last executing test programs: 2m58.525316346s ago: executing program 0 (id=6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) 2m58.501709618s ago: executing program 0 (id=7): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2m56.627994891s ago: executing program 0 (id=8): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() capset(&(0x7f0000000080)={0x20071026}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m55.631393903s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESDEC=0x0], 0x0, 0xc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, 0x0, 0x0) 2m54.655713882s ago: executing program 0 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r3, 0x7, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.06147174s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r1, &(0x7f00000001c0)=""/147, 0x93) 2m38.489538201s ago: executing program 32 (id=17): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r1, &(0x7f00000001c0)=""/147, 0x93) 21.625719786s ago: executing program 3 (id=428): socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, 0x0, 0x60800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)) 20.123895458s ago: executing program 3 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}}, 0x0) 19.057370875s ago: executing program 3 (id=433): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x90010, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x400431, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB="6c726f6f746d6f64653d303030303030000030303030013030303031", @ANYBLOB="a15c25d0f063125d0ecf1ea091d591e90c5a1ca58a845399b95063da387d8ede6817b16c7019eae34b6c7ba6642af566125e197a7a8082dea054d6c8774c535be5acd9"]) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) 16.842897256s ago: executing program 4 (id=438): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 15.225808068s ago: executing program 4 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) 14.067914342s ago: executing program 4 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) 13.880831298s ago: executing program 4 (id=448): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 12.609853561s ago: executing program 3 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600150f00000000fbdbdf250400000003b8000e0bdbd8227ffaf7e17503ceeb09aa88885b911d90926757733dc64c04872145ec24bfc48227b7e89bc2d7a41193c871961425323c815f428191d88465ef0cbec3156b7d40bfe7294054598e667cfdea67b21557e36e6a30255e138d8949d03c14cb7ecaae94f2f3aa24d1f724ee540935689bc934276e469ae3672eb85e71f37caa0c950b450e089da656682c08be0b911970aae4595fe60abb34ae8e141c5f251c31020a8560d9fe8ce66fb9658ec78956b7e3cf7138fd02328653590ed90ac4b88846c263a582dd25"], 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80e2ff00000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010300000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 9.178784561s ago: executing program 2 (id=458): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 7.362340289s ago: executing program 1 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x5b8, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) r9 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r11, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r9, 0xab03) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) ptrace$ARCH_SET_CPUID(0x1e, r7, 0x0, 0x1012) 6.788010536s ago: executing program 2 (id=463): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002240)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x8, "3eccd8fd0000000000000010000000040100"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0xf, 0x6, {0x6, 0x31, "94eb7688"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)="d38cdcc71ad28600a08bc19bfdac03715767ae5e17d81bee527ba41e676fa1fb6fe3bed5158ecd5d8cb98b3a000190a59312c6a16a1d465dce26285f85ff292c554c4f915d7a373db52f8901c5bd62d67c75f23beae4d0", 0x57}], 0x1}}], 0x1, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(0x3) 6.183133255s ago: executing program 1 (id=465): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 6.021924239s ago: executing program 5 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}], 0x2, 0x24000000) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 5.107424474s ago: executing program 5 (id=467): syz_open_dev$sndctrl(0x0, 0x7, 0x501000) openat$rtc(0xffffffffffffff9c, 0x0, 0x202, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) 4.998793892s ago: executing program 1 (id=468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r0, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x30}}, 0x24000000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="140000000a7cf60f8a2d7ffe0a01080000000000"], 0x14}}, 0x4004084) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@any, 0x7}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000003c0)={&(0x7f0000004000)=[0xfffffffd, 0x101, 0x238, 0x40, 0x7, 0x2, 0x4, 0x9, 0x0, 0x2, 0x7, 0x81, 0x3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x60, 0x7, 0x200, 0xa3f, 0x9a, 0x7, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x0, 0x2e, 0x3, 0x7f, 0x7, 0x6c9d3c45, 0x401, 0x7, 0xfffffff9, 0x8, 0x7d, 0x5, 0x24f4, 0x1000, 0x6, 0xe, 0x7fffffff, 0x1ff, 0x2, 0x3ea8, 0xb32, 0x0, 0x3, 0x6, 0x101, 0x6, 0x4, 0x3, 0x7f, 0xb7, 0x7, 0x5, 0x401, 0x9, 0x5, 0x5, 0x2, 0xff, 0x0, 0x3, 0x5, 0xfffffff7, 0x8, 0x2, 0xe8, 0x1, 0x6, 0xcef3, 0xfffffff9, 0x1, 0x5, 0x1000, 0x9, 0x400, 0x8f, 0x0, 0xcabc, 0x7, 0x5, 0x6, 0x6, 0x2, 0xd34, 0x265, 0x3, 0x8, 0x49, 0x8, 0x1000, 0x0, 0x5, 0x4, 0xaf, 0xffffffff, 0x9, 0x5, 0x80000000, 0x9, 0x6, 0x97df, 0x6, 0x800, 0x7ff, 0x18ff, 0x3, 0x3, 0x8, 0xfff, 0xfb, 0x3, 0x5, 0x4, 0x1, 0xffff, 0x8, 0x3, 0x3, 0x7db, 0x7f, 0x6, 0x2, 0x8, 0x3ff, 0xfd, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2, 0xfffffffa, 0x4, 0x339, 0xfffffff0, 0x3, 0x9, 0x1, 0xf, 0x6, 0x800, 0xc791, 0x6, 0xfd, 0x1, 0x10040000, 0x3, 0x8, 0x9, 0x101, 0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x5, 0x2, 0x6, 0x4, 0x80, 0x4, 0x0, 0x8, 0x6, 0x0, 0x43df, 0x1, 0x54eb, 0x80, 0x80000000, 0x5, 0xfffffffd, 0x9, 0x9, 0x7, 0x5, 0x10, 0x8, 0xfffffff7, 0x0, 0x8, 0xc, 0x8, 0x6, 0x800, 0x6, 0x3, 0x3ff, 0x2, 0x3, 0x2, 0x3, 0x0, 0x4e, 0x5, 0xffff, 0x6, 0xc3, 0x0, 0x4, 0xe3, 0x9, 0x4, 0xfff, 0x5, 0x10000, 0x2, 0xcff, 0x6, 0x4, 0x100, 0x3, 0x6, 0x8, 0xfffffff7, 0x0, 0x200, 0x7f, 0x5, 0x42, 0x3, 0x6, 0x411af549, 0x0, 0x22ce, 0x0, 0x6, 0x2428, 0x1, 0x3, 0x9, 0x8001, 0x81, 0x7, 0x3, 0x4, 0x10000000, 0x6, 0x8, 0x7, 0xc8, 0x401, 0xc9f3, 0xd6, 0x800, 0x4, 0x1, 0xf1b, 0x2, 0x3ae44413, 0x534c, 0x2, 0x28, 0x80000000, 0xffffffff, 0x200, 0xfffff025, 0x3, 0x6, 0x0, 0xfff, 0x6, 0x4, 0x9, 0x5c7115a2, 0x10, 0x6, 0x3, 0x6, 0x0, 0x6, 0x81, 0x8, 0x1, 0x3, 0x4, 0x9, 0x1, 0x4, 0x4, 0x4, 0x101, 0x3, 0x4730, 0x7, 0x5, 0x6e87, 0x7, 0x2, 0x8, 0xffffffff, 0xd, 0x8, 0x8000, 0x4, 0x8, 0xa, 0xfffffff9, 0x8, 0x9, 0x2, 0x8, 0x2, 0x0, 0xcdb2, 0x800, 0x1, 0x7, 0xdd8f, 0x7f0a, 0x5, 0x3, 0x80000001, 0x7fffffff, 0x5, 0x2, 0x1, 0x80000000, 0x3ff, 0x9, 0x1, 0x81, 0x4, 0x1, 0x7, 0x8, 0x2, 0x8, 0x1, 0x8, 0x0, 0x2, 0x4, 0x0, 0x6, 0x4, 0xbb0e, 0x5022, 0x4, 0xfffffffd, 0xe, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x800, 0x7f5, 0x3ff, 0xf1, 0x4, 0x7, 0x9fc, 0x80000001, 0xfffffffb, 0x1, 0x1, 0x3, 0x5, 0x7, 0x4, 0x8, 0x1, 0x8, 0x0, 0x8, 0x8001, 0x3, 0x0, 0xa, 0x6a1f, 0x0, 0x22, 0x9, 0x6c000000, 0x6, 0x80, 0x1, 0x6, 0x40, 0x5cb2, 0x8, 0x2, 0x9, 0xffff7e5c, 0x800, 0x120, 0x7fff, 0x8, 0x401, 0x29, 0x80000000, 0x1, 0x0, 0x8, 0x8, 0xffffe110, 0x5, 0xef0, 0x6, 0x9, 0x9845, 0xe, 0x170, 0x5, 0x3, 0x5, 0x7ad, 0x3, 0x9, 0x5, 0x4, 0x0, 0x6, 0x5d, 0x7, 0x940, 0xebc, 0xffffff20, 0x800, 0x4, 0x0, 0x203b, 0x0, 0x9, 0x7, 0x7, 0x63b, 0xe, 0x7ff, 0x5bf9, 0x9, 0x5, 0xf3, 0x200, 0x0, 0x7, 0xc000, 0x8, 0x7, 0x50, 0x4da, 0xd, 0x3, 0x7, 0x50d, 0x3, 0x1, 0x1, 0x7, 0x2c16f915, 0x8001, 0x800, 0x1, 0x4, 0x2, 0xa, 0x5d, 0x6, 0xb, 0x0, 0x6, 0x6, 0x6, 0x80000001, 0x7b, 0x400, 0x7, 0xe0, 0x3, 0x9d8, 0x2, 0x5, 0x9, 0x1, 0x5, 0x0, 0xfffffe00, 0x5, 0x0, 0xd, 0xfffffff4, 0xd2, 0x7, 0x80000001, 0x80000000, 0x4, 0x5, 0xffffffe9, 0x1ff, 0xbc, 0x1, 0x200, 0x6, 0x5, 0x9, 0x6, 0xfffffffb, 0x805, 0x2, 0xffffffff, 0xff, 0x3, 0xf, 0x0, 0x3, 0x8, 0x6, 0x6, 0x100000, 0xfffffff3, 0x6, 0x6, 0x28, 0x8, 0x5, 0x0, 0xc0000000, 0x401, 0x1, 0x2, 0x7, 0x4, 0x8, 0xb, 0x9, 0x1, 0x5, 0xffffffff, 0x3efc, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x6, 0xfe, 0x5, 0x7, 0x112b, 0xff, 0x3, 0x20, 0x1, 0x36a, 0x1, 0xa, 0x400, 0x2afcad61, 0x0, 0x4, 0xccfc, 0x100000, 0x9, 0x800, 0xa, 0x7, 0x2, 0x1, 0x7, 0x4, 0xe, 0x1000, 0x3, 0x1, 0x9, 0xacf, 0x6, 0x3, 0x800, 0x8, 0x9338, 0x7, 0x9, 0x9, 0x71, 0x3, 0x1ff, 0x80, 0xd98b, 0x8, 0x2, 0x1, 0x5, 0x4, 0x5, 0x5, 0x3, 0x9, 0x2, 0x0, 0x101, 0x66, 0x6, 0x2, 0x7, 0xfffffffc, 0x8, 0x40, 0x1, 0x4, 0x5, 0x2, 0x9, 0xc1cc, 0x3ff, 0x2, 0x8, 0x4b, 0x3, 0x0, 0x40, 0xd, 0x0, 0x3571, 0x6, 0x0, 0x0, 0x8469, 0x3, 0x80000000, 0x0, 0x7e1, 0x4, 0x2b, 0x6, 0xf7d9, 0x9, 0x5, 0xc00d, 0x3, 0x3, 0x80000000, 0xe600, 0x7, 0xc, 0x80000001, 0x401, 0x4, 0x5, 0x3, 0x9, 0xf3f, 0x1, 0xfffffffe, 0x9, 0x1, 0x3, 0x4, 0x2, 0x84, 0x448f, 0x0, 0x8, 0x100, 0x9, 0x7992, 0x4, 0x9, 0x4, 0x3, 0x0, 0x5, 0x9, 0x1, 0x8000, 0x1ff, 0xffff1364, 0x80000001, 0x67, 0xc, 0xdf2, 0x4, 0x7, 0x8, 0x756, 0x3, 0xfffffc00, 0xc9, 0x7, 0xce, 0x8, 0x0, 0x6, 0x0, 0x9, 0x8, 0x8, 0x9, 0x1, 0x6, 0xa7, 0x10000, 0xfffff801, 0x6, 0x31fe, 0x28, 0x10, 0x8020000, 0x2, 0x1, 0x2, 0x1, 0x8, 0x1, 0xecc, 0x3, 0x0, 0x4, 0x6, 0x6, 0x80, 0xfcb, 0x7, 0x9, 0x7, 0xe, 0x1000, 0x3, 0xffffffff, 0xa4, 0x0, 0xffffffff, 0x8, 0x0, 0x40, 0x1, 0xfffffff8, 0x0, 0x2, 0x7, 0x81, 0x400, 0x2, 0xa255, 0x1, 0xbd1e, 0xc, 0x8, 0x401, 0x9, 0x0, 0x400, 0x1, 0x700, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x4, 0x4, 0x0, 0x400, 0xfff, 0x0, 0x5cb, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x2, 0x7fffffff, 0x1ff, 0x101, 0x77960, 0xbc0, 0x81, 0x800, 0xfff, 0x7f, 0x7ff, 0x5, 0x6, 0x0, 0x7, 0x81, 0x0, 0x0, 0x9, 0xe, 0xfffffffd, 0xf1fb, 0x1, 0xe3c, 0x3, 0x9, 0xc5c9ca61, 0x8, 0x3, 0xfffffff9, 0xc8aa, 0xb2, 0x3ff, 0xd9, 0x81, 0xffff, 0xffff, 0xfffffc00, 0xadf, 0x5, 0x6, 0x4, 0x6, 0x7, 0x6, 0x2, 0x2, 0xd6, 0x8, 0x5b0, 0x2, 0x8000, 0x7, 0x6, 0x0, 0x1, 0x2, 0x0, 0x39d, 0x9, 0x3ff, 0x8000, 0xb, 0x5, 0x7, 0x3, 0x8, 0x19, 0xfffffff0, 0x7, 0x9, 0xb5a, 0x101, 0x1, 0x3, 0x10000, 0x4, 0xe, 0x3ff, 0xe, 0x3, 0x0, 0x7ff, 0x1, 0x404d, 0x6, 0x3ff, 0x0, 0xce, 0x6, 0x2, 0x4, 0x0, 0x3, 0x7, 0x81, 0x6, 0x8, 0xb54, 0x9, 0x31, 0x80000001, 0x3ff, 0x7, 0x9, 0x400, 0x1, 0xe7, 0x8, 0x8001, 0x2, 0x7, 0x5, 0x9, 0x7ff, 0x6, 0x3, 0x80000001, 0x800, 0x3c8, 0x43b, 0x101, 0x7, 0x7, 0x7f, 0x7, 0x7f, 0x10000, 0x9, 0xd31, 0xfb27, 0x3, 0x3, 0x3, 0x1, 0x7, 0x9, 0xd63, 0x4, 0x80000001, 0x10001, 0x6, 0xa, 0x5, 0x8, 0x6, 0x7, 0x9, 0x526, 0x5, 0x8, 0x2, 0x8, 0x2, 0x53, 0xa, 0xc9ad, 0x8, 0xf3, 0x80, 0x9, 0x9, 0x3, 0x7ff, 0x1, 0x1ff, 0x0, 0x3bb, 0x3, 0x1, 0x2, 0x2, 0x4, 0x140, 0xb, 0x0, 0x0, 0x3, 0x6, 0x1, 0x90a0, 0x2, 0x1b6, 0x0, 0x1, 0xc6bd, 0x3, 0xfffffffc, 0x1, 0x295d, 0x7, 0x96, 0x3, 0x3, 0x9, 0x5, 0x2, 0xe7c, 0x3, 0x5, 0x6, 0x8, 0x1, 0x1, 0x3, 0x9, 0x3, 0x6, 0x8, 0x0, 0x8, 0x0, 0x2, 0x5, 0x8, 0x7, 0x6, 0x720b, 0x10, 0x1, 0x5, 0x3, 0x3, 0x8000, 0xfffffffe, 