last executing test programs: 11.399495713s ago: executing program 2 (id=43): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x4681) 8.375659989s ago: executing program 2 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) close(r5) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @mcast2, 0x40000}, 0x1c) 8.06398394s ago: executing program 1 (id=59): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r1, 0x7}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) 7.761394969s ago: executing program 1 (id=60): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x2c, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x6, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x235}, 0xf}], 0x1, 0x2101, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.471272588s ago: executing program 2 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.93624759s ago: executing program 2 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) 6.563234997s ago: executing program 4 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 6.293835293s ago: executing program 1 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03", 0x2c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fadvise64(r0, 0x4, 0xc3e6, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040011}, 0x4000000) fsync(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.22874885s ago: executing program 4 (id=70): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r1, 0x7}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) 6.067505785s ago: executing program 4 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000180)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x80000}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x40001}) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000b80)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001000)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0xbaf410a7239a8018, 0xeeef0000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x14) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2204}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={[0x6b94]}, 0x8) ioctl$KVM_X86_SET_MSR_FILTER(r10, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0xd0, 0xc, &(0x7f0000000440)="6c85f46c911c9ee62a0068118b0a7299450248d011e764587af5"}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x10001, &(0x7f0000000540)}, {0x1, 0x0, 0x401, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd, 0x0}, {0x2, 0x0, 0x3fc, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x3468, &(0x7f0000002a80)}, {0x3, 0x0, 0x1ff, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="c4e3b1cfb3b465a466b9f50b000066b8b43da19666ba000000000f30983e65f021a8e70020982d9d2626f30f09fb66b862aabf3d0f23d80f21f86635c00000d00f23f80fc71d262e660f3a0eb79728f0", 0x50}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x401fc, 0x2) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r11, 0x400, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.854665456s ago: executing program 0 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.690532823s ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) close(r5) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @mcast2, 0x40000}, 0x1c) 5.347286796s ago: executing program 0 (id=76): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r2, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 5.094859361s ago: executing program 2 (id=77): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.075376412s ago: executing program 0 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000a80)=[{r0, 0x440}, {r0}, {r0, 0x21}, {r2, 0x242}, {r0, 0x1283}], 0x5, 0x92d5) 4.334329595s ago: executing program 1 (id=79): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400), 0x381101, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000440)='.%\x90-{\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x4, 0x1, 0x0, 0xe}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="e5c0d498a432a5bbc3d178e66d59f01f27871937946a4a056c821e49f01d2fb87585cfb9e1e4999e31c297509eeb831938779eca3fa7676584dcdf0e197905e826e13d1dd30b006d5be133890b0fc3310fd2d48696b60a941bf3c8ecf24cd12e78d280a370ccfc91cc440346f9152e267387f1aba069452d8f7375758606c35c0c25f4285ce7c3516ade90234d3a6d410d289a17d95cd753671e1c86cf2132a923a9b0d4fa497e9fc31fb5095d8dd032a44a39a8a751dad69dc41e", 0xbb}, {&(0x7f0000000500)}, {&(0x7f00000002c0)="ca77d9a0260302141b6ca64c9db2cf5b7c0312eb8f15debf31eca1c13bc376f314e713dec51992bf492b34efe1034ed7e20dab8e85fe7e8264b2d60b9cc1f3b3405a637a63ae388bae1dfec56145fcd118423b755aa96b0893cf66501acfbe59db370c694520a3ed2bab8d5c38a33d3e", 0x70}, {&(0x7f0000000680)="19e1483fe1915bec6eb051f3aeabb3aa61a7447df7cf7cab97ad31218a805d1a164ff0c3c654d04d1262100a9d8dd0275126f5355a0c199123a3757aa9cd7feee5aa138b53d582f821eb942486df5b3b646e34ed127cb89d88f286ebf6e3df165c8d5a29723038764b390bed4ebbcc2b5f4d8a6aa899ff9ba04485fbbe333e2602cd101b8559f0541d876faae9fac72f6c1a06b9732f47706467fb262d6b0dacb47ab278aaa88c375872f0d38663998506efed1cf190d679c89987edca9c4def48c8684137c5bc3bcdff5a04225cb052dfa1d37a081e5b1d74dc55ab1b7ba020445303e989632f6d1fd1bad1da7def7e638eed12a040", 0xf6}, {&(0x7f0000000380)="5cbef7db0d478b20", 0x8}], 0x5, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="ac1e1101ac1414bb0000000014000000000000000000000001000000000000"], 0xe8}}], 0x2, 0x4008000) r5 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) clock_gettime(0x17, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x1, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0xa, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0xc4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040098}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r4, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x20000000) 4.334161935s ago: executing program 4 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.87141702s ago: executing program 3 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 3.722299765s ago: executing program 3 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.441810292s ago: executing program 4 (id=83): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) 3.16370454s ago: executing program 0 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000180)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x80000}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x40001}) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000b80)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001000)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0xbaf410a7239a8018, 0xeeef0000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x14) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2204}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={[0x6b94]}, 0x8) ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0xd0, 0xc, &(0x7f0000000440)="6c85f46c911c9ee62a0068118b0a7299450248d011e764587af5"}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x10001, &(0x7f0000000540)}, {0x1, 0x0, 0x401, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd, 0x0}, {0x2, 0x0, 0x3fc, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x3468, &(0x7f0000002a80)}, {0x3, 0x0, 0x1ff, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}]}) 3.043950482s ago: executing program 0 (id=85): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) socket$inet6(0xa, 0x3, 0x3c) pipe(0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f00000000c0)=""/97, 0x61}], 0x2}, 0x342) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.738776682s ago: executing program 3 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0x1, 0xb}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.531084472s ago: executing program 2 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a4000000000090002007379"], 0xd0}}, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403, 0x3}}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xd0, 0xe, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x2, 0x3}}]}}}]}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x24, 0x6, 0x56, 0x40, 0x1, 0xfb, 0x8, 0xfe, 0x0, 0x0, 0x40, 0x1, 0x9}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00030400000004032604694d727a66cf10bed60ab3138a8017ba072dcb250fc314f5ec45c77e"]}, &(0x7f0000000b40)={0x34, 0x0, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)=ANY=[@ANYBLOB="2000410000000896ff13b98ce6b947dbca2537a671ff7e7d8b9a991924219509"], &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x35}}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYBLOB="8606d58b718e2ecafac5e3e4ed5226ad081bdd0bef9bef10c98ba283f545580c697925a40fe751a7c23a1f939c38377b3e7ed7fa65480c3389be6c645f346e344375efb272aa6917c8cf4b2291c58c9209c7ec694f14a81ca3c29cac71a2dc1c0c54e0f7f54ab89110aa02e169182043ac7f0999052074b7228cbeb981d22aa35c3590924c0ed27f105380335f5442283a54a36db61dae6e9833ca033a80e0e341ddc9396a61f811a60cea4b62da6fa8e5f659ab15dd38f43bdb4a"], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = epoll_create1(0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'gretap0\x00', {0x20000000}, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)={0x30000000}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000480)={0x4, {{0x2, 0x4e23, @private=0xa010101}}}, 0x88) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.268621988s ago: executing program 1 (id=88): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 2.228108932s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) 1.849464218s ago: executing program 0 (id=90): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x4681) 459.266375ms ago: executing program 3 (id=91): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e696376663000000000000000000000080005000a0000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 128.056267ms ago: executing program 3 (id=92): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000340)={0xc8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) rt_tgsigqueueinfo(r0, r0, 0x3, &(0x7f0000000280)={0x5, 0x100, 0x5c9f}) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x10, 0x7}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14804}, 0xc050) recvmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}, {0x0}], 0x2}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 1 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 49.446155][ T4171] cgroup: Unknown subsys name 'net' [ 