][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.038843][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.074869][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.095660][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.181399][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.194415][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.239230][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.389621][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.420460][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.430277][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.452987][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534282][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.543690][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.623137][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.105115][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.134477][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.167038][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175574][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.198813][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.246183][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.292247][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.300178][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.331118][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.361812][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.369662][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.400831][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.423038][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.447982][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.475684][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.714547][ T4394] process 'syz.0.11' launched './file0' with NULL argv: empty string added [ 78.820877][ T4396] can0: slcan on ptm0. [ 79.841809][ T4387] can0 (unregistered): slcan off ptm0. [ 81.290534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.320540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.330528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.340539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.350528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.360537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.370528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.380538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 82.388612][ T4322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.617215][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 83.000154][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.199203][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.209432][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.224660][ T4322] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.235878][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.282815][ T4322] usb 2-1: config 0 descriptor?? [ 83.472716][ T4441] qrtr: Invalid version 46 [ 83.496853][ T4322] usb 2-1: can't set config #0, error -71 [ 83.540035][ T4322] usb 2-1: USB disconnect, device number 2 [ 83.713085][ T4440] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 84.695354][ T4457] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.130799][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.450627][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 86.457411][ T14] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.176273][ T4480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.329262][ T125] cfg80211: failed to load regulatory.db [ 87.692658][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.699346][ T14] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 87.708576][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.728842][ T14] usb 3-1: config 0 descriptor?? [ 88.176924][ T4497] NILFS (nullb0): couldn't find nilfs on the device [ 89.293505][ T14] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 89.407684][ T14] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 89.438145][ T14] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 89.454410][ T14] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 89.765972][ T14] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 90.633125][ T14] usb 3-1: USB disconnect, device number 2 [ 92.110732][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.145506][ T4517] fido_id[4517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 92.340635][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 92.364297][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.463779][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.519158][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.602698][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.613499][ T14] usb 2-1: Product: syz [ 92.631013][ T14] usb 2-1: Manufacturer: syz [ 92.639768][ T14] usb 2-1: SerialNumber: syz [ 92.675205][ T4536] device syzkaller0 entered promiscuous mode [ 92.711402][ T4538] fuse: Bad value for 'rootmode' [ 92.898742][ T14] usb 2-1: 0:2 : does not exist [ 92.914497][ T14] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 92.995128][ T14] usb 2-1: USB disconnect, device number 3 [ 93.012073][ T4427] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.210832][ T4427] usb 4-1: Using ep0 maxpacket: 16 [ 93.229962][ T4427] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.302793][ T4427] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.372616][ T4427] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.459643][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.463150][ T4427] usb 4-1: config 1 interface 1 has no altsetting 0 [ 93.721965][ T4427] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 93.846595][ T4427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.011039][ T4427] usb 4-1: Product: syz [ 94.089978][ T4427] usb 4-1: Manufacturer: syz [ 94.165324][ T4427] usb 4-1: SerialNumber: syz [ 96.509020][ T4427] usb 4-1: selecting invalid altsetting 0 [ 96.925092][ T4427] usb 4-1: USB disconnect, device number 2 [ 99.230440][ T4587] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 99.340704][ T4587] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 99.376519][ T4587] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 99.701682][ T4596] NILFS (nullb0): couldn't find nilfs on the device [ 100.211142][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.225189][ T4598] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.234244][ T4598] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.243066][ T4598] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.251820][ T4598] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.373521][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.383225][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.392377][ T4598] Zero length message leads to an empty skb [ 100.790652][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.990742][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 100.991225][ T4604] tc action pedit 'at' offset 5 out of bounds [ 100.997757][ T4318] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 