last executing test programs: 13.661348749s ago: executing program 0 (id=745): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="530003"], 0x8) 13.502818532s ago: executing program 0 (id=747): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, "df25"}, @main=@item_012={0x2, 0x0, 0x9, "93c1"}, @global=@item_4={0x3, 0x1, 0x1, "47742c88"}]}}, 0x0}, 0x0) 10.721281015s ago: executing program 1 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f02", 0x8) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x20, 0x0, 0x0, @str='(\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 10.041693905s ago: executing program 2 (id=751): pipe2(0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r2, r3, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x3, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x80000}) socket(0x2a, 0x2, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$sg(0x0, 0x1000000000, 0xc0500) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 9.241255067s ago: executing program 1 (id=752): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) 9.167276488s ago: executing program 2 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x40000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffbff}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}]}]}, 0x30}}, 0x0) 9.125330999s ago: executing program 1 (id=754): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3c, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000e00)={"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"}) 8.849384604s ago: executing program 2 (id=757): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="53000300"], 0x8) 7.561214613s ago: executing program 4 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x400000}) 7.427991685s ago: executing program 3 (id=759): socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) 7.427466695s ago: executing program 2 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect(0x5, 0x46, 0x0, 0x0) 7.333164527s ago: executing program 1 (id=761): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x3, 0x8}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7f, 0x6, 0x4b, 0x39cc1916, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x2, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x7, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x400401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x46, 0x2007, 0xd, 0x1, 0xfe002000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x10, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x8, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7ff, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x939, 0xa, 0x80000007, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0x10, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x5, 0x2bf, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.218204119s ago: executing program 3 (id=762): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x66, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1ff, {0x8, 0x6, "097b84", 0x1c00, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty}}}}}}}, 0x0) add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x37, 0x38, 0x61, 0x61, 0x31, 0x66, 0x35, 0x66, 0x32, 0x34, 0x31, 0x34, 0x33, 0x62, 0x35, 0x37]}, &(0x7f0000000740)={0x0, "9de76311a2b748513a31f791d09c3245ead9066c3acfe0073117f99a5284c832f34d29097cc0441c113f18a1ac10c92fa68e18cd5e3bbcf6d26d110e8f4a19cf", 0x28}, 0x48, r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xc, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.100197091s ago: executing program 4 (id=763): unshare(0x2c020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$inet6(r1, 0x0, 0x0) 4.478606111s ago: executing program 0 (id=764): pipe2(0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r2, r3, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x3, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x80000}) socket(0x2a, 0x2, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$sg(0x0, 0x1000000000, 0xc0500) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 4.47784382s ago: executing program 3 (id=765): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x29, 0x5, 0x0, 0x800, 0x1, 0x5, 0xe0e5cfe3, 0x0, 0x0, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r0, r2, 0x6700000000000000) 3.994169838s ago: executing program 2 (id=766): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 3.791878191s ago: executing program 1 (id=767): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) 3.705315443s ago: executing program 4 (id=768): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) userfaultfd(0x80001) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) 3.695166693s ago: executing program 2 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b90a00000044268cb89e14f086ddedcfbfbeec3ad56d65e26a696578ec93ae803b9545e1a3a8d76d5e6e50076f87b133bc611ba35cfb", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c}) 3.669320194s ago: executing program 0 (id=770): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="53000300"], 0x8) 2.985752904s ago: executing program 3 (id=771): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3c, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000e00)={"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"}) 2.985140384s ago: executing program 4 (id=772): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) 2.883916295s ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x400000}) 2.820478506s ago: executing program 4 (id=774): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x9, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) 2.765249487s ago: executing program 1 (id=775): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc}], 0x1, 0x9) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@private=0xa010102, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x4e22, 0x4000, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x3ff, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x1, 0x2, 0x0, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000927000000270e22880732fadac99d57"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0xfffffffd, 0x24000000, 0x10, 0xa, 0x9, "0180000000000000cf369c6b49ff36f9ac924f", 0x85, 0xeb4}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xd) syz_open_dev$hiddev(&(0x7f0000000100), 0x2, 0xc0000) r3 = syz_open_pts(0xffffffffffffffff, 0x40002) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0xf) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000740)=""/232, 0xe8) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$char_usb(r4, &(0x7f0000000840)=""/252, 0xfc) 2.678518288s ago: executing program 4 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect(0x5, 0x46, 0x0, 0x0) 2.478214882s ago: executing program 3 (id=777): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x3, 0x8}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7f, 0x6, 0x4b, 0x39cc1916, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x2, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x7, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x400401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x46, 0x2007, 0xd, 0x1, 0xfe002000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x10, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x8, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7ff, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x939, 0xa, 0x80000007, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0x10, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x5, 0x2bf, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 548.875671ms ago: executing program 0 (id=778): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) 0s ago: executing program 3 (id=779): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940), 0xc02, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) socket(0x11, 0xa, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 65.075544][ T4237] cgroup: Unknown subsys name 'net' [ 65.208594][ T4237] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.702032][ T4237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.761004][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.763235][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.769711][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.777111][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.783799][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.790843][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.797427][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.804356][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.811187][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.818052][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.832517][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.833564][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.839989][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.846704][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.854463][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.869389][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.877669][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.885514][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.892751][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.900112][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.902881][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.907939][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.914546][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.932655][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.939921][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.956757][ T4253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.968621][ T4253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.976069][ T4253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.984720][ T4253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.992971][ T4253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.306686][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 69.457562][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 69.488056][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 69.527672][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 69.581906][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.589785][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.598317][ T4248] device bridge_slave_0 entered promiscuous mode [ 69.627210][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 69.637436][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.644735][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.652990][ T4248] device bridge_slave_1 entered promiscuous mode [ 69.742940][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.771101][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.779486][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.787705][ T4250] device bridge_slave_0 entered promiscuous mode [ 69.804642][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.818834][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.826225][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.834589][ T4262] device bridge_slave_0 entered promiscuous mode [ 69.841872][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.849897][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.858397][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.865660][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.873131][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.880917][ T4249] device bridge_slave_0 entered promiscuous mode [ 69.900229][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.907416][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.915599][ T4262] device bridge_slave_1 entered promiscuous mode [ 69.930378][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.937706][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.945739][ T4249] device bridge_slave_1 entered promiscuous mode [ 69.996677][ T4248] team0: Port device team_slave_0 added [ 70.020570][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.032983][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.051978][ T4248] team0: Port device team_slave_1 added [ 70.058034][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.065307][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.076775][ T4261] device bridge_slave_0 entered promiscuous mode [ 70.086350][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.113739][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.137491][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.144816][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.152842][ T4261] device bridge_slave_1 entered promiscuous mode [ 70.161172][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.173124][ T4250] team0: Port device team_slave_0 added [ 70.180597][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.199616][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.207606][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.234171][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.271023][ T4250] team0: Port device team_slave_1 added [ 70.292975][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.299942][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.326000][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.339429][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.366973][ T4249] team0: Port device team_slave_0 added [ 70.379275][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.391676][ T4262] team0: Port device team_slave_0 added [ 70.409280][ T4249] team0: Port device team_slave_1 added [ 70.415563][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.426462][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.452847][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.465377][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.472811][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.499024][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.527180][ T4262] team0: Port device team_slave_1 added [ 70.581764][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.588931][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.614947][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.640032][ T4261] team0: Port device team_slave_0 added [ 70.646930][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.654128][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.680361][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.700397][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.707617][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.733912][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.758569][ T4261] team0: Port device team_slave_1 added [ 70.764857][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.771807][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.797987][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.812131][ T4248] device hsr_slave_0 entered promiscuous mode [ 70.819770][ T4248] device hsr_slave_1 entered promiscuous mode [ 70.831404][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.838375][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.845482][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.853376][ T4250] Cannot create hsr debugfs directory [ 70.917922][ T4249] device hsr_slave_0 entered promiscuous mode [ 70.924971][ T4249] device hsr_slave_1 entered promiscuous mode [ 70.931487][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.939791][ T4249] Cannot create hsr debugfs directory [ 70.946203][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.953325][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.963589][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 70.988781][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.033629][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.040676][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.042654][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 71.072634][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.074115][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 71.084765][ T4253] Bluetooth: hci3: command 0x0409 tx timeout [ 71.091033][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 71.137153][ T4262] device hsr_slave_0 entered promiscuous mode [ 71.144148][ T4262] device hsr_slave_1 entered promiscuous mode [ 71.150686][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.158362][ T4262] Cannot create hsr debugfs directory [ 71.206306][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213041][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276928][ T4261] device hsr_slave_0 entered promiscuous mode [ 71.284322][ T4261] device hsr_slave_1 entered promiscuous mode [ 71.290917][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.298810][ T4261] Cannot create hsr debugfs directory [ 71.518891][ T4248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.538788][ T4248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.569398][ T4248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.583476][ T4248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.623415][ T4250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.633053][ T4250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.642689][ T4250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.659696][ T4250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.760335][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.775843][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.790001][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.807453][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.826061][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.895111][ T4261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.908188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.918186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.930515][ T4261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.939872][ T4261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.949074][ T4261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.985242][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.006280][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.043702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.055065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.064356][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.071553][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.110671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.121390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.130468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.144826][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.152108][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.160541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.169754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.186315][ T4262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.212187][ T4248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.227187][ T4248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.243043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.251691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.259752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.269245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.278923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.287854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.299110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.307714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.316864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.325633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.334518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.342708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.351728][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.358801][ T4262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.373916][ T4262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.386391][ T4262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.405283][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.429371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.439025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.455990][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.463171][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.477485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.510279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.520513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.534134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.546394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.556223][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.563432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.581331][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.596509][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.617485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.634326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.649922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.658804][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.665968][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.723402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.732024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.746390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.756849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.765828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.774691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.784981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.792092][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.799920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.809511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.819819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.847563][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.856577][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.866778][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.875436][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.895035][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.918724][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.931478][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.941528][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.950841][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.959969][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.968833][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.978405][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.987537][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.996525][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.003701][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.011552][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.020511][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.029334][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.036471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.045148][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 73.052421][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.060598][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.080061][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.094116][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.118219][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.127391][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.133185][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 73.135254][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 73.141108][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 73.148006][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 73.161365][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.169068][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.177930][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.186602][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.195401][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.204959][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.214334][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.231163][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.250960][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.266080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.279723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.295983][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.316947][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.334242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.402908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.413399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.423501][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.431123][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.463206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.482758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.493720][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.500839][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.516480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.528755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.538299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.547863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.557193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.565601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.591380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.600295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.614018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.625662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.654441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.674330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.695440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.704926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.715504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.728244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.746790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.764065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.780906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.816359][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.829333][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.855604][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.883637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.892250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.943681][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.951235][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.987250][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.030827][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.043992][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.083698][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.104778][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.120990][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.175379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.194299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.214343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.239563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.259098][ T4250] device veth0_vlan entered promiscuous mode [ 74.308592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.327907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.340795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.350001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.359306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.367774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.386246][ T4249] device veth0_vlan entered promiscuous mode [ 74.424663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.434893][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.444506][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.452007][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.460869][ T4250] device veth1_vlan entered promiscuous mode [ 74.475201][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.487942][ T4249] device veth1_vlan entered promiscuous mode [ 74.515816][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.525036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.537081][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.546151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.554152][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.576194][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.599278][ T4250] device veth0_macvtap entered promiscuous mode [ 74.609490][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.619242][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.628589][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.637903][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.649982][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.659369][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.668439][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.676870][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.685131][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.700572][ T4248] device veth0_vlan entered promiscuous mode [ 74.711197][ T4250] device veth1_macvtap entered promiscuous mode [ 74.761821][ T4248] device veth1_vlan entered promiscuous mode [ 74.770019][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.781026][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.790296][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.799633][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.808625][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.817935][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.836866][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.845927][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.858655][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.868263][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.883687][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.898412][ T4249] device veth0_macvtap entered promiscuous mode [ 74.911355][ T4262] device veth0_vlan entered promiscuous mode [ 74.919659][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.928558][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.937848][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.946614][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.955579][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.965696][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.975475][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.990517][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999554][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.010344][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.019870][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.032884][ T4249] device veth1_macvtap entered promiscuous mode [ 75.071114][ T4262] device veth1_vlan entered promiscuous mode [ 75.091600][ T4261] device veth0_vlan entered promiscuous mode [ 