49.588181][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.859244][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.677603][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.716337][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.736884][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.790520][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.850868][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.877312][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.886139][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.894715][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.906829][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.913946][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.921854][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.951634][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.959169][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.967089][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.998242][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.005428][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.013030][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.027308][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.034546][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.042192][ T4192] device bridge_slave_0 entered promiscuous mode [ 53.067492][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.076970][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.084227][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.091859][ T4192] device bridge_slave_1 entered promiscuous mode [ 53.117185][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.133096][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140356][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.148209][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.159263][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.181216][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.188510][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.196655][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.212292][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.223135][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.265814][ T4184] team0: Port device team_slave_0 added [ 53.282068][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.291368][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.301324][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.309082][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.317355][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.324780][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.332494][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.341689][ T4181] team0: Port device team_slave_0 added [ 53.348919][ T4184] team0: Port device team_slave_1 added [ 53.356321][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.378038][ T4181] team0: Port device team_slave_1 added [ 53.397319][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.442395][ T4192] team0: Port device team_slave_0 added [ 53.449828][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.459856][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.466992][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.494145][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.507373][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.514647][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.540845][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.558414][ T4192] team0: Port device team_slave_1 added [ 53.573103][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.582637][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.589712][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.615649][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.627307][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.634363][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.660378][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.674292][ T4183] team0: Port device team_slave_0 added [ 53.707247][ T4183] team0: Port device team_slave_1 added [ 53.714318][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.721265][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.747644][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.760140][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.767366][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.793720][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.818644][ T4182] team0: Port device team_slave_0 added [ 53.842423][ T4182] team0: Port device team_slave_1 added [ 53.864455][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.871411][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.898089][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.937002][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.944311][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.970518][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.989146][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.996251][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.022352][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.044985][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.051887][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.064864][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.072335][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.079067][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.086947][ T4192] Cannot create hsr debugfs directory [ 54.092840][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.099836][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.125990][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.139541][ T4181] device hsr_slave_0 entered promiscuous mode [ 54.146528][ T4181] device hsr_slave_1 entered promiscuous mode [ 54.153055][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.161098][ T4181] Cannot create hsr debugfs directory [ 54.209919][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.216686][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.223423][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.230975][ T4182] Cannot create hsr debugfs directory [ 54.312356][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.319263][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.325958][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.334501][ T4183] Cannot create hsr debugfs directory [ 54.364147][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.364147][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 54.364629][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 54.370312][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 54.453751][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 54.581758][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.592723][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.605861][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.621075][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.684502][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.704995][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.727405][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.739723][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.775034][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.781860][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.794733][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.818119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.830053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.838713][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.855030][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.869366][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.896600][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.906604][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.922570][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.947400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.956679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.966135][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.973433][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.982155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.994521][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.018609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.027874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.036934][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.044025][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.052689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.076420][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.091168][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.124500][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.133014][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.142754][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.168064][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.177374][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.186835][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.200173][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.213048][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.233077][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.247873][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.271611][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.280662][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.289816][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.298962][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.308289][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.316965][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.324833][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.332750][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.351287][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.416946][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.434403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.441871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.451195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.460415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.469894][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.476982][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.485448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.495085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.503825][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.510869][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.518642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.545886][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.565298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.577135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.585263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.601540][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.632815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.641791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.650759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.659939][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.667043][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.675302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.684190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.692772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.701504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.710191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.719298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.729385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.737835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.757182][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.775241][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.782439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.792022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.800792][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.807941][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.816777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.830173][ T4182] device veth0_vlan entered promiscuous mode [ 55.854863][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.864418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.872987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.892409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.902280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.910876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.919368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.927585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.936048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.943948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.951569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.960560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.974400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.982248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.990542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.999324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.008085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.019337][ T4182] device veth1_vlan entered promiscuous mode [ 56.029308][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.046797][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.059077][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.073116][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.081840][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.097318][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.107283][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.114411][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.122352][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.131734][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.140437][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.149798][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.158897][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.165983][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.174460][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.182991][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.197592][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.209163][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.235400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.245454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.259076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.270583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.283817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.292397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.301669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.310479][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.317591][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.325752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.335133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.343653][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.350690][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.396832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.406099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.420174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.430559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.439451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.443400][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 56.447684][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 56.458889][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 56.460079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.474320][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 56.480478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.489603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.499224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.508673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.517667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.526466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.533662][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 56.535502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.547972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.555723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.563940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.575048][ T4182] device veth0_macvtap entered promiscuous mode [ 56.584618][ T4182] device veth1_macvtap entered promiscuous mode [ 56.595261][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.606786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.616102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.624573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.634344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.642898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.652062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.666082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.674945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.693051][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.709779][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.719754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.728895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.737930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.746668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.755507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.765074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.785972][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.795187][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.804483][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.814096][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828471][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.845030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.852552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.860899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.869998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.879268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.888373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.912219][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.969382][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.989441][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.014987][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.022968][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.041401][ T4192] device veth0_vlan entered promiscuous mode [ 57.105011][ T4192] device veth1_vlan entered promiscuous mode [ 57.168535][ T4192] device veth0_macvtap entered promiscuous mode [ 57.184993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.203664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.211786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.222573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.237433][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.242716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.258813][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.261062][ T4192] device veth1_macvtap entered promiscuous mode [ 57.288140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.298661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.320459][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.338393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.346653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.354558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.363087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.382468][ T4181] device veth0_vlan entered promiscuous mode [ 57.405737][ T4181] device veth1_vlan entered promiscuous mode [ 57.412553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.420730][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.426699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.432486][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.439846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.452572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.461062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.469032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.477749][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.489404][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.501356][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.514812][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.525513][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.536553][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.550753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.566174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.575464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.583130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.590719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.600227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.635282][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.663331][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.672253][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.681363][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705179][ T4181] device veth0_macvtap entered promiscuous mode [ 57.715198][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.722733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.733078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.741879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.753023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.766531][ T4181] device veth1_macvtap entered promiscuous mode [ 57.789293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.800376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.814288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.825133][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.836649][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.846760][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.858241][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.870157][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.896149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.905082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.924042][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.935621][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.945892][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.956972][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.976337][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.987447][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996528][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.005631][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.014746][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.027994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.036988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.055527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.065155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.085988][ T4184] device veth0_vlan entered promiscuous mode [ 58.107337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.119847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.128055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.140248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.199682][ T4184] device veth1_vlan entered promiscuous mode [ 58.211802][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.224108][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.237854][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.247141][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.259962][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.273390][ T4183] device veth0_vlan entered promiscuous mode [ 58.284664][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.301020][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.333375][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.342829][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.362729][ T4183] device veth1_vlan entered promiscuous mode [ 58.380798][ T4184] device veth0_macvtap entered promiscuous mode [ 58.387686][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 58.390853][ T4184] device veth1_macvtap entered promiscuous mode [ 58.397287][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.411500][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.429827][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.439066][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.448856][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.457479][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.466024][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.481125][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.493045][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.504844][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.515315][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.525698][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.534969][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 58.536426][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.547577][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 58.554233][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.563783][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 58.577016][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.594454][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.602024][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 58.603062][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.616049][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 58.619095][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.631328][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.640372][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.651289][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.662213][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.663303][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 58.673520][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.687908][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.698353][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.709851][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.720747][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.731149][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.756962][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.767289][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.776693][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.805952][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.813975][ T4235] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 58.816475][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.822292][ T4235] usb 2-1: config 0 has no interface number 0 [ 58.834950][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.837313][ T4235] usb 2-1: config 0 interface 89 has no altsetting 0 [ 58.851954][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.860650][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.887693][ T4183] device veth0_macvtap entered promiscuous mode [ 58.895260][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.912862][ T4183] device veth1_macvtap entered promiscuous mode [ 58.920685][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.944097][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.952807][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.003015][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.028609][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.038785][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.050007][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.060058][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.070644][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.073425][ T4235] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 59.081563][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.090023][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.096611][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.101773][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.108318][ T4235] usb 2-1: Product: syz [ 59.123069][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.127134][ T4235] usb 2-1: Manufacturer: syz [ 59.134923][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.152593][ T4235] usb 2-1: SerialNumber: syz [ 59.153475][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.170878][ T4235] usb 2-1: config 0 descriptor?? [ 59.173609][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.188209][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.198175][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.208812][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.218741][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.229792][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.230119][ T4235] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 59.241424][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.256117][ T4235] em28xx 2-1:0.89: Video interface 89 found: bulk [ 59.281663][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.298919][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.308590][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.323023][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.325501][ T4305] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.340759][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 59.349373][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.361020][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.381716][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.394193][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.432471][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.458731][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.477775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.488505][ T1107] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 59.497958][ T1107] usb 3-1: config 0 has no interface number 0 [ 59.508634][ T1107] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 59.528784][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.540423][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.553749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.574486][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.601677][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.623064][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.646148][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.666876][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.684408][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.701268][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.713634][ T1107] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 59.726654][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.735438][ T1107] usb 3-1: Product: syz [ 59.739609][ T1107] usb 3-1: Manufacturer: syz [ 59.744837][ T1107] usb 3-1: SerialNumber: syz [ 59.760806][ T1107] usb 3-1: config 0 descriptor?? [ 59.783348][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.903313][ T4235] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 60.023432][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 60.183426][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 60.263330][ T7] usb 5-1: config index 0 descriptor too short (expected 51, got 18) [ 60.271443][ T7] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 60.287484][ T7] usb 5-1: config 4 has no interface number 0 [ 60.293703][ T7] usb 5-1: config 4 interface 30 has no altsetting 0 [ 60.333316][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.485841][ T1107] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input5 [ 60.533470][ T7] usb 5-1: string descriptor 0 read error: -22 [ 60.539727][ T7] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 60.554612][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.583609][ T4303] usb 4-1: Using ep0 maxpacket: 32 [ 60.605061][ T4296] Bluetooth: hci0: command 0x0419 tx timeout [ 60.611495][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 60.615996][ T7] dw2102: su3000_identify_state [ 60.619352][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 60.628995][ T7] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 60.636240][ T7] dw2102: su3000_power_ctrl: 1, initialized 0 [ 60.642571][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 60.656237][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.683837][ T4249] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.686159][ T7] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 60.692254][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 60.706064][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 60.716487][ T7] usb 5-1: media controller created [ 60.718934][ T4296] usb 3-1: USB disconnect, device number 2 [ 60.729576][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.731027][ T4303] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.736450][ T7] dw2102: i2c transfer failed. [ 60.748193][ T4303] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.754568][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.761611][ T4303] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.768108][ T7] dw2102: i2c transfer failed. [ 60.772659][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.779858][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.787536][ T4303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.798387][ T7] dw2102: i2c transfer failed. [ 60.802907][ T4303] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.807714][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.821117][ T4303] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.837551][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.840323][ T7] dw2102: i2c transfer failed. [ 60.859974][ T4308] dvb-usb: bulk message failed: -22 (3/0) [ 60.866795][ T4303] usb 4-1: config 0 descriptor?? [ 60.871686][ T4308] dw2102: i2c transfer failed. [ 60.879195][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.888616][ T7] dw2102: i2c transfer failed. [ 60.893852][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 60.905879][ T7] dw2102: i2c transfer failed. [ 60.910734][ T7] dvb-usb: MAC address: 02:02:02:02:02:02 [ 60.927943][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.942995][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 60.948855][ T7] dw2102: command 0x0e transfer failed. [ 60.954652][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 60.960369][ T7] dw2102: command 0x0e transfer failed. [ 60.963350][ T4249] usb 1-1: Using ep0 maxpacket: 32 [ 61.104969][ T4235] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 61.114143][ T4235] em28xx 2-1:0.89: board has no eeprom [ 61.139654][ T4303] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 61.245736][ T4235] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 61.252989][ T4235] em28xx 2-1:0.89: analog set to bulk mode. [ 61.283380][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 61.289288][ T7] dw2102: command 0x0e transfer failed. [ 61.293671][ T4235] usb 2-1: USB disconnect, device number 2 [ 61.301861][ T4235] em28xx 2-1:0.89: Disconnecting em28xx [ 61.307852][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 61.310054][ T4303] em28xx 2-1:0.89: Registering V4L2 extension [ 61.324831][ T4249] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 61.335297][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.335322][ T4249] usb 1-1: Product: syz [ 61.335334][ T4249] usb 1-1: Manufacturer: syz [ 61.335349][ T4249] usb 1-1: SerialNumber: syz [ 61.345533][ T7] dw2102: command 0x0e transfer failed. [ 61.345563][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 61.345585][ T7] dw2102: command 0x51 transfer failed. [ 61.345593][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 61.345606][ T7] dw2102: i2c probe for address 0x68 failed. [ 61.345617][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 61.345629][ T7] dw2102: i2c probe for address 0x69 failed. [ 61.345640][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 61.345652][ T7] dw2102: i2c probe for address 0x6a failed. [ 61.345661][ T7] dw2102: probing for demodulator failed. Is the external power switched on? [ 61.345671][ T7] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 61.356300][ T4249] usb 1-1: config 0 descriptor?? [ 61.491576][ T4303] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 61.496276][ T7] rc_core: IR keymap rc-tt-1500 not found [ 61.501463][ T4303] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 61.512570][ T4303] em28xx 2-1:0.89: No AC97 audio processor [ 61.521626][ T4303] usb 2-1: Decoder not found [ 61.526375][ T4303] em28xx 2-1:0.89: failed to create media graph [ 61.527213][ T7] Registered IR keymap rc-empty [ 61.532725][ T4303] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 61.552430][ T7] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 61.556337][ T4303] em28xx 2-1:0.89: Registering snapshot button... [ 61.570015][ T7] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 61.582552][ T4303] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 61.613813][ T7] dvb-usb: schedule remote query interval to 250 msecs. [ 61.620781][ T7] dw2102: su3000_power_ctrl: 0, initialized 1 [ 61.622723][ T4303] em28xx 2-1:0.89: Remote control support is not available for this card. [ 61.636419][ T4235] em28xx 2-1:0.89: Closing input extension [ 61.648332][ T4235] em28xx 2-1:0.89: Deregistering snapshot button [ 61.658037][ T4249] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 61.659245][ T7] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 61.669420][ T4303] usb 4-1: USB disconnect, device number 2 [ 61.753675][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.759453][ T4235] em28xx 2-1:0.89: Freeing device [ 61.763604][ T7] usb 5-1: USB disconnect, device number 2 [ 61.777542][ T4303] usblp0: removed [ 61.836004][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.955733][ T7] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 62.013321][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 62.293452][ T4233] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 62.306386][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 62.319397][ T4233] usb 3-1: Product: syz [ 62.331914][ T4233] usb 3-1: Manufacturer: syz [ 62.363004][ T4233] usb 3-1: SerialNumber: syz [ 62.397553][ T4233] usb 3-1: config 0 descriptor?? [ 62.434609][ T4233] usbtest 3-1:0.0: FX2 device [ 62.439335][ T4233] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 62.533661][ T4249] gspca_ov534_9: reg_w failed -71 [ 62.677374][ T13] usb 3-1: USB disconnect, device number 3 [ 62.949987][ T4363] Cannot find add_set index 0 as target [ 62.983819][ T4249] gspca_ov534_9: Unknown sensor 0000 [ 62.983927][ T4249] ov534_9: probe of 1-1:0.0 failed with error -22 [ 63.008183][ T4249] usb 1-1: USB disconnect, device number 2 [ 63.337177][ T4367] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 63.346020][ T4371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.363803][ T4367] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 63.364388][ T4371] bond0: (slave bond1): Enslaving as an active interface with an up link [ 63.543268][ T3520] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 63.583283][ T4375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19'. [ 63.747857][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.791223][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.850240][ T4375] bond0 (unregistering): (slave bond1): Releasing backup interface [ 63.888921][ T4375] bond0 (unregistering): Released all slaves [ 63.933458][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.964438][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.976047][ T4249] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 64.007815][ T3520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.031276][ T3520] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.061256][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.113120][ T3520] usb 3-1: config 0 descriptor?? [ 64.200861][ T4379] kvm: emulating exchange as write [ 64.297826][ T4382] device syzkaller0 entered promiscuous mode [ 64.479831][ T4388] capability: warning: `syz.3.26' uses 32-bit capabilities (legacy support in use) [ 64.543432][ T4249] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 64.552914][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.563283][ T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 64.566451][ T4249] usb 5-1: Product: syz [ 64.579209][ T4249] usb 5-1: Manufacturer: syz [ 64.588348][ T4249] usb 5-1: SerialNumber: syz [ 64.613089][ T4249] usb 5-1: config 0 descriptor?? [ 64.644757][ T3520] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 64.660328][ T4249] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 64.678418][ T3520] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 64.775171][ T4397] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 64.963350][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.013441][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 65.026595][ T3520] usb 3-1: USB disconnect, device number 4 [ 65.096653][ T4249] (null): failure reading functionality [ 65.103420][ T13] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 65.111426][ T13] usb 2-1: config 9 has no interface number 0 [ 65.130129][ T4249] i2c i2c-1: failure reading functionality [ 65.136098][ T13] usb 2-1: config 9 interface 1 has no altsetting 0 [ 65.151086][ T4249] i2c i2c-1: connected i2c-tiny-usb device [ 65.170163][ T4249] usb 5-1: USB disconnect, device number 3 [ 65.293424][ T13] usb 2-1: New USB device found, idVendor=19d2, idProduct=0025, bcdDevice=ac.91 [ 65.308025][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.349699][ T13] usb 2-1: Product: syz [ 65.369004][ T13] usb 2-1: Manufacturer: syz [ 65.382504][ T13] usb 2-1: SerialNumber: syz [ 65.543298][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.682720][ T4420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 65.714125][ T13] qmi_wwan 2-1:9.1: bogus CDC Union: master=0, slave=1 [ 65.752059][ T4422] syz.4.36 uses obsolete (PF_INET,SOCK_PACKET) [ 65.803668][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 65.834448][ T13] qmi_wwan: probe of 2-1:9.1 failed with error -22 [ 65.853309][ T4256] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.896558][ T13] usb 2-1: USB disconnect, device number 3 [ 65.933543][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 65.966518][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.979312][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 65.989247][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.125975][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 66.156215][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.193485][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 66.263589][ T4256] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 66.275598][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.285069][ T4256] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 66.298809][ T7] usb 4-1: Product: syz [ 66.303015][ T26] audit: type=1326 audit(1761324186.