101.002281][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.016492][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.022619][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.028685][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.034805][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.040925][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.046986][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.053108][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.059193][ T4604] tc action pedit 'at' offset 5 out of bounds [ 101.065457][ T4604] 0: reclassify loop, rule prio 0, protocol 800 [ 101.551254][ T4318] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 101.865969][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.880679][ T4318] usb 5-1: Product: syz [ 101.884871][ T4318] usb 5-1: Manufacturer: syz [ 101.889459][ T4318] usb 5-1: SerialNumber: syz [ 101.903176][ T4318] usb 5-1: config 0 descriptor?? [ 101.911474][ T4318] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 101.937418][ T4318] dvb-usb: bulk message failed: -22 (2/0) [ 101.957826][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.978025][ T4318] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 102.039297][ T4318] usb 5-1: media controller created [ 102.188091][ T4590] dvb-usb: bulk message failed: -22 (4/0) [ 102.244982][ T4590] cxusb: i2c read failed [ 102.247980][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.272377][ T4318] usb 5-1: selecting invalid altsetting 7 [ 102.282778][ T4318] cxusb: set interface failed [ 102.287501][ T4318] dvb-usb: bulk message failed: -22 (1/0) [ 103.642495][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805365bc00: rx timeout, send abort [ 103.656123][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805365bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.671761][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805365a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.745988][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.329428][ T4318] DVB: Unable to find symbol lgdt330x_attach() [ 104.335738][ T4318] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 104.520633][ T4318] rc_core: IR keymap rc-dvico-portable not found [ 104.527017][ T4318] Registered IR keymap rc-empty [ 104.683334][ T4318] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 104.716135][ T4318] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 104.750043][ T4318] dvb-usb: schedule remote query interval to 100 msecs. [ 104.759688][ T4318] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 104.781600][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 104.795104][ T4649] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.804021][ T4649] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.812878][ T4649] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.822650][ T4649] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.836094][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 104.845665][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 105.555924][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805365a400: rx timeout, send abort [ 105.569027][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805365a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.583390][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805365a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.625369][ T4318] usb 5-1: USB disconnect, device number 2 [ 105.703276][ T4652] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.711809][ T4652] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.720364][ T4652] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.527007][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 106.805967][ T4318] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 109.455762][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.095371][ T4690] tcf_pedit_act: 7 callbacks suppressed [ 110.095386][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.107522][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.113655][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.119731][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.125871][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.131982][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.138079][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.144199][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.150313][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.156431][ T4690] tc action pedit 'at' offset 5 out of bounds [ 110.162570][ T4690] 0: reclassify loop, rule prio 0, protocol 800 [ 110.227057][ T4688] Bluetooth: MGMT ver 1.22 [ 110.309942][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 110.320812][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 110.330211][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 111.047657][ T4323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.271059][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 111.297772][ T4323] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 111.400936][ T4323] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.439155][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.447650][ T4323] usb 2-1: Product: syz [ 111.451986][ T4323] usb 2-1: Manufacturer: syz [ 111.456673][ T4323] usb 2-1: SerialNumber: syz [ 111.493451][ T4323] usb 2-1: config 0 descriptor?? [ 112.228245][ T4726] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 112.259337][ T4726] device bond1 entered promiscuous mode [ 112.265314][ T4726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.853484][ T4323] usb 2-1: USB disconnect, device number 4 [ 115.370599][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.570567][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 115.578405][ T4321] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 115.592579][ T4321] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 115.601953][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.610194][ T4321] usb 5-1: Product: syz [ 115.615052][ T4321] usb 5-1: Manufacturer: syz [ 115.619857][ T4321] usb 5-1: SerialNumber: syz [ 115.639217][ T4321] usb 5-1: config 0 descriptor?? [ 115.657921][ T4775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.698027][ T4321] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 115.724480][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 115.778976][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.794276][ T4321] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 115.802874][ T4321] usb 5-1: media controller created [ 115.871277][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.932935][ T4321] usb 5-1: selecting invalid altsetting 7 [ 115.938892][ T4321] cxusb: set interface failed [ 115.943892][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 116.162656][ T4782] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 116.171090][ T4782] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 116.179663][ T4782] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 117.159411][ T4321] DVB: Unable to find symbol lgdt330x_attach() [ 117.188985][ T4321] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 