75.104200][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.115802][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.125813][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 75.134415][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.156809][ T4248] device veth0_macvtap entered promiscuous mode [ 75.167850][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.176436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.189012][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.198134][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.206378][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 75.206411][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 75.212491][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 75.218679][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 75.227568][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.239492][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.248415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.258549][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.267872][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.287003][ T4261] device veth1_vlan entered promiscuous mode [ 75.301277][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.312061][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.325351][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.349034][ T4248] device veth1_macvtap entered promiscuous mode [ 75.356788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.368452][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.376750][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.386237][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.394476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.402943][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.411576][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.435120][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447936][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.456952][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.465738][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.493064][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.501399][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.510838][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.520631][ T4262] device veth0_macvtap entered promiscuous mode [ 75.555230][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.566511][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578720][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.596305][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.609630][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.619959][ T4262] device veth1_macvtap entered promiscuous mode [ 75.628232][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.636880][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.645911][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.654983][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.696024][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.709089][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.720429][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.731134][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.743045][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.769098][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.789484][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.800481][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.811254][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.821231][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.832847][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.845517][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.863584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.873242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.882017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.891017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.906117][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927967][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941780][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.950948][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.963510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.972161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.982002][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.994655][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.008114][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.018876][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.029412][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.040242][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.051787][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.073325][ T4261] device veth0_macvtap entered promiscuous mode [ 76.080611][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.089538][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.098637][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.123652][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.127032][ T4261] device veth1_macvtap entered promiscuous mode [ 76.142184][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.164658][ T4262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.175616][ T4262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.184846][ T4262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.193940][ T4262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.225441][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.238444][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.284842][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.285614][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.304070][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.315705][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.327393][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.338167][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.348029][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.358860][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.369606][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.380075][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.391432][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.413530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.421942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.430983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.454818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463929][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.475910][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.495257][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.505455][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.516212][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.526214][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.536935][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.546990][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.557491][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.568770][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.587951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.596169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.605874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.621339][ T4261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630917][ T4261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639842][ T4261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.648785][ T4261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.688219][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.716453][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.764449][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.773678][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.781693][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.799664][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.846465][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.855040][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.883187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.925708][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.949248][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.986719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.020504][ T4337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.041380][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.064825][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.076906][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.106731][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.112181][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.128361][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.146951][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.164588][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.198632][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.206173][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 77.284634][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 77.284656][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 77.284690][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 77.290734][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 78.372492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.382535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.392308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.402308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.416552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 78.643075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.843824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.931065][ T4364] fuse: Bad value for 'fd' [ 79.594511][ T4376] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13'. [ 79.923387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.923439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.923488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.188474][ T27] audit: type=1326 audit(1742942849.214:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.213578][ T27] audit: type=1326 audit(1742942849.214:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.235866][ T27] audit: type=1326 audit(1742942849.214:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.317194][ T27] audit: type=1326 audit(1742942849.214:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.360445][ T27] audit: type=1326 audit(1742942849.