0x7, 0x7, 0x6f, 0x9, 0xb, 0x3, 0xc, 0x3326c296, 0x2, 0xcd, 0x5, 0x2, 0x7, 0xffff, 0x80, 0x2, 0x4, 0xf4f1], 0x6, 0x400}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000100)=[0x8, 0x9]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x10000, 0x0) 4.998305682s ago: executing program 3 (id=469): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x5, {0x2, 0xf0}, 0xfe}, 0x18) 4.640671051s ago: executing program 4 (id=470): socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, 0x0, 0x60800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)) 3.732172936s ago: executing program 4 (id=471): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "e99abdbc", {0x1, 0x8, 0xe, 0x4, 0x8}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000010900020073797a32000000000900010073797a300000000008000540000000110c000980040001"], 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f0000000d40)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="07000004f8d082beb828c7db5016f30f151de0fad1daa0e12056731a1243d213bd289af72206d5e133d98108760c1cd88e7ed514ac1509e961a1c5dc91"]) 3.719353697s ago: executing program 5 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.406981882s ago: executing program 5 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}}, 0x0) 2.497827316s ago: executing program 5 (id=474): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.460314599s ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000"], 0xd0}}, 0x20050800) 1.820833331s ago: executing program 5 (id=476): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.811560423s ago: executing program 2 (id=477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e063dbbad441", 0xa6}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898", 0x33}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x84, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.727848889s ago: executing program 1 (id=478): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.701864691s ago: executing program 2 (id=479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}], 0x2, 0x24000000) getpid() pipe2$9p(&(0x7f0000000300), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 1.47250486s ago: executing program 3 (id=480): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz0\x00', {0xfff, 0x4, 0xd, 0x1ff}, 0x51, [0xb33, 0x400000, 0x7, 0x73, 0x2, 0x74, 0x9, 0x100, 0x7f, 0x5, 0x74, 0x40, 0x2, 0x729, 0x9, 0x2, 0x17a3, 0x1004, 0xe, 0x7, 0x7, 0xbf7, 0x2, 0x4, 0x6, 0x8, 0xa237, 0x3dbcf6d8, 0x2d, 0x6, 0x5, 0x7, 0xfffffffe, 0xb1c, 0x80000001, 0xc6ca, 0x7f, 0x1000, 0x1, 0x5769, 0x400, 0x5, 0x2963, 0x8001, 0xfffff25b, 0x0, 0x5, 0x8, 0x40, 0x7, 0x56, 0x100000, 0x3, 0x4, 0x5, 0x9, 0xff, 0x101, 0x9, 0x3, 0xd, 0x6, 0xfffffffd, 0x7], [0x40, 0x9, 0x87, 0x3, 0x709, 0xc3, 0x3, 0x1ff, 0x10000, 0x5, 0x3, 0x20, 0x1, 0x4, 0x3, 0xffff, 0x1, 0x3, 0x5607, 0x8000, 0x0, 0x81d1, 0x800, 0xfffffffb, 0x0, 0x5, 0x3, 0x8, 0x80000001, 0xe, 0x6, 0x100, 0x7, 0x8001, 0xffff, 0x8, 0x8, 0x7, 0x1, 0xffff, 0x5, 0x0, 0x0, 0x1, 0x10000, 0xfffffff9, 0x5, 0x9a22, 0x8, 0xfff, 0x1, 0x2000000, 0x20db, 0x4, 0x0, 0xff, 0x8, 0x6, 0xf6, 0x3, 0x67, 0x40, 0x0, 0xa0], [0x0, 0x2, 0x6, 0xffffb9b1, 0x2c60, 0xc1, 0xda, 0x7, 0x6e, 0x0, 0x1, 0x4, 0x8, 0x82e30000, 0x5, 0x81, 0x5, 0x0, 0x1, 0xfff, 0xcc, 0x8000, 0x4, 0x0, 0x1, 0xe, 0x1, 0xfffffffb, 0x7, 0x3, 0x8, 0x0, 0x3, 0x9, 0xb2a, 0x604, 0x1, 0x5, 0xffffff80, 0x2, 0xfffffff7, 0x8001, 0x7ff, 0x8, 0x3, 0x7, 0x7, 0x27, 0x40, 0x3, 0x5f, 0x7f, 0xffffff31, 0x5, 0x9, 0xd6, 0xbe, 0x8000, 0x1ff, 0x6, 0xe80, 0x6, 0xfffffffd, 0x2], [0x81, 0x9dde, 0x4, 0x0, 0x8001, 0x8, 0x3, 0x4, 0x2, 0x4, 0xead, 0x795a, 0x6, 0x0, 0x8, 0x8dcd, 0x3ff, 0x1, 0x7211672, 0x4, 0x1, 0x1000, 0xae, 0x5, 0x9, 0x1, 0x5, 0x6, 0x9, 0x9, 0x1200000, 0x30b, 0x9, 0xffff7fff, 0x8, 0x4, 0x3, 0x81, 0x6, 0x8, 0xfff, 0xfffffffa, 0x8, 0x401, 0x8, 0x6, 0x6, 0x8000000, 0x7, 0x3, 0x2, 0x1, 0x40, 0x10000, 0x6, 0x2, 0x6, 0x8, 0x7fffffff, 0x2e3, 0x6, 0x100, 0x9, 0x7]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x20008045) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x1, &(0x7f0000000a00)=[0x0]) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 956.482022ms ago: executing program 2 (id=481): socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x10041) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r3 = socket$rds(0x15, 0x5, 0x0) pipe2$watch_queue(&(0x7f00000056c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) pipe2$watch_queue(&(0x7f00000055c0), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) sendmsg$rds(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xa7, 0x90000000, 0x7, 0xfff, 0x8, 0x1, 0x14, 0x80000000, 0x9, 0x100, 0x6ba, 0x5, 0x14, 0x800, 0x7, 0xffffff5d, 0x16a, 0x6f, 0x6, 0x6, 0xfffff801, 0x7, 0x1, 0x7, 0xffffffff, 0x9, 0x6, 0x194, 0x1000, 0x312, 0x0, 0x7f, 0x4, 0x1, 0xffff, 0x3e, 0x7, 0x101, 0x10000, 0x4eb16aea, 0x3, 0x526, 0x5, 0x4, 0x0, 0xfffffffb, 0x9, 0x1, 0x160, 0x6, 0x19ce, 0x9, 0x2d, 0x8, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x557, 0x91, 0x3, 0xfffffffe, 0x7f, 0x7fffffff, 0xfffffffc, 0x3, 0x7, 0x7, 0x1000, 0x7ff, 0xff, 0xfff, 0x2, 0x7c, 0x7fff, 0x4, 0x1, 0x2, 0x1, 0x6, 0x9, 0x8, 0x8ebf, 0x979, 0x5, 0x7, 0x4, 0xff, 0x9, 0x8, 0x800, 0x3, 0x26f81526, 0x2, 0x7f, 0x4, 0x6, 0x8, 0x5, 0x18000, 0xa, 0x5, 0x6, 0x7, 0x101, 0x4, 0x5, 0xba1d, 0x6, 0x1, 0x7fff, 0x81, 0x3, 0x4, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x3, 0xff, 0x0, 0x691, 0xe8de, 0x101, 0xd145]}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) read(r2, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140), 0x0) 815.166604ms ago: executing program 1 (id=482): socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, 0x0, 0x60800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)) 0s ago: executing program 1 (id=483): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'das16m1\x00', [0x8001, 0xffff, 0x6, 0x8, 0xfffffffb, 0x80000001, 0x4d7, 0x2, 0xba8, 0x4, 0x0, 0x404, 0x3, 0x4b, 0xb, 0x402, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x2, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. [ 49.843854][ T4172] cgroup: Unknown subsys name 'net' [ 49.985602][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.171096][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.946262][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.981446][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.047515][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.116424][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 53.148439][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.158260][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.166111][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.174212][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.186119][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.193666][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.201454][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.224142][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.231228][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.238762][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.269317][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.276515][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.284232][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.291711][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.298756][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.306519][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.329318][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.336480][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.344474][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.362565][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.397848][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.423874][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.435237][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.462577][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.478249][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.485461][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.493128][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.509564][ T4183] team0: Port device team_slave_0 added [ 53.516999][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.538871][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.546034][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.553926][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.569927][ T4183] team0: Port device team_slave_1 added [ 53.584658][ T4184] team0: Port device team_slave_0 added [ 53.592515][ T4182] team0: Port device team_slave_0 added [ 53.606114][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.613725][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.621992][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.635545][ T4184] team0: Port device team_slave_1 added [ 53.642276][ T4182] team0: Port device team_slave_1 added [ 53.661540][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.668597][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.676783][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.703609][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.715613][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.739083][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.746171][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.772515][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.784359][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.791431][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.817445][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.847040][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.854103][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.880194][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.891633][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.898569][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.924662][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.940037][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.947588][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.973589][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.986431][ T4195] team0: Port device team_slave_0 added [ 53.993970][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.010482][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.017413][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.043407][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.055686][ T4195] team0: Port device team_slave_1 added [ 54.063224][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.117149][ T4188] team0: Port device team_slave_0 added [ 54.125289][ T4188] team0: Port device team_slave_1 added [ 54.141266][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.147853][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.180502][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.187457][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.213840][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.240878][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.247438][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.254109][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.264916][ T4183] Cannot create hsr debugfs directory [ 54.271089][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.278017][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.304184][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.315597][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.322636][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.348603][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.361714][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.368274][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.375418][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.383043][ T4182] Cannot create hsr debugfs directory [ 54.398387][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.405809][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.431816][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.540882][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.547469][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.553936][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.561706][ T4188] Cannot create hsr debugfs directory [ 54.569585][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.576557][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.583171][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.590885][ T4195] Cannot create hsr debugfs directory [ 54.651534][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 54.730727][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 54.735259][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 54.745903][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 54.757245][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 54.824163][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.834495][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.844078][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.852611][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.901963][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.911018][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.920622][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.929336][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.978446][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.988111][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.021518][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.029916][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.058651][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.090312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.103606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.113358][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.123098][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.138038][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.148406][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.158059][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.187536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.199038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.208675][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.215845][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.224690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.258641][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.268416][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.277794][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.287559][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.294633][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.302617][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.322469][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.331702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.340304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.349719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.358870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.381264][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.392478][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.403895][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.416756][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.425691][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.437495][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.446270][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.455760][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.464302][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.477672][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.492362][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.506334][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.554764][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.565652][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.588633][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.597986][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.630045][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.650321][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.664424][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.673753][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.682619][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.691319][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.698371][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.706402][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.715110][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.725604][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.732679][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.745450][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.773890][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.783180][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.792504][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.804278][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.811359][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.819007][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.827836][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.836828][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.845695][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.852799][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.862082][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.871422][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.879673][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.887414][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.898436][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.906557][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.921018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.929565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.939201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.949894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.962553][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.972355][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.990311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.015454][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.027848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.036832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.046664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.055074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.064478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.073175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.082424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.092282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.104556][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.114818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.123161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.136026][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.146848][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.161346][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.191525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.200191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.210164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.218506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.227517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.236236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.245770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.253938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.262461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.271518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.279758][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.286821][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.294475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.303136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.312031][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.319066][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.326619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.339225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.346956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.354758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.362979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.378447][ T4184] device veth0_vlan entered promiscuous mode [ 56.399112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.408432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.425869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.437061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.465839][ T4184] device veth1_vlan entered promiscuous mode [ 56.481247][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.496436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.504537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.512771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.520338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.529041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.537672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.546410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.556699][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.563779][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.571951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.586637][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.598248][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.619453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.631275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.651659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.660123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.681751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.700298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.708855][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.715921][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.733585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.741170][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 