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2742046fc9 code=0x0 [ 66.333312][ T7] usb 4-1: Manufacturer: syz [ 66.333333][ T7] usb 4-1: SerialNumber: syz [ 66.343394][ T4256] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 66.379819][ T4256] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 66.400617][ T4256] usb 3-1: config 0 interface 0 has no altsetting 0 [ 66.414197][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 66.431812][ T4410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.455093][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 66.463061][ T7] usbtest 4-1:1.0: Linux user mode ISO test driver [ 66.508818][ T7] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 66.583570][ T4256] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 66.599035][ T4256] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 66.625757][ T4256] usb 3-1: Product: syz [ 66.629950][ T4256] usb 3-1: Manufacturer: syz [ 66.650207][ T4256] usb 3-1: SerialNumber: syz [ 66.687290][ T4256] usb 3-1: config 0 descriptor?? [ 66.723352][ T4235] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 66.734622][ T4256] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 66.741364][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.768294][ T4235] usb 5-1: Product: syz [ 66.772783][ T4235] usb 5-1: Manufacturer: syz [ 66.779370][ T4235] usb 5-1: SerialNumber: syz [ 66.794963][ T4235] usb 5-1: config 0 descriptor?? [ 66.814346][ T4256] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 67.085650][ T4256] usb 3-1: USB disconnect, device number 5 [ 67.093609][ T4418] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 67.118305][ T4431] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -19 [ 67.146359][ T4256] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 67.237057][ T4434] ALSA: mixer_oss: invalid OSS volume 'u' [ 67.243006][ T4434] ALSA: mixer_oss: invalid OSS volume 'KE(E֤Ya]f' [ 67.253499][ T4434] ALSA: mixer_oss: invalid OSS volume 'I' Yx\8' [ 67.260883][ T4434] ALSA: mixer_oss: invalid OSS volume 'KAwՈiILrJ4Emͽ' [ 67.275736][ T4434] ALSA: mixer_oss: invalid OSS volume 'X*yē҈ |)¶Sv'M3' [ 67.289786][ T4436] tipc: Started in network mode [ 67.295199][ T4436] tipc: Node identity ce15d5f05667, cluster identity 4711 [ 67.302403][ T4434] ALSA: mixer_oss: invalid OSS volume '&οer5<-{kUqvW~7|' [ 67.302621][ T4436] tipc: Enabled bearer , priority 0 [ 67.328455][ T4434] ALSA: mixer_oss: invalid OSS volume '/ӑ+e!586| Cɂ' [ 67.337545][ T4434] ALSA: mixer_oss: invalid OSS volume 'aQ4̳~A$nVnr' [ 67.348314][ T4436] device syzkaller0 entered promiscuous mode [ 67.357285][ T4434] ALSA: mixer_oss: invalid OSS volume 'B\,Ps9HoFr' [ 67.380610][ T4434] ALSA: mixer_oss: invalid OSS volume ')K47`.|=*:}4*' [ 67.389542][ T4434] ALSA: mixer_oss: invalid OSS volume '!|' [ 67.398853][ T4434] ALSA: mixer_oss: invalid OSS volume 'J' [ 67.403444][ T4436] tipc: Resetting bearer [ 67.427424][ T4435] tipc: Resetting bearer [ 67.443594][ T4434] ALSA: mixer_oss: invalid OSS volume 'UeIg=c¸֋͓hXyC9' [ 67.457860][ T4435] tipc: Disabling bearer [ 67.463943][ T4434] ALSA: mixer_oss: invalid OSS volume 'C<_E=b?H7' [ 67.482057][ T4434] ALSA: mixer_oss: invalid OSS volume 'rFcߋ;ǒJlvı;1.hg' [ 67.493565][ T4434] ALSA: mixer_oss: invalid OSS volume '' [ 67.501799][ T4434] ALSA: mixer_oss: invalid OSS volume 'yBqLa'MmЌ_dnD&' [ 67.503487][ T4235] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 67.525485][ T4434] ALSA: mixer_oss: invalid OSS volume '|kGhoQ6' [ 67.537011][ T4434] ALSA: mixer_oss: invalid OSS volume 'Vs1J y['&[wn)Y3EFI' [ 67.803996][ T4434] ALSA: mixer_oss: invalid OSS volume '_L> rDM' [ 67.815149][ T4434] ALSA: mixer_oss: invalid OSS volume 'Hs7d' [ 67.822894][ T4434] ALSA: mixer_oss: invalid OSS volume 'J/ݚO5@g?Ra' [ 67.835598][ T4434] ALSA: mixer_oss: invalid OSS volume ' O#|IXw7!йT'g' [ 67.848347][ T4434] ALSA: mixer_oss: invalid OSS volume 'UUI@W;d*( ā40?۽-IL' [ 67.863108][ T4434] ALSA: mixer_oss: invalid OSS volume 'r,4fArJpX:' [ 67.904824][ T4442] process 'syz.2.42' launched './file1' with NULL argv: empty string added [ 68.297116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.553290][ T4256] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.803500][ T4256] usb 5-1: Using ep0 maxpacket: 32 [ 68.928619][ T4256] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.942191][ T4256] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.003071][ T4256] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.070169][ T7] usb 4-1: USB disconnect, device number 3 [ 69.184062][ T26] audit: type=1326 audit(1761324188.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.213429][ T4256] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.230889][ T4469] loop2: detected capacity change from 0 to 7 [ 69.241796][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.265653][ T26] audit: type=1326 audit(1761324188.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.290408][ T4256] usb 5-1: Product: syz [ 69.301020][ T4256] usb 5-1: Manufacturer: syz [ 69.313313][ T3520] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.326803][ T4256] usb 5-1: SerialNumber: syz [ 69.346984][ T26] audit: type=1326 audit(1761324188.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.348763][ T4469] loop2: [ 69.373358][ T26] audit: type=1326 audit(1761324188.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.398184][ T26] audit: type=1326 audit(1761324188.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.421689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 69.430769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 69.444270][ T4256] cdc_ncm 5-1:1.0: skipping garbage [ 69.452137][ T4256] cdc_ncm 5-1:1.0: skipping garbage [ 69.456615][ T26] audit: type=1326 audit(1761324188.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc580b52810 code=0x7ffc0000 [ 69.481972][ T4256] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 69.495202][ T26] audit: type=1326 audit(1761324188.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.505363][ T4256] cdc_ncm 5-1:1.0: bind() failure [ 69.550806][ T26] audit: type=1326 audit(1761324188.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.609165][ T4469] loop2: partition table partially beyond EOD, truncated [ 69.623293][ T3520] usb 1-1: Using ep0 maxpacket: 32 [ 69.641843][ T26] audit: type=1326 audit(1761324188.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc580b53fc9 code=0x7ffc0000 [ 69.740795][ T4256] usb 5-1: USB disconnect, device number 5 [ 69.783390][ T3520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 69.873885][ T3520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 70.073402][ T3520] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 70.143694][ T3520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.163233][ T3520] usb 1-1: Product: syz [ 70.177662][ T3520] usb 1-1: Manufacturer: syz [ 70.191662][ T3520] usb 1-1: SerialNumber: syz [ 70.222430][ T3520] usb 1-1: config 0 descriptor?? [ 70.361404][ T3520] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 70.493265][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.532454][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 70.607631][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 70.658685][ T4256] usb 1-1: USB disconnect, device number 3 [ 70.673410][ T144] usb 1-1: Failed to submit usb control message: -71 [ 70.688087][ T144] usb 1-1: unable to send the bmi data to the device: -71 [ 70.721786][ T144] usb 1-1: unable to get target info from device [ 70.729674][ T144] usb 1-1: could not get target info (-71) [ 70.738505][ T144] usb 1-1: could not probe fw (-71) [ 70.783315][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 70.857456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.903655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.913313][ T3520] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.154207][ T4235] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 71.163603][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.183405][ T3520] usb 5-1: Using ep0 maxpacket: 8 [ 71.189887][ T4235] usb 4-1: Product: syz [ 71.196517][ T4235] usb 4-1: Manufacturer: syz [ 71.209073][ T4235] usb 4-1: SerialNumber: syz [ 71.226668][ T4235] usb 4-1: config 0 descriptor?? [ 71.256643][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263520][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335784][ T3520] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 71.350881][ T3520] usb 5-1: config 0 has no interface number 0 [ 71.498275][ T4235] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 71.577810][ T3520] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 71.609444][ T3520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.659379][ T3520] usb 5-1: Product: syz [ 71.669627][ T3520] usb 5-1: Manufacturer: syz [ 71.685543][ T3520] usb 5-1: SerialNumber: syz [ 71.720205][ T3520] usb 5-1: config 0 descriptor?? [ 71.983569][ T3520] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 71.990009][ T3520] usb 5-1: Failed to initialize entity for entity 6 [ 72.006929][ T3520] usb 5-1: Failed to register entities (-22). [ 72.053647][ T4529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.252021][ T3520] usb 5-1: USB disconnect, device number 6 [ 72.432456][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 72.432469][ T26] audit: type=1326 audit(1761324192.180:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.480553][ T4543] loop2: detected capacity change from 0 to 7 [ 72.510745][ T4543] loop2: [ 72.514760][ T4543] loop2: partition table partially beyond EOD, truncated [ 72.525429][ T26] audit: type=1326 audit(1761324192.220:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.597502][ T26] audit: type=1326 audit(1761324192.220:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.690810][ T26] audit: type=1326 audit(1761324192.220:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4e7a58810 code=0x7ffc0000 [ 72.726054][ T26] audit: type=1326 audit(1761324192.230:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.753302][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.759825][ T26] audit: type=1326 audit(1761324192.230:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.884504][ T26] audit: type=1326 audit(1761324192.