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.365358][ T4409] fuse: Bad value for 'fd' [ 81.382449][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.390863][ T27] audit: type=1326 audit(1742942849.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.414896][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.424567][ T27] audit: type=1326 audit(1742942849.344:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.446470][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.465954][ T4254] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.512421][ T27] audit: type=1326 audit(1742942849.344:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.568132][ T27] audit: type=1326 audit(1742942849.344:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.595155][ T27] audit: type=1326 audit(1742942849.344:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 81.652522][ T4254] usb 3-1: Using ep0 maxpacket: 8 [ 81.672615][ T4254] usb 3-1: config 0 has no interfaces? [ 81.724050][ T4254] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 81.742462][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.750538][ T4254] usb 3-1: Product: syz [ 81.763694][ T4254] usb 3-1: Manufacturer: syz [ 81.768343][ T4254] usb 3-1: SerialNumber: syz [ 81.777639][ T4254] usb 3-1: config 0 descriptor?? [ 82.127320][ T4297] usb 3-1: USB disconnect, device number 2 [ 84.292420][ T4442] fuse: Bad value for 'fd' [ 86.017604][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.332695][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 86.348573][ T14] usb 5-1: config 0 has no interfaces? [ 86.427497][ T14] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 86.470360][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.489012][ T14] usb 5-1: Product: syz [ 86.512480][ T14] usb 5-1: Manufacturer: syz [ 86.539415][ T14] usb 5-1: SerialNumber: syz [ 86.580408][ T951] cfg80211: failed to load regulatory.db [ 86.590226][ T14] usb 5-1: config 0 descriptor?? [ 87.458315][ T951] usb 5-1: USB disconnect, device number 2 [ 88.148813][ T4485] fuse: Unknown parameter '0x0000000000000003' [ 88.226453][ T4490] device batadv_slave_1 entered promiscuous mode [ 88.253857][ T4490] device batadv_slave_1 left promiscuous mode [ 89.050843][ T4513] sctp: [Deprecated]: syz.3.57 (pid 4513) Use of int in maxseg socket option. [ 89.050843][ T4513] Use struct sctp_assoc_value instead [ 91.182860][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.472441][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 91.501410][ T4298] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 91.597048][ T4298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.648429][ T4298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.683149][ T4298] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.692248][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.751031][ T4298] usb 1-1: Product: syz [ 91.786499][ T4298] usb 1-1: Manufacturer: syz [ 91.791319][ T4298] usb 1-1: SerialNumber: syz [ 91.872534][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.284830][ T4546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.66'. [ 93.709532][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 93.732993][ T14] usb 3-1: config 0 has no interfaces? [ 93.753798][ T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.770902][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.794094][ T14] usb 3-1: Product: syz [ 93.802717][ T14] usb 3-1: Manufacturer: syz [ 93.807443][ T14] usb 3-1: SerialNumber: syz [ 93.821247][ T14] usb 3-1: config 0 descriptor?? [ 93.987022][ T4553] fuse: Bad value for 'fd' [ 94.003180][ T4298] usb 1-1: 0:2 : does not exist [ 94.154962][ T4298] usb 1-1: USB disconnect, device number 2 [ 94.200890][ T14] usb 3-1: USB disconnect, device number 3 [ 94.469695][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.319495][ T4580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.700481][ T4611] fuse: Bad value for 'fd' [ 98.821037][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 98.821055][ T27] audit: type=1326 audit(1742942866.844:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 98.929380][ T27] audit: type=1326 audit(1742942866.884:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.029592][ T27] audit: type=1326 audit(1742942866.924:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.152450][ T27] audit: type=1326 audit(1742942866.924:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.199017][ T27] audit: type=1326 audit(1742942866.924:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.275505][ T27] audit: type=1326 audit(1742942866.924:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.682878][ T27] audit: type=1326 audit(1742942867.034:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.709367][ T27] audit: type=1326 audit(1742942867.034:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.768211][ T27] audit: type=1326 audit(1742942867.034:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 99.821014][ T27] audit: type=1326 audit(1742942867.034:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 101.921955][ T4653] fuse: Bad value for 'fd' [ 104.138293][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 104.138310][ T27] audit: type=1326 audit(1742942872.164:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.222730][ T27] audit: type=1326 audit(1742942872.204:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.270125][ T27] audit: type=1326 audit(1742942872.204:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.297226][ T27] audit: type=1326 audit(1742942872.204:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.466432][ T27] audit: type=1326 audit(1742942872.214:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.592732][ T27] audit: type=1326 audit(1742942872.364:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.667840][ T27] audit: type=1326 audit(1742942872.364:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.711003][ T27] audit: type=1326 audit(1742942872.364:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e2758bad0 code=0x7ffc0000 [ 104.802907][ T27] audit: type=1326 audit(1742942872.364:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.826449][ T4696] fuse: Bad value for 'fd' [ 104.878087][ T27] audit: type=1326 audit(1742942872.374:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 104.900761][ T4702] Zero length message leads to an empty skb [ 108.257845][ T4733] lo speed is unknown, defaulting to 1000 [ 108.282761][ T4733] lo speed is unknown, defaulting to 1000 [ 108.324761][ T4733] lo speed is unknown, defaulting to 1000 [ 108.466307][ T4733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.636822][ T4733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.141339][ T4752] fuse: Bad value for 'fd' [ 109.171951][ T4733] lo speed is unknown, defaulting to 1000 [ 109.186438][ T4733] lo speed is unknown, defaulting to 1000 [ 109.219346][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 109.220323][ T27] audit: type=1326 audit(1742942877.244:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 109.537050][ T4733] lo speed is unknown, defaulting to 1000 [ 109.791922][ T4733] lo speed is unknown, defaulting to 1000 [ 109.818357][ T4733] lo speed is unknown, defaulting to 1000 [ 109.861422][ T27] audit: type=1326 audit(1742942877.244:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 110.029044][ T27] audit: type=1326 audit(1742942877.254:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 110.134023][ T27] audit: type=1326 audit(1742942877.254:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 110.184166][ T27] audit: type=1326 audit(1742942877.254:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 110.227253][ T27] audit: type=1326 audit(1742942877.254:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17ad38bad0 code=0x7ffc0000 [ 110.329170][ T27] audit: type=1326 audit(1742942877.254:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 111.162347][ T27] audit: type=1326 audit(1742942877.254:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 111.331057][ T27] audit: type=1326 audit(1742942877.254:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 111.353671][ T27] audit: type=1326 audit(1742942877.254:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ad38d169 code=0x7ffc0000 [ 111.437687][ T4776] netlink: 'syz.4.136': attribute type 3 has an invalid length. [ 112.404769][ T4298] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 112.662583][ T4298] usb 1-1: device descriptor read/64, error -71 [ 112.720931][ T4794] fuse: Bad value for 'fd' [ 112.972416][ T4298] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.262714][ T4298] usb 1-1: device descriptor read/64, error -71 [ 113.383041][ T4298] usb usb1-port1: attempt power cycle [ 113.932364][ T4298] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.973170][ T4298] usb 1-1: device descriptor read/8, error -71 [ 115.253080][ T4298] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 115.254782][ T4821] siw: device registration error -23 [ 115.378586][ T4298] usb 1-1: device descriptor read/8, error -71 [ 115.516693][ T4298] usb usb1-port1: unable to enumerate USB device [ 117.010618][ T4847] fuse: Invalid rootmode [ 118.011501][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 118.011540][ T27] audit: type=1800 audit(1742943142.029:123): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.156" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 118.038295][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.606138][ T26] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 120.797078][ T4892] fuse: Invalid rootmode [ 120.900490][ T26] usb 4-1: device descriptor read/64, error -71 [ 121.952338][ T26] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 122.122664][ T26] usb 4-1: device descriptor read/64, error -71 [ 122.253167][ T26] usb usb4-port1: attempt power cycle [ 124.133481][ T4918] block device autoloading is deprecated and will be removed. [ 124.728832][ T4932] fuse: Invalid rootmode [ 126.552619][ T4825] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 126.636062][ T4953] kvm: pic: single mode not supported [ 126.636186][ T4953] kvm: pic: level sensitive irq not supported [ 126.685442][ T4953] kvm: pic: single mode not supported [ 126.704267][ T4953] kvm: pic: level sensitive irq not supported [ 126.712686][ T4825] usb 5-1: device descriptor read/64, error -71 [ 127.005179][ T4958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.092467][ T4825] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 127.262547][ T4825] usb 5-1: device descriptor read/64, error -71 [ 127.382704][ T4825] usb usb5-port1: attempt power cycle [ 127.392904][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.510976][ T4970] fuse: Bad value for 'rootmode' [ 127.750651][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 127.761966][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 127.783348][ T26] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 127.793291][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.801393][ T26] usb 2-1: Product: syz [ 127.814642][ T26] usb 2-1: Manufacturer: syz [ 127.864880][ T26] usb 2-1: SerialNumber: syz [ 128.278256][ T4980] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.285606][ T4980] overlayfs: failed to set xattr on upper [ 128.291352][ T4980] overlayfs: ...falling back to index=off,metacopy=off. [ 128.298462][ T4980] overlayfs: maximum fs stacking depth exceeded [ 129.311637][ T26] usb 2-1: config 0 descriptor?? [ 129.341840][ T26] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 129.525961][ T26] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 129.590035][ T26] usb 2-1: USB disconnect, device number 2 [ 129.663318][ T26] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 129.721224][ T26] kobil_sct 2-1:0.0: device disconnected [ 131.308608][ T5008] fuse: Bad value for 'rootmode' [ 132.485043][ T5016] qrtr: Invalid version 97 [ 132.648340][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.691189][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884303][ T5019] Bluetooth: MGMT ver 1.22 [ 136.046243][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 136.128292][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 140.831149][ T5083] fuse: Bad value for 'rootmode' [ 142.065922][ T5101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 142.118390][ T5101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3442273030 (55076368480 ns) > initial count (33921318416 ns). Using initial count to start timer. [ 142.390538][ T5111] qrtr: Invalid version 97 [ 142.631797][ T4358] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.642504][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 144.649622][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 146.407898][ T5149] fuse: Unknown parameter 'use00000000000000000000' [ 150.009447][ T5181] qrtr: Invalid version 97 [ 151.292254][ C0] sched: RT throttling activated [ 151.293547][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 151.305098][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.978827][ T4301] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.202909][ T5058] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.654336][ T4301] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 153.688639][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.700044][ T5058] usb 3-1: config index 0 descriptor too short (expected 227, got 18) [ 153.711708][ T5058] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.963545][ T4301] usb 1-1: config 0 descriptor?? [ 153.981196][ T4301] sisusb 1-1:0.0: Invalid USB2VGA device [ 153.989184][ T4301] sisusb: probe of 1-1:0.0 failed with error -22 [ 154.566941][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.578528][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.830793][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.841501][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.849154][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.443181][ T5058] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 155.464181][ T5058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.481946][ T5058] usb 3-1: Product: syz [ 155.490518][ T5058] usb 3-1: Manufacturer: syz [ 155.498252][ T5058] usb 3-1: SerialNumber: syz [ 155.519915][ T5058] usb 3-1: config 0 descriptor?? [ 155.776820][ T5058] usb 3-1: USB disconnect, device number 4 [ 155.821188][ T5220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.031001][ T4301] usb 1-1: USB disconnect, device number 7 [ 156.074013][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 156.861067][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 156.868721][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.101164][ T5254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 157.149082][ T5254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3442273030 (55076368480 ns) > initial count (33921318416 ns). Using initial count to start timer. [ 164.772378][ T5058] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.970058][ T5058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.031430][ T5058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.059692][ T5058] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.089437][ T5058] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.105245][ T5058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.297264][ T5058] usb 4-1: config 0 descriptor?? [ 165.328057][ T5356] xt_socket: unknown flags 0x8 [ 166.176492][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.207439][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.215585][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.367515][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.412583][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.425195][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.458042][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.472452][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.480752][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.492538][ T5058] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 166.520310][ T5058] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 166.637754][ T5058] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.729768][ T5058] usb 4-1: USB disconnect, device number 5 [ 167.442374][ T4258] Bluetooth: hci4: command 0x0407 tx timeout [ 168.171673][ T5372] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.389191][ T5380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3442273030 (55076368480 ns) > initial count (33921318416 ns). Using initial count to start timer. [ 182.139888][ T5516] process 'syz.1.356' launched '/dev/fd/8/./file1' with NULL argv: empty string added [ 182.169491][ T5523] xt_socket: unknown flags 0x8 [ 182.656587][ T27] audit: type=1326 audit(1742943206.669:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 182.920032][ T27] audit: type=1326 audit(1742943206.669:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.058835][ T27] audit: type=1326 audit(1742943206.669:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.260795][ T27] audit: type=1326 audit(1742943206.669:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.290238][ T27] audit: type=1326 audit(1742943206.669:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.318653][ T27] audit: type=1326 audit(1742943206.669:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.356610][ T27] audit: type=1326 audit(1742943206.669:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.398316][ T27] audit: type=1326 audit(1742943206.669:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.433878][ T27] audit: type=1326 audit(1742943206.669:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 183.598033][ T27] audit: type=1326 audit(1742943206.679:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 186.044784][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 188.373533][ T4297] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.635989][ T4297] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 188.799246][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.923382][ T4297] usb 4-1: config 0 descriptor?? [ 188.961722][ T4297] sisusb 4-1:0.0: Invalid USB2VGA device [ 188.992003][ T4297] sisusb: probe of 4-1:0.0 failed with error -22 [ 189.548268][ T5587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.558662][ T5587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.430844][ T5058] usb 4-1: USB disconnect, device number 6 [ 194.089117][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096541][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.270016][ T5646] netlink: 248 bytes leftover after parsing attributes in process `syz.4.392'. [ 195.280176][ T5646] unsupported nlmsg_type 40 [ 195.614253][ T5656] xt_socket: unknown flags 0x8 [ 196.162619][ T4258] Bluetooth: hci2: command 0x0406 tx timeout [ 196.163058][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 196.169623][ T4258] Bluetooth: hci1: command 0x0406 tx timeout [ 206.778567][ T5728] Bluetooth: MGMT ver 1.22 [ 213.455234][ T4258] Bluetooth: hci5: sending frame failed (-49) [ 213.471222][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 213.493343][ T5800] bridge_slave_0: default FDB implementation only supports local addresses [ 213.759247][ T5805] fuse: Unknown parameter '0x0000000000000003' [ 217.406718][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 217.407994][ T27] audit: type=1326 audit(1742943241.399:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 217.541243][ T27] audit: type=1326 audit(1742943241.479:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 217.633483][ T27] audit: type=1326 audit(1742943241.549:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 217.655675][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.662094][ T27] audit: type=1326 audit(1742943241.559:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 219.975157][ T5852] fuse: Unknown parameter '0x0000000000000003' [ 222.873836][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 222.883663][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.353977][ T5890] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 225.455256][ T5897] fuse: Unknown parameter '0x0000000000000003' [ 230.232380][ T951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.314999][ T26] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 230.909537][ T26] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 230.923985][ T26] usb 1-1: config 0 has no interface number 0 [ 230.944607][ T26] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 231.052038][ T26] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 