117.573157][ T4790] device syzkaller0 entered promiscuous mode [ 118.441410][ T4321] rc_core: IR keymap rc-dvico-portable not found [ 118.458034][ T4321] Registered IR keymap rc-empty [ 118.490788][ T4321] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 118.526415][ T4321] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 118.559570][ T4321] dvb-usb: schedule remote query interval to 100 msecs. [ 118.566759][ T4321] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 118.640272][ T4321] usb 5-1: USB disconnect, device number 3 [ 119.220857][ T4321] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 119.404123][ T4817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.116'. [ 119.417301][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 119.506090][ T4823] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 119.514470][ T4823] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 119.523040][ T4823] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 119.650574][ T125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.385753][ T4819] input: syz1 as /devices/virtual/input/input8 [ 120.470794][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 120.481820][ T125] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 120.529007][ T125] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 120.559749][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.570601][ T125] usb 3-1: Product: syz [ 120.574846][ T125] usb 3-1: Manufacturer: syz [ 120.582021][ T125] usb 3-1: SerialNumber: syz [ 120.616458][ T125] usb 3-1: config 0 descriptor?? [ 120.633700][ T125] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 120.660760][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 120.684731][ T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.703268][ T125] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 120.737946][ T125] usb 3-1: media controller created [ 120.880941][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.948348][ T125] usb 3-1: selecting invalid altsetting 7 [ 120.954464][ T125] cxusb: set interface failed [ 120.960339][ T125] dvb-usb: bulk message failed: -22 (1/0) [ 121.335456][ T125] DVB: Unable to find symbol lgdt330x_attach() [ 121.344812][ T125] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 121.445193][ T4848] device syzkaller0 entered promiscuous mode [ 121.632951][ T125] rc_core: IR keymap rc-dvico-portable not found [ 121.820399][ T125] Registered IR keymap rc-empty [ 121.841968][ T125] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 121.866817][ T125] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 121.890979][ T125] dvb-usb: schedule remote query interval to 100 msecs. [ 121.898100][ T125] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 121.917293][ T125] usb 3-1: USB disconnect, device number 3 [ 122.252500][ T125] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 122.442597][ T4863] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 122.451016][ T4863] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 122.459555][ T4863] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 123.257924][ T4866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.132'. [ 125.671016][ T125] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.162781][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 126.173826][ T4880] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.182908][ T4880] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.191641][ T4880] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.200396][ T4880] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.210918][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 126.221435][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 126.300929][ T4879] device syzkaller0 entered promiscuous mode [ 126.480652][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 126.498380][ T125] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 126.541812][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.554404][ T125] usb 3-1: Product: syz [ 126.558723][ T125] usb 3-1: Manufacturer: syz [ 126.643250][ T4894] device syzkaller0 entered promiscuous mode [ 126.719587][ T125] usb 3-1: SerialNumber: syz [ 126.736465][ T125] usb 3-1: config 0 descriptor?? [ 126.743604][ T4892] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 126.745716][ T125] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 126.841187][ T4899] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 126.863243][ T4899] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 127.138555][ T4892] device bond1 entered promiscuous mode [ 127.229782][ T4892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.911859][ T125] ssu100: probe of 3-1:0.0 failed with error -71 [ 127.935149][ T125] usb 3-1: USB disconnect, device number 4 [ 128.574025][ T4913] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 129.981341][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 129.993876][ T4931] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.002649][ T4931] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.011411][ T4931] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.020844][ T4931] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.912772][ T4939] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 130.921232][ T4939] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 130.929859][ T4939] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 133.224193][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230672][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.978594][ T4948] NILFS (nullb0): couldn't find nilfs on the device [ 133.993945][ T4932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.757377][ T4951] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 134.811494][ T4951] device bond3 entered promiscuous mode [ 134.822352][ T4951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.856925][ T4964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'. [ 134.934766][ T4964] IPVS: Error joining to the multicast group [ 139.665687][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 139.956158][ T5003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.699254][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 140.727427][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 141.051577][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.298743][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 141.319386][ T7] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 141.396166][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.463904][ T7] usb 3-1: config 0 has no interfaces? [ 141.520052][ T7] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.614501][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.736057][ T7] usb 3-1: Product: syz [ 141.745238][ T7] usb 3-1: Manufacturer: syz [ 141.756214][ T7] usb 3-1: SerialNumber: syz [ 141.971980][ T5030] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 141.991567][ T7] usb 3-1: config 0 descriptor?? [ 142.043123][ T5030] device bond1 entered promiscuous mode [ 142.049508][ T5030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.160461][ T26] audit: type=1326 