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.926796][ T4555] device syzkaller0 entered promiscuous mode [ 72.941923][ T26] audit: type=1326 audit(1761324192.230:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 72.973620][ T26] audit: type=1326 audit(1761324192.230:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 73.003621][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 73.038898][ T26] audit: type=1326 audit(1761324192.230:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4e7a59fc9 code=0x7ffc0000 [ 73.123432][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.150401][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.174671][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.373417][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.382587][ T4297] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.400394][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.430750][ T13] usb 3-1: Product: syz [ 73.440714][ T13] usb 3-1: Manufacturer: syz [ 73.452188][ T13] usb 3-1: SerialNumber: syz [ 73.514328][ T13] cdc_ncm 3-1:1.0: skipping garbage [ 73.533277][ T13] cdc_ncm 3-1:1.0: skipping garbage [ 73.563356][ T13] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 73.570733][ T13] cdc_ncm 3-1:1.0: bind() failure [ 73.573739][ T4235] usb write operation failed. (-71) [ 73.584025][ T4581] device syzkaller0 entered promiscuous mode [ 73.596075][ T4235] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 73.617699][ T4235] dvbdev: DVB: registering new adapter (Terratec H7) [ 73.633372][ T4235] usb 4-1: media controller created [ 73.647321][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 73.654162][ T4581] tipc: Enabled bearer , priority 0 [ 73.663328][ T4235] usb read operation failed. (-71) [ 73.683473][ T4235] usb write operation failed. (-71) [ 73.694715][ T4235] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 73.703036][ T4581] Zero length message leads to an empty skb [ 73.734727][ T13] usb 3-1: USB disconnect, device number 6 [ 73.758521][ T4235] usb 4-1: USB disconnect, device number 4 [ 73.763441][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 73.777274][ T4589] tipc: Resetting bearer [ 73.804131][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 73.827286][ T4580] tipc: Resetting bearer [ 73.869168][ T4580] tipc: Disabling bearer [ 73.995396][ T4297] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 74.035303][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.049878][ T4297] usb 2-1: Product: syz [ 74.066252][ T4297] usb 2-1: Manufacturer: syz [ 74.082754][ T4297] usb 2-1: SerialNumber: syz [ 74.096919][ T4297] usb 2-1: config 0 descriptor?? [ 74.292871][ T4297] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 74.416421][ T4564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.430601][ T4564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.457866][ T7] usb 2-1: USB disconnect, device number 4 [ 74.473478][ T4280] usb 2-1: Failed to submit usb control message: -71 [ 74.480475][ T4280] usb 2-1: unable to send the bmi data to the device: -71 [ 74.491116][ T4280] usb 2-1: unable to get target info from device [ 74.498035][ T4280] usb 2-1: could not get target info (-71) [ 74.505262][ T4280] usb 2-1: could not probe fw (-71) [ 74.565125][ T4235] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 74.603422][ T4297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.853306][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 74.859143][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 74.975455][ T4297] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.010440][ T4297] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.066931][ T4297] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.084041][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.097842][ T4297] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.111783][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.128046][ T4297] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.142252][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.170642][ T4297] usb 1-1: config 0 descriptor?? [ 75.203390][ T4235] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 75.233447][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.262786][ T4235] usb 3-1: Product: syz [ 75.285432][ T4235] usb 3-1: Manufacturer: syz [ 75.297545][ T4235] usb 3-1: SerialNumber: syz [ 75.358965][ T4235] usb 3-1: config 0 descriptor?? [ 75.420769][ T4235] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 75.455055][ T4297] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 75.465841][ T4622] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.520245][ T4649] device syzkaller0 entered promiscuous mode [ 75.684417][ T4303] usb 1-1: USB disconnect, device number 4 [ 75.693669][ T4303] usblp0: removed [ 75.713281][ T4622] usb 2-1: Using ep0 maxpacket: 8 [ 75.833566][ T4622] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 75.841668][ T4622] usb 2-1: config 0 has no interface number 0 [ 76.023362][ T4622] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 76.032551][ T4622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.044014][ T4622] usb 2-1: Product: syz [ 76.048189][ T4622] usb 2-1: Manufacturer: syz [ 76.052778][ T4622] usb 2-1: SerialNumber: syz [ 76.061747][ T4622] usb 2-1: config 0 descriptor?? [ 76.223247][ T4303] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.253291][ T4235] gspca_ov534_9: reg_w failed -71 [ 76.323463][ T4622] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 76.330041][ T4622] usb 2-1: Failed to initialize entity for entity 6 [ 76.341663][ T4622] usb 2-1: Failed to register entities (-22). [ 76.375571][ T23] cfg80211: failed to load regulatory.db [ 76.499817][ T4303] usb 5-1: Using ep0 maxpacket: 32 [ 76.577680][ T7] usb 2-1: USB disconnect, device number 5 [ 76.624240][ T4303] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.642865][ T4303] usb 5-1: config 0 has no interface number 0 [ 76.663366][ T4235] gspca_ov534_9: Unknown sensor 0000 [ 76.663424][ T4235] ov534_9: probe of 3-1:0.0 failed with error -22 [ 76.688205][ T4303] usb 5-1: config 0 interface 89 has no altsetting 0 [ 76.702533][ T4235] usb 3-1: USB disconnect, device number 7 [ 76.737033][ T4665] device syzkaller0 entered promiscuous mode [ 76.813745][ T4665] tipc: Started in network mode [ 76.818647][ T4665] tipc: Node identity 124464653626, cluster identity 4711 [ 76.841782][ T4665] tipc: Enabled bearer , priority 0 [ 76.870516][ T4665] tipc: Resetting bearer [ 76.883854][ T4303] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 76.903567][ T4664] tipc: Resetting bearer [ 76.910349][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.931766][ T4303] usb 5-1: Product: syz [ 76.931890][ T4668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 76.945476][ T4303] usb 5-1: Manufacturer: syz [ 76.952525][ T4303] usb 5-1: SerialNumber: syz [ 76.967025][ T4664] tipc: Disabling bearer [ 76.977336][ T4303] usb 5-1: config 0 descriptor?? [ 77.034684][ T4303] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 77.053254][ T4303] em28xx 5-1:0.89: Video interface 89 found: bulk [ 77.343254][ T4235] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 77.433365][ T4249] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.443261][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.683237][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 77.688421][ T4249] usb 2-1: Using ep0 maxpacket: 8 [ 77.713508][ T4303] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 77.813913][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.827594][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.843350][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.873578][ T4235] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 77.886505][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.903481][ T4235] usb 3-1: Product: syz [ 77.909935][ T4235] usb 3-1: Manufacturer: syz [ 77.918515][ T4235] usb 3-1: SerialNumber: syz [ 77.974197][ T4249] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 77.990021][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.001891][ T4249] usb 2-1: Product: syz [ 78.011060][ T4249] usb 2-1: Manufacturer: syz [ 78.020285][ T4249] usb 2-1: SerialNumber: syz [ 78.025200][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.040908][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.057133][ T4249] usb 2-1: config 0 descriptor?? [ 78.065243][ T23] usb 4-1: Product: syz [ 78.069414][ T23] usb 4-1: Manufacturer: syz [ 78.078731][ T23] usb 4-1: SerialNumber: syz [ 78.095138][ T4249] gspca_main: se401-2.14.0 probing 047d:5003 [ 78.153974][ T23] cdc_ncm 4-1:1.0: skipping garbage [ 78.159186][ T23] cdc_ncm 4-1:1.0: skipping garbage [ 78.169499][ T23] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 78.180117][ T23] cdc_ncm 4-1:1.0: bind() failure [ 78.386520][ T3520] usb 4-1: USB disconnect, device number 5 [ 78.423561][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 78.533409][ T4249] gspca_se401: Frame size: 0x2 1/4th janggu [ 78.539387][ T4249] gspca_se401: Frame size: 0x127 bayer [ 78.548860][ T4249] gspca_se401: Frame size: 256x0 bayer [ 78.558965][ T4249] gspca_se401: Frame size: 0x0 1/16th janggu [ 78.569074][ T4249] gspca_se401: Frame size: 0x4 bayer [ 78.754920][ T4249] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 78.811573][ T4249] usb 2-1: USB disconnect, device number 6 [ 78.853397][ T4303] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 78.872603][ T4303] em28xx 5-1:0.89: board has no eeprom [ 78.956632][ T4679] netlink: 'syz.3.91': attribute type 10 has an invalid length. [ 78.977770][ T4679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 79.003927][ T4303] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 79.021745][ T4303] em28xx 5-1:0.89: analog set to bulk mode. [ 79.071369][ T4303] usb 5-1: USB