231.081073][ T26] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 231.093768][ T26] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.107234][ T26] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.116943][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.128287][ T951] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 231.136766][ T26] usb 1-1: config 0 descriptor?? [ 231.142140][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.158140][ T951] usb 3-1: Product: syz [ 231.163927][ T951] usb 3-1: Manufacturer: syz [ 231.168630][ T951] usb 3-1: SerialNumber: syz [ 231.218927][ T26] usb 1-1: can't set config #0, error -71 [ 231.240049][ T26] usb 1-1: USB disconnect, device number 8 [ 231.299592][ T951] usb 3-1: config 0 descriptor?? [ 231.380708][ T5940] fuse: Unknown parameter 'fd0x0000000000000003' [ 234.039576][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 234.047326][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.068456][ T951] usb 3-1: Firmware version (0.0) predates our first public release. [ 234.081521][ T951] usb 3-1: Please update to version 0.2 or newer [ 235.866855][ T951] usb 3-1: USB disconnect, device number 5 [ 237.620490][ T5972] netlink: 43 bytes leftover after parsing attributes in process `syz.3.487'. [ 238.172431][ T5972] tipc: Started in network mode [ 238.178076][ T5972] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 238.185945][ T5972] tipc: Enabled bearer , priority 10 [ 238.655177][ T27] audit: type=1326 audit(1742943518.219:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 239.266024][ T27] audit: type=1326 audit(1742943518.219:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 239.557003][ T5826] tipc: Node number set to 10005162 [ 239.572737][ T27] audit: type=1326 audit(1742943518.219:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 239.622072][ T27] audit: type=1326 audit(1742943518.219:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 239.714340][ T5993] fuse: Unknown parameter 'fd0x0000000000000003' [ 239.732189][ T27] audit: type=1326 audit(1742943518.219:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 239.838263][ T27] audit: type=1326 audit(1742943518.219:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 240.122099][ T4270] Bluetooth: hci5: sending frame failed (-49) [ 240.685648][ T5997] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 241.177918][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 241.288669][ T27] audit: type=1326 audit(1742943518.219:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 241.310867][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.425732][ T27] audit: type=1326 audit(1742943518.219:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 242.027480][ T27] audit: type=1326 audit(1742943518.219:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 242.060242][ T27] audit: type=1326 audit(1742943518.219:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 247.461877][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 247.512187][ T6047] fuse: Unknown parameter 'fd0x0000000000000003' [ 248.521378][ T4270] Bluetooth: hci5: sending frame failed (-49) [ 248.528667][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 249.818945][ T52] block nbd1: Attempted send on invalid socket [ 249.825686][ T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.201039][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 252.703719][ T4270] Bluetooth: hci5: sending frame failed (-49) [ 252.712439][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 257.778422][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 257.787584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.793979][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.457884][ T4266] Bluetooth: hci5: sending frame failed (-49) [ 258.466030][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 260.682691][ T6178] nullb0: AHDI p1 p2 [ 260.687621][ T6178] nullb0: p1 start 795240812 is beyond EOD, truncated [ 262.904913][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 262.904929][ T27] audit: type=1326 audit(1742943798.928:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 262.933304][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.992462][ T27] audit: type=1326 audit(1742943798.988:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 263.014597][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.048368][ T27] audit: type=1326 audit(1742943798.988:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 263.072599][ T27] audit: type=1326 audit(1742943798.988:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3a6678d169 code=0x7ffc0000 [ 268.578168][ T27] audit: type=1326 audit(1742943804.598:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 269.016116][ T27] audit: type=1326 audit(1742943804.628:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 269.038301][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.184674][ T27] audit: type=1326 audit(1742943804.628:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 269.206771][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.397631][ T27] audit: type=1326 audit(1742943804.638:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 270.419855][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.574797][ T27] audit: type=1326 audit(1742943804.638:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 270.709405][ T27] audit: type=1326 audit(1742943804.658:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 271.210613][ T27] audit: type=1326 audit(1742943806.728:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 271.247677][ T27] audit: type=1326 audit(1742943806.728:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 271.330722][ T27] audit: type=1326 audit(1742943806.728:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 271.416525][ T27] audit: type=1326 audit(1742943806.728:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 271.438770][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.289643][ T6340] device macvlan0 entered promiscuous mode [ 278.297409][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 278.609058][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 278.609076][ T27] audit: type=1326 audit(1742943814.628:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 278.637505][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.676523][ T27] audit: type=1326 audit(1742943814.678:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 278.703994][ T27] audit: type=1326 audit(1742943814.678:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 278.881896][ T27] audit: type=1326 audit(1742943814.678:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 279.945917][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 280.301850][ T27] audit: type=1326 audit(1742943816.308:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.0.591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f695718d169 code=0x0 [ 280.515538][ T6357] mkiss: ax0: crc mode is auto. [ 282.982470][ T27] audit: type=1326 audit(1742943818.978:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 283.054564][ T27] audit: type=1326 audit(1742943818.998:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 283.078040][ T27] audit: type=1326 audit(1742943818.998:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 283.506575][ T27] audit: type=1326 audit(1742943818.998:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff8ca98d169 code=0x7ffc0000 [ 285.944270][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 286.501463][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 289.790962][ T27] audit: type=1326 audit(1742943825.808:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 290.385471][ T27] audit: type=1326 audit(1742943825.838:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 290.444164][ T27] audit: type=1326 audit(1742943825.848:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 290.527031][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 290.765480][ T27] audit: type=1326 audit(1742943825.848:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 292.631705][ T27] audit: type=1326 audit(1742943825.848:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 292.701175][ T27] audit: type=1326 audit(1742943825.848:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 296.196771][ T3623] udevd[3623]: worker [6320] terminated by signal 33 (Unknown signal 33) [ 296.217217][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 296.226596][ T3623] udevd[3623]: worker [6320] failed while handling '/devices/virtual/block/loop3' [ 296.772387][ T3583] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 296.978943][ T3583] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 297.023506][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.064302][ T3583] usb 4-1: config 0 descriptor?? [ 298.043826][ T3583] ntrig 0003:1B96:0003.0002: item fetching failed at offset 2/5 [ 298.052067][ T3583] ntrig 0003:1B96:0003.0002: parse failed [ 298.058722][ T3583] ntrig: probe of 0003:1B96:0003.0002 failed with error -22 [ 301.793002][ T3583] usb 4-1: USB disconnect, device number 7 [ 304.038376][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 308.131823][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 310.328831][ T27] audit: type=1326 audit(1742943846.328:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a6678d169 code=0x0 [ 310.370661][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.096496][ T6670] mkiss: ax0: crc mode is auto. [ 312.753940][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 312.875842][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059346400: rx timeout, send abort [ 313.786510][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059344000: rx timeout, send abort [ 313.794918][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059346400: abort rx timeout. Force session deactivation [ 314.294932][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888059344000: abort rx timeout. Force session deactivation [ 320.848207][ T27] audit: type=1326 audit(1742943856.868:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 320.929737][ T27] audit: type=1326 audit(1742943856.868:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 321.112104][ T27] audit: type=1326 audit(1742943856.868:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 