audit(1783198846.717:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.3.179" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8dd9de59 code=0x0 [ 142.208596][ T125] usb 3-1: USB disconnect, device number 5 [ 142.293183][ T5042] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 142.306685][ T5042] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 142.318079][ T5042] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 142.327373][ T5042] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 142.339101][ T5042] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 142.348941][ T5042] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 142.358379][ T5042] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 142.381740][ T5042] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.631991][ T5057] Cannot find add_set index 0 as target [ 144.032127][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 146.210574][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.503925][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.520920][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.532097][ T4318] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.546353][ T4318] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 146.561626][ T4318] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 146.570815][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.578847][ T4318] usb 3-1: Product: syz [ 146.583499][ T4318] usb 3-1: Manufacturer: syz [ 146.588141][ T4318] usb 3-1: SerialNumber: syz [ 147.665268][ T5108] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 147.833340][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 147.876431][ T5108] device bond3 entered promiscuous mode [ 147.900940][ T5108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.221271][ T5126] NILFS (nullb0): couldn't find nilfs on the device [ 148.930987][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.953580][ T4318] usb 3-1: Can't get UAC3 power state for id 10 [ 149.016108][ T5116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.056729][ T4318] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 149.120840][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 149.138931][ T14] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 149.238323][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.250098][ T4318] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 149.272018][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.201'. [ 149.309914][ T14] usb 1-1: config 0 has no interfaces? [ 149.338450][ T14] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 149.384287][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.426547][ T14] usb 1-1: Product: syz [ 149.448970][ T14] usb 1-1: Manufacturer: syz [ 149.460187][ T4318] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 149.473877][ T14] usb 1-1: SerialNumber: syz [ 149.489562][ T14] usb 1-1: config 0 descriptor?? [ 149.502022][ T4318] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 149.536242][ T4318] usb 3-1: USB disconnect, device number 6 [ 149.767151][ T14] usb 1-1: USB disconnect, device number 2 [ 150.065914][ T4402] udevd[4402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.584323][ T5168] Cannot find add_set index 0 as target [ 152.552305][ T5183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.212'. [ 152.561649][ T5183] IPVS: Error joining to the multicast group [ 152.771673][ T5184] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 152.826575][ T5184] device bond5 entered promiscuous mode [ 152.839289][ T5184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.107875][ T5195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.363511][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 154.567290][ T5219] Cannot find add_set index 0 as target [ 154.780920][ T4343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.250715][ T4343] usb 5-1: Using ep0 maxpacket: 16 [ 155.257537][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.301560][ T4343] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.335016][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.364525][ T4343] usb 5-1: config 0 descriptor?? [ 155.419462][ T5239] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 155.486593][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 155.515382][ T5241] IPVS: Error joining to the multicast group [ 155.816967][ T4343] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 156.780711][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.020662][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 157.132803][ T22] usb 1-1: config 11 has an invalid interface number: 161 but max is 0 [ 157.149220][ T22] usb 1-1: config 11 has no interface number 0 [ 157.176548][ T22] usb 1-1: config 11 interface 161 has no altsetting 0 [ 157.267220][ T4343] usb 5-1: USB disconnect, device number 4 [ 158.239460][ T22] usb 1-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5 [ 159.016496][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.093430][ T22] usb 1-1: Product: syz [ 159.112908][ T22] usb 1-1: Manufacturer: syz [ 159.117605][ T22] usb 1-1: SerialNumber: syz [ 160.010782][ T4343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.246423][ T4343] usb 5-1: Using ep0 maxpacket: 16 [ 160.261877][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.267894][ T22] usblcd 1-1:11.161: USBLCD model not supported. [ 160.277595][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.452926][ T22] usb 1-1: USB disconnect, device number 3 [ 160.986123][ T4343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.114581][ T4343] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.129171][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.150193][ T4343] usb 5-1: config 0 descriptor?? [ 161.320472][ T5290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 161.364343][ T5290] IPVS: Error joining to the multicast group [ 161.551188][ T4343] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 161.558461][ T4343] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 161.645757][ T4343] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input11 [ 161.718077][ T26] audit: type=1326 audit(1783198866.331:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.0.234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7239de59 code=0x0 [ 161.741272][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.776538][ T4343] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 161.828708][ T4343] usb 5-1: USB disconnect, device number 5 [ 162.056702][ T5312] fido_id[5312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 163.517466][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.556635][ T5326] Cannot find add_set index 0 as target [ 164.367227][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 164.374200][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.460915][ T5333] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 165.299943][ T22] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 165.311072][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.319448][ T22] usb 5-1: Product: syz [ 165.332353][ T22] usb 5-1: Manufacturer: syz [ 165.336976][ T22] usb 5-1: SerialNumber: syz [ 165.364524][ T22] usb 5-1: config 0 descriptor?? [ 165.371467][ T22] usb 5-1: bad CDC descriptors [ 165.389316][ T22] usb 5-1: unsupported MDLM descriptors [ 165.574795][ T5343] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 165.588643][ T22] usb 5-1: USB disconnect, device number 6 [ 166.626498][ T4279] Bluetooth: hci5: command 0x1003 tx timeout [ 166.633574][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.909521][ T4322] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.996514][ T5369] Cannot find add_set index 0 as target [ 167.184515][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 167.228823][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.387204][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.576224][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.534506][ T4322] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.543578][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.556075][ T4322] usb 2-1: config 0 descriptor?? [ 168.685207][ T26] audit: type=1326 audit(1783198873.