56.743471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.757013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.775634][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.797192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.806011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.814617][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 56.821005][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 56.823150][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 56.834680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.848552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.856391][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 56.857944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.875787][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.883872][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.895322][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.904459][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.931736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.939163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.947262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.956963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.977564][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.995929][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.007719][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.019482][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.029172][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.039897][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.048267][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.056667][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.065882][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.074344][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.082988][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.098509][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.109633][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.133737][ T4184] device veth0_macvtap entered promiscuous mode [ 57.141901][ T4183] device veth0_vlan entered promiscuous mode [ 57.148494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.157797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.171126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.179393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.194148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.214852][ T4182] device veth0_vlan entered promiscuous mode [ 57.231137][ T4184] device veth1_macvtap entered promiscuous mode [ 57.252457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.267533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.276298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.289339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.303945][ T4182] device veth1_vlan entered promiscuous mode [ 57.314195][ T4183] device veth1_vlan entered promiscuous mode [ 57.327793][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.343236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.354250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.366298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.379825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.409043][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.425782][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.436821][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.446841][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.458937][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.474109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.483328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.511973][ T4182] device veth0_macvtap entered promiscuous mode [ 57.522712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.530114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.538106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.547869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.557001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.578395][ T4182] device veth1_macvtap entered promiscuous mode [ 57.587973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.596075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.605630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.614808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.623553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.633449][ T4183] device veth0_macvtap entered promiscuous mode [ 57.643547][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.673544][ T4183] device veth1_macvtap entered promiscuous mode [ 57.697155][ T4195] device veth0_vlan entered promiscuous mode [ 57.707710][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.719301][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.731180][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.742156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.750145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.758916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.767409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.777364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.786707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.810211][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.820865][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.832374][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.854674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.865805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.873640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.883329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.892224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.901851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.914271][ T4195] device veth1_vlan entered promiscuous mode [ 57.933067][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.942341][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.951233][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.959920][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.977747][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.988444][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.999467][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.010149][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.022697][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.036673][ T4188] device veth0_vlan entered promiscuous mode [ 58.049339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.057295][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.066193][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.066456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.082550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.091922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.100162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.108388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.118064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.126023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.142178][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.153211][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.163578][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.178740][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.189992][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.221587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.230022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.241035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.249701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.264012][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.276617][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.285442][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.294390][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.309488][ T4195] device veth0_macvtap entered promiscuous mode [ 58.311617][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.318965][ T4195] device veth1_macvtap entered promiscuous mode [ 58.333450][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.335863][ T4188] device veth1_vlan entered promiscuous mode [ 58.362081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.370073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.378160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.421829][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.430300][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.472367][ T4188] device veth0_macvtap entered promiscuous mode [ 58.497706][ T4188] device veth1_macvtap entered promiscuous mode [ 58.511533][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.522244][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.534348][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.545322][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.556485][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.567198][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.579448][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.600316][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.612025][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.623633][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.634103][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.644277][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.655418][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.666940][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.684400][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.698151][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.732098][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.740966][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.756494][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.806146][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.817377][ T4297] Bluetooth: hci3: command 0x040f tx timeout [ 58.833516][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.842017][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.843445][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.850868][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.873837][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886411][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.895894][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 58.908758][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 58.947465][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 58.963847][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.976447][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.998409][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 