322.147477][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.216421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.494358][ T27] audit: type=1326 audit(1742943856.868:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 322.592742][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 322.667827][ T27] audit: type=1326 audit(1742943856.868:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 322.764880][ T27] audit: type=1326 audit(1742943856.868:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e2758d169 code=0x7ffc0000 [ 325.883813][ T27] audit: type=1326 audit(1742943861.908:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 325.906049][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.097710][ T27] audit: type=1326 audit(1742943861.928:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 326.182489][ T27] audit: type=1326 audit(1742943861.968:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 326.192105][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 326.206626][ T27] audit: type=1326 audit(1742943861.968:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 326.236428][ T27] audit: type=1326 audit(1742943861.968:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 326.269799][ T27] audit: type=1326 audit(1742943861.968:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f695718d169 code=0x7ffc0000 [ 327.757216][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 327.793755][ T6844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.740'. [ 333.929719][ T5237] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 334.132321][ T5237] usb 1-1: Using ep0 maxpacket: 16 [ 334.147608][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.160418][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.189694][ T5237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.246785][ T5237] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 334.258202][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.309842][ T5237] usb 1-1: config 0 descriptor?? [ 334.745598][ T5237] hid-generic 0003:18D1:503C.0003: unbalanced collection at end of report description [ 335.374126][ T5237] hid-generic: probe of 0003:18D1:503C.0003 failed with error -22 [ 335.888389][ T5237] usb 1-1: USB disconnect, device number 9 [ 340.522277][ T951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 340.752507][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 340.763442][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.812614][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.838057][ T951] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 340.872145][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.907414][ T951] usb 3-1: config 0 descriptor?? [ 341.339679][ T951] hid-u2fzero 0003:10C4:8ACF.0004: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 341.978940][ T6668] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 343.683882][ T951] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero LED initialised [ 343.704178][ T951] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 343.715945][ T951] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 343.724387][ T951] CPU: 0 PID: 951 Comm: kworker/0:2 Not tainted 6.1.131-syzkaller #0 [ 343.732497][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.742574][ T951] Workqueue: usb_hub_wq hub_event [ 343.747621][ T951] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 343.753254][ T951] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 343.772880][ T951] RSP: 0018:ffffc90004536720 EFLAGS: 00010202 [ 343.778979][ T951] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 343.786966][ T951] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888075569569 [ 343.794953][ T951] RBP: ffffc900045368d0 R08: dffffc0000000000 R09: ffff88807556952e [ 343.802933][ T951] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807e2a23e0 [ 343.810940][ T951] R13: 1ffff1100fc54406 R14: ffff88807e2a2030 R15: dffffc0000000000 [ 343.818913][ T951] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 343.827838][ T951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.834438][ T951] CR2: 00007f51c0963d18 CR3: 000000005ca85000 CR4: 00000000003506f0 [ 343.842411][ T951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.850396][ T951] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 343.858380][ T951] Call Trace: [ 343.861699][ T951] [ 343.864649][ T951] ? __die_body+0x5e/0xa0 [ 343.868988][ T951] ? die_addr+0x95/0xc0 [ 343.873172][ T951] ? exc_general_protection+0x3ae/0x590 [ 343.878749][ T951] ? asm_exc_general_protection+0x22/0x30 [ 343.884472][ T951] ? u2fzero_rng_read+0x27d/0x750 [ 343.889520][ T951] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 343.895098][ T951] ? mutex_lock_nested+0x10/0x10 [ 343.900054][ T951] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 343.905598][ T951] add_early_randomness+0x78/0x140 [ 343.910725][ T951] hwrng_register+0x3a0/0x440 [ 343.915411][ T951] devm_hwrng_register+0x43/0xb0 [ 343.920346][ T951] u2fzero_probe+0x31a/0x410 [ 343.924961][ T951] ? hid_map_usage_clear+0x180/0x180 [ 343.930274][ T951] hid_device_probe+0x298/0x3a0 [ 343.935142][ T951] ? hid_uevent+0x310/0x310 [ 343.939650][ T951] really_probe+0x2ab/0xcb0 [ 343.944160][ T951] __driver_probe_device+0x1a2/0x3d0 [ 343.949463][ T951] driver_probe_device+0x50/0x420 [ 343.954542][ T951] __device_attach_driver+0x2cf/0x510 [ 343.959923][ T951] ? coredump_store+0x90/0x90 [ 343.964605][ T951] bus_for_each_drv+0x183/0x200 [ 343.969459][ T951] ? subsys_find_device_by_id+0x310/0x310 [ 343.975186][ T951] __device_attach+0x359/0x570 [ 343.979953][ T951] ? device_attach+0x20/0x20 [ 343.984549][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 343.989758][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 343.994967][ T951] bus_probe_device+0xba/0x1e0 [ 343.999735][ T951] ? device_add+0xab9/0xfd0 [ 344.004238][ T951] device_add+0xb48/0xfd0 [ 344.008583][ T951] hid_add_device+0x3a5/0x510 [ 344.013281][ T951] usbhid_probe+0xc09/0xfc0 [ 344.017792][ T951] usb_probe_interface+0x5c0/0xaf0 [ 344.022972][ T951] ? usb_register_driver+0x3d0/0x3d0 [ 344.028260][ T951] really_probe+0x2ab/0xcb0 [ 344.032769][ T951] __driver_probe_device+0x1a2/0x3d0 [ 344.038067][ T951] driver_probe_device+0x50/0x420 [ 344.043104][ T951] __device_attach_driver+0x2cf/0x510 [ 344.048488][ T951] ? coredump_store+0x90/0x90 [ 344.053178][ T951] bus_for_each_drv+0x183/0x200 [ 344.058061][ T951] ? subsys_find_device_by_id+0x310/0x310 [ 344.063800][ T951] __device_attach+0x359/0x570 [ 344.068568][ T951] ? device_attach+0x20/0x20 [ 344.073171][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 344.078407][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 344.083639][ T951] bus_probe_device+0xba/0x1e0 [ 344.088424][ T951] ? device_add+0xab9/0xfd0 [ 344.092949][ T951] device_add+0xb48/0xfd0 [ 344.097290][ T951] usb_set_configuration+0x19dd/0x2020 [ 344.102769][ T951] usb_generic_driver_probe+0x84/0x140 [ 344.108240][ T951] usb_probe_device+0x130/0x260 [ 344.113116][ T951] ? usb_register_device_driver+0x240/0x240 [ 344.119031][ T951] really_probe+0x2ab/0xcb0 [ 344.123542][ T951] __driver_probe_device+0x1a2/0x3d0 [ 344.128830][ T951] driver_probe_device+0x50/0x420 [ 344.133865][ T951] __device_attach_driver+0x2cf/0x510 [ 344.139238][ T951] ? coredump_store+0x90/0x90 [ 344.143912][ T951] bus_for_each_drv+0x183/0x200 [ 344.148799][ T951] ? subsys_find_device_by_id+0x310/0x310 [ 344.154529][ T951] __device_attach+0x359/0x570 [ 344.159293][ T951] ? device_attach+0x20/0x20 [ 344.163887][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 344.169117][ T951] ? kobject_uevent_env+0x54a/0x8c0 [ 344.174330][ T951] bus_probe_device+0xba/0x1e0 [ 344.179101][ T951] ? device_add+0xab9/0xfd0 [ 344.183620][ T951] device_add+0xb48/0xfd0 [ 344.187963][ T951] usb_new_device+0xbdd/0x1900 [ 344.192735][ T951] ? usb_disconnect+0x8c0/0x8c0 [ 344.197593][ T951] ? do_raw_spin_unlock+0x137/0x8a0 [ 344.202792][ T951] ? _raw_spin_unlock_irq+0x1f/0x40 [ 344.207984][ T951] ? lockdep_hardirqs_on+0x94/0x130 [ 344.213179][ T951] hub_event+0x2efe/0x5730 [ 344.217651][ T951] ? led_work+0x700/0x700 [ 344.221979][ T951] ? read_lock_is_recursive+0x10/0x10 [ 344.227387][ T951] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 344.233378][ T951] ? print_irqtrace_events+0x210/0x210 [ 344.238879][ T951] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 344.244805][ T951] ? do_raw_spin_unlock+0x137/0x8a0 [ 344.250006][ T951] ? process_one_work+0x806/0x1260 [ 344.255133][ T951] process_one_work+0x917/0x1260 [ 344.260072][ T951] ? worker_detach_from_pool+0x260/0x260 [ 344.265712][ T951] ? _raw_spin_lock_irqsave+0x120/0x120 [ 344.271260][ T951] ? kthread_data+0x4e/0xc0 [ 344.275778][ T951] ? wq_worker_running+0x97/0x190 [ 344.280797][ T951] worker_thread+0xa47/0x1200 [ 344.285604][ T951] ? _raw_spin_unlock+0x40/0x40 [ 344.290460][ T951] kthread+0x28d/0x320 [ 344.294528][ T951] ? worker_clr_flags+0x190/0x190 [ 344.299553][ T951] ? kthread_blkcg+0xd0/0xd0 [ 344.304171][ T951] ret_from_fork+0x1f/0x30 [ 344.308594][ T951] [ 344.311616][ T951] Modules linked in: [ 344.396252][ T951] ---[ end trace 0000000000000000 ]--- [ 344.401817][ T951] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 344.407772][ T951] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 344.427620][ T951] RSP: 0018:ffffc90004536720 EFLAGS: 00010202 [ 344.434898][ T951] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 344.448089][ T6668] usb 2-1: device descriptor read/all, error -71 [ 344.455686][ T951] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888075569569 [ 344.469041][ T951] RBP: ffffc900045368d0 R08: dffffc0000000000 R09: ffff88807556952e [ 344.477649][ T951] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807e2a23e0 [ 344.486982][ T951] R13: 1ffff1100fc54406 R14: ffff88807e2a2030 R15: dffffc0000000000 [ 344.495524][ T951] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 344.505150][ T951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.511955][ T951] CR2: 00007f1644314580 CR3: 000000007bae6000 CR4: 00000000003506f0 [ 344.520336][ T951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.528647][ T951] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 344.536962][ T951] Kernel panic - not syncing: Fatal exception [ 344.543283][ T951] Kernel Offset: disabled [ 344.547605][ T951] Rebooting in 86400 seconds..