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.252" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7239de59 code=0x0 [ 168.708425][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.961691][ T128] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.007638][ T4322] usbhid 2-1:0.0: can't add hid device: -71 [ 169.014432][ T4322] usbhid: probe of 2-1:0.0 failed with error -71 [ 169.039057][ T4322] usb 2-1: USB disconnect, device number 5 [ 169.144593][ T128] usb 4-1: device descriptor read/64, error -71 [ 169.464317][ T128] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.679928][ T128] usb 4-1: device descriptor read/64, error -71 [ 169.688795][ T4343] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.811873][ T5391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.817529][ T128] usb usb4-port1: attempt power cycle [ 169.903255][ T4343] usb 5-1: Using ep0 maxpacket: 8 [ 169.949836][ T4343] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 170.066697][ T4343] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.079010][ T4343] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.273166][ T4343] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.395136][ T4343] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.413928][ T128] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.421803][ T4343] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.436930][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.476376][ T128] usb 4-1: device descriptor read/8, error -71 [ 170.666160][ T5411] tcf_pedit_act: 7 callbacks suppressed [ 170.666175][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.678270][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.684352][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.690469][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.696539][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.702653][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.708742][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.714823][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.720942][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.727011][ T5411] tc action pedit 'at' offset 5 out of bounds [ 170.733127][ T5411] 0: reclassify loop, rule prio 0, protocol 800 [ 170.748144][ T4343] usb 5-1: usb_control_msg returned -32 [ 170.753954][ T4343] usbtmc 5-1:16.0: can't read capabilities [ 170.815412][ T128] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.934062][ T128] usb 4-1: device descriptor read/8, error -71 [ 171.063858][ T128] usb usb4-port1: unable to enumerate USB device [ 171.217289][ T5421] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 171.433988][ T128] usb 5-1: USB disconnect, device number 7 [ 172.362548][ T26] audit: type=1326 audit(1783198876.483:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5427 comm="syz.1.273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5c79de59 code=0x0 [ 173.141334][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.518976][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 173.526021][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.559690][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.583714][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.611786][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.643477][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.689615][ T7] usb 5-1: config 0 descriptor?? [ 173.853790][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 173.864673][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 173.874240][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 174.635330][ T5447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.855064][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 174.872168][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 175.122623][ T7] usb 5-1: USB disconnect, device number 8 [ 176.221011][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.414993][ T7] usb 2-1: device descriptor read/64, error -71 [ 177.291216][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.811425][ T7] usb 2-1: device descriptor read/64, error -71 [ 177.995973][ T7] usb usb2-port1: attempt power cycle [ 178.513029][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 179.100796][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.225472][ T7] usb 2-1: device descriptor read/8, error -71 [ 179.293917][ T4343] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.357750][ T5501] device syzkaller0 entered promiscuous mode [ 179.420245][ T5507] tcf_pedit_act: 7 callbacks suppressed [ 179.420255][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.432209][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.438360][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.444440][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.450571][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.456695][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.462768][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.468915][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.475390][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.481521][ T5507] tc action pedit 'at' offset 5 out of bounds [ 179.487615][ T5507] 0: reclassify loop, rule prio 0, protocol 800 [ 179.521776][ T4343] usb 3-1: Using ep0 maxpacket: 16 [ 179.529718][ T4343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.806227][ T4343] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.941449][ T4343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.017279][ T4343] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 180.026649][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.048361][ T4343] usb 3-1: config 0 descriptor?? [ 180.299804][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.503608][ T4343] petalynx 0003:18B1:0037.0004: unexpected long global item [ 181.401547][ T4343] petalynx 0003:18B1:0037.0004: parse failed [ 181.408034][ T4343] petalynx: probe of 0003:18B1:0037.0004 failed with error -22 [ 181.420547][ T4343] usb 3-1: USB disconnect, device number 7 [ 182.745116][ T5524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.775240][ T5554] 0: reclassify loop, rule prio 0, protocol 800 [ 184.972536][ T5563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.605042][ T5589] Cannot find add_set index 0 as target [ 188.657456][ T5612] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 188.668508][ T5612] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 189.970997][ T5623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.746452][ T4427] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.952199][ T4427] usb 3-1: Using ep0 maxpacket: 32 [ 190.959444][ T4427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.984754][ T4427] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 190.993856][ T4427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.003493][ T5634] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 191.015529][ T4427] usb 3-1: Product: syz [ 191.020448][ T4427] usb 3-1: Manufacturer: syz [ 191.025067][ T4427] usb 3-1: SerialNumber: syz [ 191.045995][ T4427] usb 3-1: config 0 descriptor?? [ 191.052796][ T4427] usb 3-1: bad CDC descriptors [ 191.057976][ T4427] usb 3-1: unsupported MDLM descriptors [ 191.065921][ T5634] device bond2 entered promiscuous mode [ 191.072133][ T5634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.273123][ T4427] usb 3-1: USB disconnect, device number 8 [ 193.299422][ T5658] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.310192][ T5658] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 194.634929][ T5676] tcf_pedit_act: 24 callbacks suppressed [ 194.634944][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.647226][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.653361][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.659505][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.665591][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.671725][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.677927][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.684076][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.690185][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.696352][ T5676] tc action pedit 'at' offset 5 out of bounds [ 194.702487][ T5676] 0: reclassify loop, rule prio 0, protocol 800 [ 195.367487][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 195.377624][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 195.386922][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 196.555454][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.561837][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.909926][ T4427] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 198.126737][ T4427] usb 2-1: Using ep0 maxpacket: 32 [ 198.403184][ T4427] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.431922][ T4427] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 198.494861][ T4427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.502900][ T4427] usb 2-1: Product: syz [ 198.533081][ T4427] usb 2-1: Manufacturer: syz [ 198.537964][ T4427] usb 2-1: SerialNumber: syz [ 198.619188][ T4427] usb 2-1: config 0 descriptor?? [ 198.668379][ T4427] usb 2-1: bad CDC descriptors [ 198.693783][ T4427] usb 2-1: unsupported MDLM descriptors [ 198.757510][ T5717] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 198.900459][ T4427] usb 2-1: USB disconnect, device number 10 [ 199.226448][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 199.777748][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 199.791617][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 199.801387][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 200.456608][ T4322] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.848795][ T5749] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 201.070805][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 201.495820][ T4322] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 201.793528][ T4322] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.823888][ T4322] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 201.844152][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.852272][ T4322] usb 4-1: Product: syz [ 201.876178][ T4322] usb 4-1: Manufacturer: syz [ 201.880815][ T4322] usb 4-1: SerialNumber: syz [ 201.904044][ T4322] usb 4-1: config 0 descriptor?? [ 202.160898][ T7] usb 4-1: USB disconnect, device number 7 [ 202.632494][ T5768] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 203.033996][ T5768] device bond7 entered promiscuous mode [ 203.047137][ T5768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.590583][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.599692][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.616452][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.625456][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.636633][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.645530][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 204.913198][ T5795] xt_hashlimit: size too large, truncated to 1048576 [ 208.416532][ T5846] slcan: can't register candev [ 208.579298][ T5846] Falling back ldisc for ptm0. [ 209.448349][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 209.457402][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 209.467271][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 210.050611][ T5867] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.060071][ T5867] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 212.611324][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.282668][ T5895] device batadv_slave_1 entered promiscuous mode [ 216.028006][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.408092][ T5961] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 218.416534][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 218.425788][ T5961] team0: Device geneve0 is up. Set it down before adding it as a team port [ 218.434821][ T5961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.060976][ T5976] device syzkaller0 entered promiscuous mode [ 220.094858][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 220.824826][ T4343] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.983023][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 220.991964][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 221.002879][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 221.011746][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 221.021232][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 221.030194][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 221.850293][ T4343] usb 4-1: Using ep0 maxpacket: 8 [ 222.812902][ T6001] can0: slcan on ptm0. [ 223.259358][ T5995] can0 (unregistered): slcan off ptm0. [ 223.464840][ T4343] usb 4-1: device descriptor read/all, error -71 [ 226.281726][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 226.378637][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.697083][ T125] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 227.856425][ T6052] can0: slcan on ptm0. [ 227.898186][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 227.911205][ T125] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 228.081708][ T125] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 