59.012717][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.020938][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.038767][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.048676][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.049704][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.061502][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.076671][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.153583][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.336784][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.400308][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.461785][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.509786][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.597704][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.758701][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.769740][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.785608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.796556][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.811835][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.826371][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.838558][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.856099][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.884061][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.899676][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.908854][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.923163][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.934506][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.435872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.445299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.455570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.465118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.474269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.639095][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.673077][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.716025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.721925][ T4312] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 60.891780][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 61.122540][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 61.129272][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 61.137925][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 61.199750][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 61.466538][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.498355][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.671381][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.896171][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.342854][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.477949][ T4328] bridge0: port 3(syz_tun) entered blocking state [ 62.485478][ T4328] bridge0: port 3(syz_tun) entered disabled state [ 62.493981][ T4328] device syz_tun entered promiscuous mode [ 62.500635][ T4328] bridge0: port 3(syz_tun) entered blocking state [ 62.507241][ T4328] bridge0: port 3(syz_tun) entered forwarding state [ 62.516142][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.539622][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.548039][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.581712][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.599211][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.632505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.642091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.644147][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.807775][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 63.099625][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.100095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.108880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.130411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.304377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.340422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 63.349308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 63.358173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.367043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.375915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.449957][ T7] cfg80211: failed to load regulatory.db [ 66.750941][ T4390] bridge0: port 3(syz_tun) entered blocking state [ 66.757978][ T4390] bridge0: port 3(syz_tun) entered disabled state [ 66.772875][ T4390] device syz_tun entered promiscuous mode [ 66.780659][ T4390] bridge0: port 3(syz_tun) entered blocking state [ 66.787115][ T4390] bridge0: port 3(syz_tun) entered forwarding state [ 69.342150][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 70.348230][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 72.790405][ C0] sched: RT throttling activated [ 72.790944][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.814786][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.622425][ T4248] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 76.530551][ T4248] usb 3-1: config 9 has an invalid interface number: 38 but max is 0 [ 76.539171][ T4248] usb 3-1: config 9 has no interface number 0 [ 76.545651][ T4248] usb 3-1: config 9 interface 38 has no altsetting 0 [ 78.990571][ T4248] usb 3-1: New USB device found, idVendor=07c4, idProduct=a006, bcdDevice=41.b8 [ 78.999627][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.392072][ T4248] usb 3-1: Product: syz [ 79.396263][ T4248] usb 3-1: Manufacturer: syz [ 79.548619][ T4248] usb 3-1: can't set config #9, error -71 [ 79.596477][ T4248] usb 3-1: USB disconnect, device number 2 [ 81.867706][ T4357] bridge0: port 3(syz_tun) entered disabled state [ 82.519597][ T4357] device syz_tun left promiscuous mode [ 82.547366][ T4357] bridge0: port 3(syz_tun) entered disabled state [ 82.694183][ T4184] syz-executor (4184) used greatest stack depth: 20712 bytes left [ 82.808211][ T4363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.934424][ T4363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.214095][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 84.282582][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 84.291439][ T4363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.920131][ T4363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.577553][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 87.404957][ T4498] chnl_net:caif_netlink_parms(): no params data found [ 87.788381][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.855859][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.865464][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.948748][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 89.795107][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.813830][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.848816][ T4498] device bridge_slave_0 entered promiscuous mode [ 89.954949][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.962820][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.971188][ T4498] device bridge_slave_1 entered promiscuous mode [ 91.238368][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 92.811809][ T4498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.801732][ T4498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.144027][ T4498] team0: Port device team_slave_0 added [ 95.321228][ T4498] team0: Port device team_slave_1 added [ 95.377081][ T4642] process 'syz.2.88' launched './file0' with NULL argv: empty string added [ 96.249316][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.365641][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.434614][ T4498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.456058][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.466497][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.531231][ T4498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.605169][ T4661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 97.543233][ T4498] device hsr_slave_0 entered promiscuous mode [ 98.105656][ T4498] device hsr_slave_1 entered promiscuous mode [ 98.136799][ T4498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.149762][ T4498] Cannot create hsr debugfs directory [ 102.975419][ T4363] device hsr_slave_0 left promiscuous mode [ 103.030766][ T4363] device hsr_slave_1 left promiscuous mode [ 103.037976][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.047417][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.072821][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.090582][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.098316][ T4363] device bridge_slave_1 left promiscuous mode [ 103.171398][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.194098][ T4363] device bridge_slave_0 left promiscuous mode [ 103.566268][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.804550][ T4363] device veth1_macvtap left promiscuous mode [ 103.918192][ T4363] device veth0_macvtap left promiscuous mode [ 104.021278][ T4363] device veth1_vlan left promiscuous mode [ 104.027852][ T4363] device veth0_vlan left promiscuous mode [ 106.794138][ T4747] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 107.430952][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 107.451409][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 107.792218][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.094226][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.243841][ T4363] bond0 (unregistering): Released all slaves [ 108.346567][ T4498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.355853][ T4755] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 108.365404][ T4755] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 108.374888][ T4755] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 108.384475][ T25] audit: type=1800 audit(1754138207.941:2): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.113" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 108.469214][ T4498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.533505][ T4498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.575545][ T4498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.416760][ T4498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.642181][ T4498] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.272719][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.422820][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.602667][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.638316][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.764909][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.772052][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.117212][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.527447][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.535974][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.543060][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.551416][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.571612][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.579951][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.588766][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.601433][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.609923][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.618921][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.633500][ T4498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.645490][ T4498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.662268][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.670682][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.694416][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.726660][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.761909][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.800885][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.592414][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 113.853408][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.881866][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.909948][ T4498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.316749][ T4860] bridge0: port 3(syz_tun) entered blocking state [ 114.323417][ T4860] bridge0: port 3(syz_tun) entered disabled state [ 114.334848][ T4860] device syz_tun entered promiscuous mode [ 114.341998][ T4860] bridge0: port 3(syz_tun) entered blocking state [ 114.348433][ T4860] bridge0: port 3(syz_tun) entered forwarding state [ 115.720627][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.759661][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.629702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.647747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.793086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.853598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.050209][ T4891] loop7: detected capacity change from 0 to 16384 [ 117.360044][ T4885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'. [ 117.456986][ T4498] device veth0_vlan entered promiscuous mode [ 117.475113][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 117.505982][ T4890] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 117.603430][ T4890] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.632176][ T4890] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.675862][ T4498] device veth1_vlan entered promiscuous mode [ 117.752267][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.803264][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.696851][ T4498] device veth0_macvtap entered promiscuous mode [ 118.710594][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.722058][ T4498] device veth1_macvtap entered promiscuous mode [ 118.778175][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.945129][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.060156][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.119229][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.141400][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.153680][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.164578][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.191912][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.214218][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.227058][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.240270][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.256073][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.289423][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.348551][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.395507][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.421813][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.446061][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.482736][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.510480][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.563980][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.674031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.693308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.738360][ T4498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.461494][ T4498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.576464][ T4498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.586694][ T4498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.110228][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.129855][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.756394][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.764775][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.791333][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.833496][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.520876][ T4953] syz.4.148 (4953) used greatest stack depth: 18592 bytes left [ 124.880751][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.281403][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 125.920705][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.976616][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 125.979410][ T4985] syz.5.156 uses obsolete (PF_INET,SOCK_PACKET) [ 125.993612][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 126.033274][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.050483][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 126.060302][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.226655][ T4987] team0 (unregistering): Port device team_slave_0 removed [ 126.240898][ T7] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 126.241228][ T4987] team0 (unregistering): Port device team_slave_1 removed [ 126.955562][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.963917][ T7] usb 4-1: Product: syz [ 126.975621][ T7] usb 4-1: Manufacturer: syz [ 126.980230][ T7] usb 4-1: SerialNumber: syz [ 127.010660][ T7] usb 4-1: config 0 descriptor?? [ 127.015657][ T4991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'. [ 127.040683][ T7] usb 4-1: can't set config #0, error -71 [ 127.067743][ T7] usb 4-1: USB disconnect, device number 2 [ 130.361141][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.883845][ T5054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 131.110553][ T4253] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.645344][ T4253] usb 6-1: Using ep0 maxpacket: 8 [ 132.617393][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.623684][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.829063][ T4253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.848069][ T4253] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 132.859976][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 132.871177][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 132.882775][ T4253] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.421513][ T4253] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 133.435500][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.443900][ T4253] usb 6-1: Product: syz [ 133.448873][ T4253] usb 6-1: Manufacturer: syz [ 133.456819][ T4253] usb 6-1: SerialNumber: syz [ 133.469793][ T4253] usb 6-1: config 0 descriptor?? [ 133.491160][ T5053] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.512688][ T4253] ati_remote_probe: Unexpected desc.bNumEndpoints [ 135.175209][ T1325] usb 6-1: USB disconnect, device number 2 [ 135.236884][ T5106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 135.931611][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 141.359013][ T5191] vivid-008: ================= START STATUS ================= [ 141.367207][ T5191] vivid-008: Generate PTS: true [ 141.373168][ T5191] vivid-008: Generate SCR: true [ 141.378164][ T5191] tpg source WxH: 640x360 (Y'CbCr) [ 141.383413][ T5191] tpg field: 1 [ 141.386788][ T5191] tpg crop: 640x360@0x0 [ 141.391024][ T5191] tpg compose: 640x360@0x0 [ 141.395471][ T5191] tpg colorspace: 8 [ 141.399281][ T5191] tpg transfer function: 0/0 [ 141.498291][ T5191] tpg Y'CbCr encoding: 0/0 [ 141.502931][ T5191] tpg quantization: 0/0 [ 141.507132][ T5191] tpg RGB range: 0/2 [ 141.511256][ T5191] vivid-008: ================== END STATUS ================== [ 141.555799][ T5192] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 141.562668][ T5192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.571631][ T5192] vhci_hcd vhci_hcd.0: Device attached [ 141.851050][ T4253] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 142.008264][ T5194] vhci_hcd: connection reset by peer [ 142.106937][ T4549] vhci_hcd: stop threads [ 142.112006][ T4549] vhci_hcd: release socket [ 142.149716][ T4549] vhci_hcd: disconnect device [ 145.034530][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 145.151430][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 145.860427][ C0] hrtimer: interrupt took 45196 ns [ 147.168902][ T4253] vhci_hcd: vhci_device speed not set [ 147.240502][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 147.293712][ T5264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.460593][ T5209] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.531065][ T7] usb 5-1: no configurations [ 147.543520][ T7] usb 5-1: can't read configurations, error -22 [ 147.720499][ T5209] usb 2-1: Using ep0 maxpacket: 16 [ 147.755708][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 147.840688][ T5209] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 148.738046][ T7] usb 5-1: no configurations [ 148.744720][ T7] usb 5-1: can't read configurations, error -22 [ 148.753326][ T5209] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.762605][ T7] usb usb5-port1: attempt power cycle [ 148.771577][ T5209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.790752][ T5209] usb 2-1: Product: syz [ 148.802599][ T5209] usb 2-1: Manufacturer: syz [ 148.807255][ T5209] usb 2-1: SerialNumber: syz [ 148.834129][ T5209] usb 2-1: config 0 descriptor?? [ 149.185527][ T5295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 149.441041][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 149.784255][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 149.810601][ T7] usb 5-1: device descriptor read/8, error -71 [ 150.220876][ T4225] usb 2-1: USB disconnect, device number 2 [ 152.954549][ T4248] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 153.484820][ T5355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 153.516945][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 153.852975][ T4248] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.863423][ T4248] usb 6-1: config 0 has no interfaces? [ 153.868911][ T4248] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 153.878361][ T4248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.888160][ T4248] usb 6-1: config 0 descriptor?? [ 154.577775][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.685639][ T7] usb 4-1: config 0 has no interfaces? [ 155.850664][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.881219][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.911554][ T7] usb 4-1: Product: syz [ 155.915734][ T7] usb 4-1: Manufacturer: syz [ 155.940594][ T4242] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.954160][ T7] usb 4-1: SerialNumber: syz [ 155.979375][ T7] usb 4-1: config 0 descriptor?? [ 156.302149][ T5365] udc-core: couldn't find an available UDC or it's busy [ 156.309091][ T5365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 