disconnect, device number 7 [ 79.089060][ T4303] em28xx 5-1:0.89: Disconnecting em28xx [ 79.098720][ T23] em28xx 5-1:0.89: Registering V4L2 extension [ 79.173103][ T4679] team0: Port device geneve0 added [ 79.176222][ T4669] udc-core: couldn't find an available UDC or it's busy [ 79.185267][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 79.238281][ T4669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.256206][ T23] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 79.269948][ T23] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 79.295334][ T23] em28xx 5-1:0.89: No AC97 audio processor [ 79.314313][ T23] usb 5-1: Decoder not found [ 79.318946][ T23] em28xx 5-1:0.89: failed to create media graph [ 79.347381][ T23] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 79.364046][ T23] em28xx 5-1:0.89: Registering snapshot button... [ 79.383235][ T4685] ================================================================== [ 79.391591][ T4685] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 79.399036][ T4685] Read of size 8 at addr ffff88807cf30900 by task v4l_id/4685 [ 79.406499][ T4685] [ 79.408912][ T4685] CPU: 1 PID: 4685 Comm: v4l_id Not tainted syzkaller #0 [ 79.415946][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.426005][ T4685] Call Trace: [ 79.429275][ T4685] [ 79.432190][ T4685] dump_stack_lvl+0x168/0x230 [ 79.436877][ T4685] ? show_regs_print_info+0x20/0x20 [ 79.442077][ T4685] ? _printk+0xcc/0x110 [ 79.446217][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 79.450793][ T4685] ? load_image+0x3b0/0x3b0 [ 79.455295][ T4685] print_address_description+0x60/0x2d0 [ 79.460845][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 79.465435][ T4685] kasan_report+0xdf/0x130 [ 79.469841][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 79.474422][ T4685] v4l2_fh_open+0xc6/0x430 [ 79.478827][ T4685] em28xx_v4l2_open+0x152/0x990 [ 79.483673][ T4685] ? __lock_acquire+0x7c60/0x7c60 [ 79.488709][ T4685] v4l2_open+0x20b/0x360 [ 79.492944][ T4685] chrdev_open+0x597/0x670 [ 79.497347][ T4685] ? cd_forget+0x160/0x160 [ 79.501746][ T4685] ? tomoyo_file_open+0xe9/0x170 [ 79.506668][ T4685] ? fsnotify_perm+0x3a7/0x560 [ 79.511420][ T4685] ? cd_forget+0x160/0x160 [ 79.515922][ T4685] do_dentry_open+0x7ff/0xf80 [ 79.520592][ T4685] path_openat+0x2682/0x2f30 [ 79.525175][ T4685] ? __kasan_slab_alloc+0xb3/0xd0 [ 79.530181][ T4685] ? __kasan_slab_alloc+0x9c/0xd0 [ 79.535189][ T4685] ? slab_post_alloc_hook+0x4c/0x380 [ 79.540576][ T4685] ? verify_lock_unused+0x140/0x140 [ 79.545771][ T4685] ? __x64_sys_openat+0x135/0x160 [ 79.550907][ T4685] ? do_filp_open+0x3e0/0x3e0 [ 79.555595][ T4685] do_filp_open+0x1b3/0x3e0 [ 79.560096][ T4685] ? vfs_tmpfile+0x300/0x300 [ 79.564695][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 79.569535][ T4685] ? alloc_fd+0x598/0x630 [ 79.573859][ T4685] do_sys_openat2+0x142/0x4a0 [ 79.578526][ T4685] ? __lock_acquire+0x7c60/0x7c60 [ 79.583545][ T4685] ? do_sys_open+0xe0/0xe0 [ 79.587965][ T4685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.593943][ T4685] ? lock_chain_count+0x20/0x20 [ 79.598893][ T4685] ? vtime_user_exit+0x2dc/0x400 [ 79.603820][ T4685] __x64_sys_openat+0x135/0x160 [ 79.608727][ T4685] do_syscall_64+0x4c/0xa0 [ 79.613134][ T4685] ? clear_bhb_loop+0x30/0x80 [ 79.617814][ T4685] ? clear_bhb_loop+0x30/0x80 [ 79.622487][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.628381][ T4685] RIP: 0033:0x7fe576e0a407 [ 79.632779][ T4685] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 79.652368][ T4685] RSP: 002b:00007ffe3a3e8e90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 79.660771][ T4685] RAX: ffffffffffffffda RBX: 00007fe576d1c880 RCX: 00007fe576e0a407 [ 79.668733][ T4685] RDX: 0000000000000000 RSI: 00007ffe3a3eaf1d RDI: ffffffffffffff9c [ 79.676692][ T4685] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 79.684654][ T4685] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.692614][ T4685] R13: 00007ffe3a3e90e0 R14: 00007fe577598000 R15: 00005626c9dc64d8 [ 79.700586][ T4685] [ 79.703592][ T4685] [ 79.705896][ T4685] The buggy address belongs to the page: [ 79.711512][ T4685] page:ffffea0001f3cc00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf30 [ 79.721641][ T4685] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.728743][ T4685] raw: 00fff00000000000 ffffea0000b17708 ffff8880b91409f0 0000000000000000 [ 79.737317][ T4685] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.745931][ T4685] page dumped because: kasan: bad access detected [ 79.752341][ T4685] page_owner tracks the page as freed [ 79.757784][ T4685] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 23, ts 79106313955, free_ts 79363026434 [ 79.773220][ T4685] get_page_from_freelist+0x1b77/0x1c60 [ 79.778775][ T4685] __alloc_pages+0x1e1/0x470 [ 79.783355][ T4685] kmalloc_order+0x40/0x150 [ 79.787849][ T4685] kmalloc_order_trace+0x14/0xf0 [ 79.792767][ T4685] em28xx_v4l2_init+0xe2/0x2e50 [ 79.798077][ T4685] em28xx_init_extension+0x118/0x1b0 [ 79.803500][ T4685] process_one_work+0x863/0x1000 [ 79.808426][ T4685] worker_thread+0xd76/0x12a0 [ 79.813087][ T4685] kthread+0x436/0x520 [ 79.817139][ T4685] ret_from_fork+0x1f/0x30 [ 79.821540][ T4685] page last free stack trace: [ 79.826191][ T4685] free_unref_page_prepare+0x637/0x6c0 [ 79.831632][ T4685] free_unref_page+0x94/0x280 [ 79.836294][ T4685] free_nonslab_page+0xe2/0x150 [ 79.841134][ T4685] em28xx_v4l2_init+0x1649/0x2e50 [ 79.846136][ T4685] em28xx_init_extension+0x118/0x1b0 [ 79.851397][ T4685] process_one_work+0x863/0x1000 [ 79.856317][ T4685] worker_thread+0xd76/0x12a0 [ 79.860976][ T4685] kthread+0x436/0x520 [ 79.865031][ T4685] ret_from_fork+0x1f/0x30 [ 79.869431][ T4685] [ 79.871734][ T4685] Memory state around the buggy address: [ 79.877341][ T4685] ffff88807cf30800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.885391][ T4685] ffff88807cf30880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.893433][ T4685] >ffff88807cf30900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.901699][ T4685] ^ [ 79.905782][ T4685] ffff88807cf30980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.913831][ T4685] ffff88807cf30a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.921872][ T4685] ================================================================== [ 79.929910][ T4685] Disabling lock debugging due to kernel taint [ 79.940473][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 79.969545][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9 [ 79.984999][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 80.007454][ T23] em28xx 5-1:0.89: Remote control support is not available for this card. [ 80.023399][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 80.039087][ T4303] em28xx 5-1:0.89: Closing input extension [ 80.045370][ T4303] em28xx 5-1:0.89: Deregistering snapshot button [ 80.074851][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 80.087258][ T4689] Cannot find add_set index 0 as target [ 80.123728][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 80.153347][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 80.203580][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 80.233282][ T4235] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 80.253402][ T4685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.260697][ T4685] CPU: 1 PID: 4685 Comm: v4l_id Tainted: G B syzkaller #0 [ 80.269093][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.279131][ T4685] Call Trace: [ 80.282399][ T4685] [ 80.285317][ T4685] dump_stack_lvl+0x168/0x230 [ 80.289985][ T4685] ? show_regs_print_info+0x20/0x20 [ 80.295170][ T4685] ? load_image+0x3b0/0x3b0 [ 80.299660][ T4685] panic+0x2c9/0x7f0 [ 80.303542][ T4685] ? bpf_jit_dump+0xd0/0xd0 [ 80.308061][ T4685] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 80.313943][ T4685] ? _raw_spin_unlock+0x40/0x40 [ 80.318795][ T4685] ? print_memory_metadata+0x314/0x400 [ 80.324247][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 80.328819][ T4685] check_panic_on_warn+0x80/0xa0 [ 80.333740][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 80.338308][ T4685] end_report+0x6d/0xf0 [ 80.342447][ T4685] kasan_report+0x102/0x130 [ 80.346932][ T4685] ? v4l2_fh_open+0xc6/0x430 [ 80.351509][ T4685] v4l2_fh_open+0xc6/0x430 [ 80.355904][ T4685] em28xx_v4l2_open+0x152/0x990 [ 80.361083][ T4685] ? __lock_acquire+0x7c60/0x7c60 [ 80.366096][ T4685] v4l2_open+0x20b/0x360 [ 80.370335][ T4685] chrdev_open+0x597/0x670 [ 80.374735][ T4685] ? cd_forget+0x160/0x160 [ 80.379132][ T4685] ? tomoyo_file_open+0xe9/0x170 [ 80.384052][ T4685] ? fsnotify_perm+0x3a7/0x560 [ 80.388826][ T4685] ? cd_forget+0x160/0x160 [ 80.393222][ T4685] do_dentry_open+0x7ff/0xf80 [ 80.397882][ T4685] path_openat+0x2682/0x2f30 [ 80.402494][ T4685] ? __kasan_slab_alloc+0xb3/0xd0 [ 80.407513][ T4685] ? __kasan_slab_alloc+0x9c/0xd0 [ 80.412524][ T4685] ? slab_post_alloc_hook+0x4c/0x380 [ 80.417791][ T4685] ? verify_lock_unused+0x140/0x140 [ 80.422972][ T4685] ? __x64_sys_openat+0x135/0x160 [ 80.427977][ T4685] ? do_filp_open+0x3e0/0x3e0 [ 80.432655][ T4685] do_filp_open+0x1b3/0x3e0 [ 80.437599][ T4685] ? vfs_tmpfile+0x300/0x300 [ 80.442445][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 80.447279][ T4685] ? alloc_fd+0x598/0x630 [ 80.451593][ T4685] do_sys_openat2+0x142/0x4a0 [ 80.456431][ T4685] ? __lock_acquire+0x7c60/0x7c60 [ 80.461456][ T4685] ? do_sys_open+0xe0/0xe0 [ 80.465860][ T4685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.471829][ T4685] ? lock_chain_count+0x20/0x20 [ 80.476676][ T4685] ? vtime_user_exit+0x2dc/0x400 [ 80.481771][ T4685] __x64_sys_openat+0x135/0x160 [ 80.486605][ T4685] do_syscall_64+0x4c/0xa0 [ 80.491090][ T4685] ? clear_bhb_loop+0x30/0x80 [ 80.495747][ T4685] ? clear_bhb_loop+0x30/0x80 [ 80.500408][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.506390][ T4685] RIP: 0033:0x7fe576e0a407 [ 80.510795][ T4685] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 80.530425][ T4685] RSP: 002b:00007ffe3a3e8e90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 80.538895][ T4685] RAX: ffffffffffffffda RBX: 00007fe576d1c880 RCX: 00007fe576e0a407 [ 80.546857][ T4685] RDX: 0000000000000000 RSI: 00007ffe3a3eaf1d RDI: ffffffffffffff9c [ 80.554992][ T4685] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 80.562946][ T4685] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 80.570900][ T4685] R13: 00007ffe3a3e90e0 R14: 00007fe577598000 R15: 00005626c9dc64d8 [ 80.578859][ T4685] [ 80.582074][ T4685] Kernel Offset: disabled [ 80.586396][ T4685] Rebooting in 86400 seconds..