228.701161][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.223235][ T125] usb 3-1: Product: syz [ 229.273917][ T125] usb 3-1: Manufacturer: syz [ 229.347070][ T125] usb 3-1: SerialNumber: syz [ 229.571124][ T125] usb 3-1: config 0 descriptor?? [ 229.827378][ T6046] can0 (unregistered): slcan off ptm0. [ 229.917965][ T125] usb 3-1: can't set config #0, error -71 [ 229.969572][ T125] usb 3-1: USB disconnect, device number 9 [ 231.467082][ T6087] NILFS (nullb0): couldn't find nilfs on the device [ 231.875274][ T4343] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.569207][ T6092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.636020][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 232.662963][ T4343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.688167][ T4343] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.711608][ T4343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.738915][ T4343] usb 4-1: config 0 descriptor?? [ 232.969789][ T125] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 232.979897][ T4343] usbhid 4-1:0.0: can't add hid device: -71 [ 233.016826][ T4343] usbhid: probe of 4-1:0.0 failed with error -71 [ 233.082507][ T6108] can0: slcan on ptm0. [ 233.191521][ T4343] usb 4-1: USB disconnect, device number 10 [ 234.541416][ T6105] can0 (unregistered): slcan off ptm0. [ 234.772321][ T4343] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.888126][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 234.896727][ T125] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 234.934392][ T125] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 234.973115][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.165108][ T125] usb 2-1: Product: syz [ 235.169322][ T125] usb 2-1: Manufacturer: syz [ 235.202309][ T125] usb 2-1: SerialNumber: syz [ 235.259867][ T125] usb 2-1: config 0 descriptor?? [ 235.410442][ T125] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 235.626747][ T125] usb 2-1: setting power ON [ 235.688293][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 235.930712][ T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.954887][ T125] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 235.973023][ T125] usb 2-1: media controller created [ 235.984512][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 235.994205][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 236.003624][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 236.020028][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.123155][ T125] usb 2-1: selecting invalid altsetting 6 [ 236.146534][ T125] usb 2-1: digital interface selection failed (-22) [ 236.153176][ T125] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 236.183262][ T125] usb 2-1: setting power OFF [ 236.188262][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 236.220908][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 236.237481][ T125] (NULL device *): no alternate interface [ 236.317800][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 236.349882][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 236.425071][ T125] usb 2-1: USB disconnect, device number 11 [ 237.002281][ T6154] NILFS (nullb0): couldn't find nilfs on the device [ 237.979656][ T6164] misc userio: Invalid payload size [ 238.462134][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.719166][ T6175] can0: slcan on ptm0. [ 240.155334][ T6172] can0 (unregistered): slcan off ptm0. [ 240.716530][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 240.727024][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 241.886426][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 242.670955][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 243.254774][ T4427] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 243.580029][ T4427] usb 3-1: Using ep0 maxpacket: 16 [ 243.587379][ T4427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.691658][ T4427] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 243.719269][ T4427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.808266][ T4427] usb 3-1: config 0 descriptor?? [ 243.898221][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.165181][ T6223] NILFS (nullb0): couldn't find nilfs on the device [ 244.291181][ T4427] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 245.336677][ T6227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.878754][ T125] usb 3-1: USB disconnect, device number 10 [ 248.465754][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 248.476212][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 248.485635][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 249.200774][ T6264] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 249.272174][ T6264] device bond1 entered promiscuous mode [ 249.279294][ T6264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.969111][ T6278] NILFS (nullb0): couldn't find nilfs on the device [ 252.651278][ T33] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.674330][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'. [ 252.752599][ T6270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.891750][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.943997][ T33] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.976248][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.009738][ T33] usb 2-1: config 0 descriptor?? [ 253.273937][ T33] usbhid 2-1:0.0: can't add hid device: -71 [ 253.305337][ T33] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.313838][ T33] usb 2-1: USB disconnect, device number 12 [ 253.551145][ T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.551220][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 253.846788][ T128] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.897579][ T33] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 253.919139][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 253.948618][ T128] usb 1-1: config 0 has no interfaces? [ 253.956047][ T7] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 253.967867][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.977231][ T7] usb 3-1: Product: syz [ 253.981648][ T7] usb 3-1: Manufacturer: syz [ 253.992633][ T7] usb 3-1: SerialNumber: syz [ 253.998523][ T128] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 254.009350][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.018358][ T7] usb 3-1: config 0 descriptor?? [ 254.024631][ T128] usb 1-1: Product: syz [ 254.032256][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 254.049666][ T128] usb 1-1: Manufacturer: syz [ 254.054339][ T128] usb 1-1: SerialNumber: syz [ 254.066316][ T128] usb 1-1: config 0 descriptor?? [ 254.104677][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.119626][ T33] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 254.131385][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.149868][ T33] usb 2-1: config 0 descriptor?? [ 254.315593][ T128] usb 1-1: USB disconnect, device number 4 [ 255.043034][ T7] gspca_se401: Wrong descriptor type [ 255.325973][ T4321] usb 3-1: USB disconnect, device number 11 [ 255.719858][ T33] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 255.802323][ T33] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 