156.360942][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 156.445232][ T21] usb 6-1: USB disconnect, device number 3 [ 156.526994][ T4242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.092917][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 157.180759][ T4242] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.192199][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.206328][ T4242] usb 3-1: Product: syz [ 157.213995][ T4242] usb 3-1: Manufacturer: syz [ 157.222107][ T4242] usb 3-1: SerialNumber: syz [ 157.241232][ T4242] usb 3-1: config 0 descriptor?? [ 157.292228][ T4242] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 157.500027][ T5431] bridge0: port 3(syz_tun) entered blocking state [ 157.506520][ T5431] bridge0: port 3(syz_tun) entered disabled state [ 157.514022][ T5431] device syz_tun entered promiscuous mode [ 157.519968][ T5431] bridge0: port 3(syz_tun) entered blocking state [ 157.526394][ T5431] bridge0: port 3(syz_tun) entered forwarding state [ 157.590712][ T4242] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 157.601493][ T4242] quatech2: probe of 3-1:0.0 failed with error -8 [ 157.737524][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.262'. [ 157.912122][ T4253] usb 3-1: USB disconnect, device number 3 [ 158.318248][ T5209] usb 4-1: USB disconnect, device number 3 [ 158.534178][ T5448] Zero length message leads to an empty skb [ 159.482846][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.270'. [ 160.608472][ T4253] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 160.835413][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 161.190695][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.240844][ T4253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.447134][ T4253] usb 6-1: config 0 has no interfaces? [ 161.490775][ T4253] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.669270][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.868204][ T4253] usb 6-1: config 0 descriptor?? [ 161.930125][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 161.940632][ T7] usb 4-1: config 0 has no interfaces? [ 162.121293][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.134869][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.151518][ T7] usb 4-1: Product: syz [ 162.160675][ T7] usb 4-1: Manufacturer: syz [ 162.173040][ T7] usb 4-1: SerialNumber: syz [ 162.181461][ T7] usb 4-1: config 0 descriptor?? [ 162.426689][ T5493] udc-core: couldn't find an available UDC or it's busy [ 162.459967][ T5493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.930804][ T5556] vivid-008: ================= START STATUS ================= [ 163.938547][ T5556] vivid-008: Generate PTS: true [ 163.944093][ T5556] vivid-008: Generate SCR: true [ 163.949367][ T5556] tpg source WxH: 640x360 (Y'CbCr) [ 163.954685][ T5556] tpg field: 1 [ 163.958064][ T5556] tpg crop: 640x360@0x0 [ 163.962342][ T5556] tpg compose: 640x360@0x0 [ 163.967358][ T5556] tpg colorspace: 8 [ 163.971435][ T5556] tpg transfer function: 0/0 [ 163.976478][ T5556] tpg Y'CbCr encoding: 0/0 [ 164.030810][ T5556] tpg quantization: 0/0 [ 164.035292][ T5556] tpg RGB range: 0/2 [ 164.039194][ T5556] vivid-008: ================== END STATUS ================== [ 164.741657][ T4225] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 164.750130][ T4225] Bluetooth: hci4: Injecting HCI hardware error event [ 165.188852][ T5557] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 165.195479][ T5557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.203941][ T5557] vhci_hcd vhci_hcd.0: Device attached [ 165.214212][ T5558] vhci_hcd: connection closed [ 165.215683][ T4317] vhci_hcd: stop threads [ 165.374125][ T4317] vhci_hcd: release socket [ 165.772406][ T4317] vhci_hcd: disconnect device [ 165.794655][ T4292] usb 4-1: USB disconnect, device number 4 [ 165.892531][ T5560] usb 6-1: USB disconnect, device number 4 [ 166.145287][ T4199] Bluetooth: hci4: hardware error 0x00 [ 166.880826][ T4292] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.180877][ T4292] usb 4-1: Using ep0 maxpacket: 8 [ 167.944564][ T4292] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.954090][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.002629][ T4292] pvrusb2: Hardware description: Terratec Grabster AV400 [ 168.021897][ T4292] pvrusb2: ********** [ 168.025895][ T4292] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 168.189762][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 168.633052][ T4292] pvrusb2: Important functionality might not be entirely working. [ 168.671602][ T4292] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 168.720227][ T4292] pvrusb2: ********** [ 168.787075][ T2422] pvrusb2: Invalid write control endpoint [ 168.893987][ T2422] pvrusb2: Invalid write control endpoint [ 168.906716][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 168.934289][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 168.955672][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 168.989853][ T4248] usb 4-1: USB disconnect, device number 5 [ 169.018191][ T2422] pvrusb2: Device being rendered inoperable [ 169.026519][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 169.033965][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 169.064311][ T2422] pvrusb2: Attached sub-driver cx25840 [ 169.193902][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.257790][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.490599][ T4292] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 170.212704][ T5644] vivid-008: ================= START STATUS ================= [ 170.220553][ T5644] vivid-008: Generate PTS: true [ 170.225572][ T5644] vivid-008: Generate SCR: true [ 170.230588][ T5644] tpg source WxH: 640x360 (Y'CbCr) [ 170.235711][ T5644] tpg field: 1 [ 170.239090][ T5644] tpg crop: 640x360@0x0 [ 170.243303][ T5644] tpg compose: 640x360@0x0 [ 170.247777][ T5644] tpg colorspace: 8 [ 170.251607][ T5644] tpg transfer function: 0/0 [ 170.256201][ T5644] tpg Y'CbCr encoding: 0/0 [ 170.262909][ T5644] tpg quantization: 0/0 [ 170.267099][ T5644] tpg RGB range: 0/2 [ 170.271066][ T5644] vivid-008: ================== END STATUS ================== [ 171.300574][ T4292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.485062][ T5644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 171.491688][ T5644] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.499896][ T5644] vhci_hcd vhci_hcd.0: Device attached [ 171.507621][ T5646] vhci_hcd: connection closed [ 171.508621][ T1224] vhci_hcd: stop threads [ 171.531188][ T4292] usb 6-1: config 0 has no interfaces? [ 171.559681][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 171.577074][ T1224] vhci_hcd: release socket [ 171.619762][ T4292] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.029293][ T1224] vhci_hcd: disconnect device [ 172.143577][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.339751][ T4292] usb 6-1: config 0 descriptor?? [ 172.460769][ T4292] usb 6-1: can't set config #0, error -71 [ 172.558687][ T4292] usb 6-1: USB disconnect, device number 5 [ 175.649710][ T4535] Bluetooth: hci3: command 0x0406 tx timeout [ 175.656122][ T4535] Bluetooth: hci0: command 0x0406 tx timeout [ 175.662670][ T4535] Bluetooth: hci1: command 0x0406 tx timeout [ 176.309034][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.325196][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.334465][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.189841][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 179.318876][ T5711] netlink: 'syz.4.318': attribute type 20 has an invalid length. [ 179.520624][ T4535] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 180.150661][ T4535] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.190557][ T4535] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 180.227790][ T4535] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 180.277713][ T4535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.359544][ T4535] usb 3-1: config 0 descriptor?? [ 182.547760][ T5748] netlink: 72 bytes leftover after parsing attributes in process `syz.5.326'. [ 183.226755][ T4248] usb 3-1: USB disconnect, device number 4 [ 184.488991][ T5770] netlink: 'syz.5.333': attribute type 20 has an invalid length. [ 184.964044][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 185.227859][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 186.450754][ T4253] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.140486][ T4253] usb 2-1: Using ep0 maxpacket: 8 [ 187.480876][ T4253] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 187.490294][ T1107] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 187.920807][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.942680][ T4253] usb 2-1: Product: syz [ 187.946936][ T4253] usb 2-1: Manufacturer: syz [ 188.004502][ T4253] usb 2-1: SerialNumber: syz [ 188.107409][ T4253] usb 2-1: config 0 descriptor?? [ 188.167938][ T4253] gspca_main: sq930x-2.14.0 probing 2770:930c [ 188.380768][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.070636][ T1107] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 189.135939][ T1107] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 189.157517][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.292301][ T1107] usb 6-1: config 0 descriptor?? [ 189.720610][ T4253] gspca_sq930x: ucbus_write failed -71 [ 190.000481][ T4253] gspca_sq930x: Sensor ov9630 not yet treated [ 190.006625][ T4253] sq930x: probe of 2-1:0.0 failed with error -22 [ 190.662337][ T4253] usb 2-1: USB disconnect, device number 3 [ 190.732739][ T4242] usb 6-1: USB disconnect, device number 6 [ 190.801015][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 192.581495][ T5848] netlink: 'syz.3.354': attribute type 20 has an invalid length. [ 194.013132][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.020732][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.154897][ T1107] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 197.200750][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.230473][ T1107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 197.249693][ T1107] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.274829][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.321443][ T1107] usb 4-1: config 0 descriptor?? [ 197.480949][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 198.740523][ T4253] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.794862][ T21] usb 4-1: USB disconnect, device number 6 [ 198.813015][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 199.101076][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 199.112772][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 199.128371][ T4253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 199.392219][ T4253] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 199.569760][ T5919] bridge0: port 3(syz_tun) entered blocking state [ 199.576313][ T5919] bridge0: port 3(syz_tun) entered disabled state [ 199.583730][ T5919] device syz_tun entered promiscuous mode [ 199.589804][ T5919] bridge0: port 3(syz_tun) entered blocking state [ 199.596269][ T5919] bridge0: port 3(syz_tun) entered forwarding state [ 199.784870][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.794553][ T4253] usb 5-1: Product: syz [ 199.798784][ T4253] usb 5-1: Manufacturer: syz [ 199.805358][ T4253] usb 5-1: SerialNumber: syz [ 199.813288][ T4253] usb 5-1: config 0 descriptor?? [ 199.902980][ T4253] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 200.047540][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 200.131612][ T1107] usb 5-1: USB disconnect, device number 6 [ 202.130519][ T21] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 202.580650][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.648114][ T21] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 202.692146][ T21] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.736217][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.784798][ T21] usb 6-1: config 0 descriptor?? [ 205.141526][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.164984][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.173382][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.599344][ T5652] usb 6-1: USB disconnect, device number 7 [ 205.799281][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 206.947818][ T4225] Bluetooth: hci2: command 0x0406 tx timeout [ 209.036235][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 210.960625][ T1107] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 211.797005][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.807211][ T1107] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 211.816534][ T1107] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.825886][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.843160][ T1107] usb 3-1: config 0 descriptor?? [ 213.989958][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 214.044021][ T7] usb 3-1: USB disconnect, device number 5 [ 215.514070][ T5204] tipc: Subscription rejected, illegal request [ 218.260892][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 218.269912][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 219.420564][ T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 222.040498][ T21] usb 2-1: device not accepting address 4, error -71 [ 223.399151][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 224.340949][ T21] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 225.080669][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.910149][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.930192][ T21] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 225.949601][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.988977][ T21] usb 3-1: config 0 descriptor?? [ 226.032338][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 226.039259][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 226.073504][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 226.110745][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 226.117941][ T21] usb 3-1: media controller created [ 226.168280][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.195892][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 226.202480][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 226.242717][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 226.774535][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 226.789759][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 226.947027][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 227.551033][ T21] dvb-usb: error while querying for an remote control event. [ 227.711673][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 227.717433][ T21] dvb-usb: error while querying for an remote control event. [ 227.981487][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 227.987511][ T21] dvb-usb: error while querying for an remote control event. [ 228.142523][ T4242] usb 3-1: USB disconnect, device number 6 [ 228.561753][ T4242] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 232.650577][ T1107] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 233.081275][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.430518][ T1107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 233.446086][ T1107] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 233.456204][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.486212][ T1107] usb 2-1: config 0 descriptor?? [ 233.532613][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 233.584876][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 233.632688][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 233.680725][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 233.696256][ T1107] usb 2-1: media controller created [ 233.713301][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.769653][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 233.779325][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 233.851264][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 233.882301][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 233.889262][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 233.910495][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 234.040525][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 234.046278][ T1107] dvb-usb: error while querying for an remote control event. [ 234.321070][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 234.327802][ T1107] dvb-usb: error while querying for an remote control event. [ 234.461523][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.482370][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.626545][ T7] usb 5-1: Product: syz [ 234.682122][ T7] usb 5-1: Manufacturer: syz [ 234.727885][ T7] usb 5-1: SerialNumber: syz [ 234.788842][ T5652] dvb-usb: bulk message failed: -22 (1/0) [ 234.794876][ T5652] dvb-usb: error while querying for an remote control event. [ 234.933204][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.365877][ T5652] dvb-usb: bulk message failed: -22 (1/0) [ 235.371909][ T5652] dvb-usb: error while querying for an remote control event. [ 235.417465][ T5652] usb 2-1: USB disconnect, device number 6 [ 235.491288][ T5652] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 236.020805][ T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 237.116372][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 237.127697][ T6240] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 237.167630][ T6283] udc-core: couldn't find an available UDC or it's busy [ 237.299646][ T6285] ================================================================================ [ 237.310554][ T6283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.373445][ T6285] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:526:9 [ 237.401015][ T6285] shift exponent 65535 is too large for 32-bit type 'int' [ 237.422779][ T6285] CPU: 0 PID: 6285 Comm: syz.1.483 Not tainted 5.15.189-syzkaller #0 [ 237.430855][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.440926][ T6285] Call Trace: [ 237.444211][ T6285] [ 237.447143][ T6285] dump_stack_lvl+0x168/0x230 [ 237.451834][ T6285] ? show_regs_print_info+0x20/0x20 [ 237.457039][ T6285] ? load_image+0x3b0/0x3b0 [ 237.461557][ T6285] ? __lock_acquire+0x7c60/0x7c60 [ 237.466586][ T6285] ? do_raw_write_lock+0x119/0x250 [ 237.471710][ T6285] ubsan_epilogue+0xa/0x30 [ 237.476128][ T6285] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 237.482565][ T6285] ? __comedi_request_region+0x70/0x130 [ 237.488125][ T6285] das16m1_attach+0x8c9/0xb00 [ 237.492818][ T6285] comedi_device_attach+0x515/0x650 [ 237.498029][ T6285] comedi_unlocked_ioctl+0x5ec/0xe90 [ 237.503332][ T6285] ? comedi_poll+0x8b0/0x8b0 [ 237.507959][ T6285] ? bpf_lsm_file_ioctl+0x5/0x10 [ 237.512885][ T6285] ? security_file_ioctl+0x7c/0xa0 [ 237.517997][ T6285] ? comedi_poll+0x8b0/0x8b0 [ 237.522593][ T6285] __se_sys_ioctl+0xfa/0x170 [ 237.527199][ T6285] do_syscall_64+0x4c/0xa0 [ 237.530505][ T21] usb 5-1: USB disconnect, device number 7 [ 237.531615][ T6285] ? clear_bhb_loop+0x30/0x80 [ 237.531651][ T6285] ? clear_bhb_loop+0x30/0x80 [ 237.531670][ T6285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.552637][ T6285] RIP: 0033:0x7f4bf21adb69 [ 237.557047][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.576628][ T6285] RSP: 002b:00007f4bf0015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.585020][ T6285] RAX: ffffffffffffffda RBX: 00007f4bf23d4fa0 RCX: 00007f4bf21adb69 [ 237.592969][ T6285] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000003 [ 237.600924][ T6285] RBP: 00007f4bf2230df1 R08: 0000000000000000 R09: 0000000000000000 [ 237.608888][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.616837][ T6285] R13: 0000000000000000 R14: 00007f4bf23d4fa0 R15: 00007ffea6bdef78 [ 237.624797][ T6285] [ 237.633977][ T7] usb 5-1: Service connection timeout for: 257 [ 237.640142][ T7] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 237.658459][ T6285] ================================================================================ [ 237.693689][ T6285] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 237.700906][ T6285] CPU: 1 PID: 6285 Comm: syz.1.483 Not tainted 5.15.189-syzkaller #0 [ 237.708950][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.718994][ T6285] Call Trace: [ 237.722251][ T6285] [ 237.725159][ T6285] dump_stack_lvl+0x168/0x230 [ 237.729810][ T6285] ? show_regs_print_info+0x20/0x20 [ 237.734978][ T6285] ? load_image+0x3b0/0x3b0 [ 237.739462][ T6285] panic+0x2c9/0x7f0 [ 237.743339][ T6285] ? bpf_jit_dump+0xd0/0xd0 [ 237.747841][ T6285] check_panic_on_warn+0x80/0xa0 [ 237.752754][ T6285] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 237.759145][ T6285] ? __comedi_request_region+0x70/0x130 [ 237.764673][ T6285] das16m1_attach+0x8c9/0xb00 [ 237.769342][ T6285] comedi_device_attach+0x515/0x650 [ 237.774517][ T6285] comedi_unlocked_ioctl+0x5ec/0xe90 [ 237.779778][ T6285] ? comedi_poll+0x8b0/0x8b0 [ 237.784364][ T6285] ? bpf_lsm_file_ioctl+0x5/0x10 [ 237.789271][ T6285] ? security_file_ioctl+0x7c/0xa0 [ 237.794363][ T6285] ? comedi_poll+0x8b0/0x8b0 [ 237.798944][ T6285] __se_sys_ioctl+0xfa/0x170 [ 237.803513][ T6285] do_syscall_64+0x4c/0xa0 [ 237.807906][ T6285] ? clear_bhb_loop+0x30/0x80 [ 237.812557][ T6285] ? clear_bhb_loop+0x30/0x80 [ 237.817209][ T6285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.823076][ T6285] RIP: 0033:0x7f4bf21adb69 [ 237.827468][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.847044][ T6285] RSP: 002b:00007f4bf0015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.855430][ T6285] RAX: ffffffffffffffda RBX: 00007f4bf23d4fa0 RCX: 00007f4bf21adb69 [ 237.863377][ T6285] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000003 [ 237.871330][ T6285] RBP: 00007f4bf2230df1 R08: 0000000000000000 R09: 0000000000000000 [ 237.879286][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.887236][ T6285] R13: 0000000000000000 R14: 00007f4bf23d4fa0 R15: 00007ffea6bdef78 [ 237.895194][ T6285] [ 237.898452][ T6285] Kernel Offset: disabled [ 237.902957][ T6285] Rebooting in 86400 seconds..