255.925879][ C1] ================================================================================ [ 255.935213][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 255.943819][ C1] index 6691 is out of range for type 'const int[34]' [ 255.950604][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 255.957643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.967722][ C1] Call Trace: [ 255.971016][ C1] [ 255.973872][ C1] dump_stack_lvl+0x188/0x24e [ 255.978583][ C1] ? show_regs_print_info+0x12/0x12 [ 255.983812][ C1] ? load_image+0x410/0x410 [ 255.988349][ C1] ubsan_epilogue+0xa/0x30 [ 255.992790][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 255.998545][ C1] aiptek_irq+0x1e87/0x28f0 [ 256.003070][ C1] ? kcov_remote_start+0x86/0x7e0 [ 256.008119][ C1] ? led_trigger_blink_setup+0x37/0x230 [ 256.013697][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 256.019102][ C1] dummy_timer+0xa21/0x3420 [ 256.023687][ C1] ? dummy_free_streams+0x520/0x520 [ 256.028926][ C1] __hrtimer_run_queues+0x522/0xc90 [ 256.034153][ C1] ? dummy_free_streams+0x520/0x520 [ 256.039391][ C1] ? hrtimer_interrupt+0x980/0x980 [ 256.044537][ C1] hrtimer_run_softirq+0x173/0x290 [ 256.049679][ C1] handle_softirqs+0x291/0x910 [ 256.054467][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 256.059338][ C1] ? do_softirq+0x210/0x210 [ 256.063857][ C1] ? hrtimer_interrupt+0x775/0x980 [ 256.068992][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 256.074209][ C1] __irq_exit_rcu+0x13b/0x230 [ 256.078913][ C1] ? irq_exit_rcu+0x20/0x20 [ 256.083443][ C1] irq_exit_rcu+0x5/0x20 [ 256.087699][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 256.093353][ C1] [ 256.096291][ C1] [ 256.099245][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 256.105265][ C1] RIP: 0010:sched_core_balance+0x142/0xd70 [ 256.111102][ C1] Code: 40 c1 8b 8a e8 8f c9 09 00 4c 89 74 24 60 4c 89 6c 24 08 e9 bf 0b 00 00 4c 89 f7 e8 18 8b df 08 e8 d3 ab 2d 00 fb 41 83 fd 08 <0f> 83 8e 0b 00 00 4e 8d 34 ed 80 f9 65 8c 4c 89 f0 48 c1 e8 03 48 [ 256.130740][ C1] RSP: 0018:ffffc90000177a80 EFLAGS: 00000297 [ 256.136830][ C1] RAX: 6c3297d2dda99800 RBX: ffff8880b8f3ba48 RCX: 6c3297d2dda99800 [ 256.144820][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 256.152812][ C1] RBP: ffffc90000177bd0 R08: ffff8880b8e3ad03 R09: 1ffff110171c75a0 [ 256.160802][ C1] R10: dffffc0000000000 R11: ffffed10171c75a1 R12: ffff8880b8f3ad00 [ 256.168793][ C1] R13: 0000000000000001 R14: ffff8880b8f3ad00 R15: dffffc0000000000 [ 256.176806][ C1] ? sched_core_balance+0xb6/0xd70 [ 256.181941][ C1] ? put_prev_task_balance+0x110/0x110 [ 256.187431][ C1] ? put_prev_task_balance+0x110/0x110 [ 256.192908][ C1] finish_task_switch+0x39b/0x8e0 [ 256.197967][ C1] __schedule+0x1087/0x4030 [ 256.202536][ C1] ? sched_clock_idle_sleep_event+0x10/0x10 [ 256.208469][ C1] ? __sched_text_start+0x8/0x8 [ 256.213349][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 256.219527][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 256.226845][ C1] ? tick_nohz_restart_sched_tick+0x1e0/0x1e0 [ 256.232946][ C1] schedule_idle+0x4a/0x90 [ 256.237392][ C1] do_idle+0x635/0x680 [ 256.241486][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 256.246712][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 256.252373][ C1] ? schedule_idle+0x57/0x90 [ 256.256987][ C1] cpu_startup_entry+0x3f/0x60 [ 256.261775][ C1] start_secondary+0xe4/0xf0 [ 256.266381][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 256.272316][ C1] [ 256.275346][ C1] ================================================================================ [ 256.284643][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 256.291846][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 256.298876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.308942][ C1] Call Trace: [ 256.312227][ C1] [ 256.315081][ C1] dump_stack_lvl+0x188/0x24e [ 256.319791][ C1] ? memcpy+0x3c/0x60 [ 256.323784][ C1] ? show_regs_print_info+0x12/0x12 [ 256.329000][ C1] ? load_image+0x410/0x410 [ 256.333527][ C1] panic+0x2d3/0x710 [ 256.337440][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 256.341969][ C1] check_panic_on_warn+0x80/0xa0 [ 256.346929][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 256.352679][ C1] aiptek_irq+0x1e87/0x28f0 [ 256.357194][ C1] ? kcov_remote_start+0x86/0x7e0 [ 256.362237][ C1] ? led_trigger_blink_setup+0x37/0x230 [ 256.367824][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 256.373224][ C1] dummy_timer+0xa21/0x3420 [ 256.377798][ C1] ? dummy_free_streams+0x520/0x520 [ 256.383029][ C1] __hrtimer_run_queues+0x522/0xc90 [ 256.388288][ C1] ? dummy_free_streams+0x520/0x520 [ 256.393516][ C1] ? hrtimer_interrupt+0x980/0x980 [ 256.398653][ C1] hrtimer_run_softirq+0x173/0x290 [ 256.403800][ C1] handle_softirqs+0x291/0x910 [ 256.408585][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 256.413452][ C1] ? do_softirq+0x210/0x210 [ 256.417963][ C1] ? hrtimer_interrupt+0x775/0x980 [ 256.423092][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 256.428303][ C1] __irq_exit_rcu+0x13b/0x230 [ 256.432991][ C1] ? irq_exit_rcu+0x20/0x20 [ 256.437516][ C1] irq_exit_rcu+0x5/0x20 [ 256.441766][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 256.447413][ C1] [ 256.450349][ C1] [ 256.453284][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 256.459287][ C1] RIP: 0010:sched_core_balance+0x142/0xd70 [ 256.465115][ C1] Code: 40 c1 8b 8a e8 8f c9 09 00 4c 89 74 24 60 4c 89 6c 24 08 e9 bf 0b 00 00 4c 89 f7 e8 18 8b df 08 e8 d3 ab 2d 00 fb 41 83 fd 08 <0f> 83 8e 0b 00 00 4e 8d 34 ed 80 f9 65 8c 4c 89 f0 48 c1 e8 03 48 [ 256.484734][ C1] RSP: 0018:ffffc90000177a80 EFLAGS: 00000297 [ 256.490823][ C1] RAX: 6c3297d2dda99800 RBX: ffff8880b8f3ba48 RCX: 6c3297d2dda99800 [ 256.498811][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 256.506799][ C1] RBP: ffffc90000177bd0 R08: ffff8880b8e3ad03 R09: 1ffff110171c75a0 [ 256.514787][ C1] R10: dffffc0000000000 R11: ffffed10171c75a1 R12: ffff8880b8f3ad00 [ 256.522769][ C1] R13: 0000000000000001 R14: ffff8880b8f3ad00 R15: dffffc0000000000 [ 256.530779][ C1] ? sched_core_balance+0xb6/0xd70 [ 256.535923][ C1] ? put_prev_task_balance+0x110/0x110 [ 256.541408][ C1] ? put_prev_task_balance+0x110/0x110 [ 256.546880][ C1] finish_task_switch+0x39b/0x8e0 [ 256.551931][ C1] __schedule+0x1087/0x4030 [ 256.556460][ C1] ? sched_clock_idle_sleep_event+0x10/0x10 [ 256.562394][ C1] ? __sched_text_start+0x8/0x8 [ 256.567278][ C1] ? flush_smp_call_function_queue+0x127/0x350 [ 256.573467][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 256.580788][ C1] ? tick_nohz_restart_sched_tick+0x1e0/0x1e0 [ 256.586891][ C1] schedule_idle+0x4a/0x90 [ 256.591331][ C1] do_idle+0x635/0x680 [ 256.595425][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 256.600643][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 256.606301][ C1] ? schedule_idle+0x57/0x90 [ 256.610914][ C1] cpu_startup_entry+0x3f/0x60 [ 256.615701][ C1] start_secondary+0xe4/0xf0 [ 256.620304][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 256.626226][ C1] [ 256.629548][ C1] Kernel Offset: disabled [ 256.633900][ C1] Rebooting in 86400 seconds..