last executing test programs: 41.345753121s ago: executing program 3 (id=262): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 40.279321696s ago: executing program 3 (id=266): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 40.113697081s ago: executing program 3 (id=270): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x8, "b5ed0423753b6a03af25124a57ce9ad88d2556119a9a3d48e0cc1f7d25e249d7", 0x1, 0x1}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000180)}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) close_range(r4, 0xffffffffffffffff, 0x0) 39.457899971s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 39.384568654s ago: executing program 3 (id=281): socket$inet6(0xa, 0x5, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x3, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.955729607s ago: executing program 3 (id=283): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$video4linux(0x0, 0x7, 0x141000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) munmap(&(0x7f000016e000/0x1000)=nil, 0x1000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) 38.606681519s ago: executing program 32 (id=283): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$video4linux(0x0, 0x7, 0x141000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) munmap(&(0x7f000016e000/0x1000)=nil, 0x1000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) 6.707676236s ago: executing program 2 (id=491): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x1, 0x40, 0x40, 0x2}, 0x50) 6.60164411s ago: executing program 2 (id=493): syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f0000002300)="08b5b2c0caf6337a3cabd4830ba9a93fc8cb47b98d0bf44c71e4e4b5f9f3bf4688a45e5b0e157505385d401cec3dad", 0x2f}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 5.598792291s ago: executing program 2 (id=499): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 5.316929091s ago: executing program 2 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 4.39460023s ago: executing program 2 (id=508): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(&(0x7f0000001040), &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x28c000, &(0x7f0000004040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="4d1d85eec042953edbe46158bfb36dcc077e0c55b5a3c62c4cdb2be6d2d960b6a6875b", @ANYRES8=r1], 0x0) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x20000000000001bf, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}, 0x50) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600", 0x34}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.691600243s ago: executing program 4 (id=512): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 3.44351258s ago: executing program 4 (id=513): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000071106e00000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00'}, 0x80) 3.344778983s ago: executing program 4 (id=514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x2b}, 0x28) 3.167618149s ago: executing program 4 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.023338924s ago: executing program 4 (id=516): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.583459918s ago: executing program 5 (id=518): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 2.285497387s ago: executing program 5 (id=520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.976204477s ago: executing program 1 (id=522): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)="ec085233ce8f5d331877cc5694f2f79c7fe65ef3673c6fb9e2bfb6d0175933a57f8f9b3d0fb0c6f1c61f0e628d5d10d3f53cf21c0f1744c346068d7045d9fd1cd70fbcbd7a4630e7d0c55301ffcfacaa1078e9843aa9031a191eed906266c24bc8244ae70bf1a3489cf6114e11343df25cc38b7aedd2ac6e993f7a0e4899c064a5a82125da340ee3f84cb4d0921db14377b63456aebd4cb1e306ac78330a6e02cd0edc3f27f05a916756d5d568f0f48a758bfab8a48ce61a64c2ede788cf67ce3094b112b82730876b4eb1c806fd628bbdec53eee3146c1b9696955cd49fed2fd18f6046ddb5becd7cfde5d850e8b0078dc4b30852566af02bbc72eb122ae307b6afc96174cefd1de98e41a13a8a57775700cdf18d7bc51dbec4844129e1de47b05702b7c07f1e8860c2cfd0ebcbee100d0cf7209a6047a8298d549491a3ceb8cd305ca208cdfcf7fa8de050377a4b96682c50e9106a2d05975358690b0dc31deea9275459cda548466c2433f27a6825157e2b7f80207172715deef44a44e6adc91a4e812bd87e38fc96349d4424d2858a5665b6d7aef919ce17171a30e6510941be6e268146eba918e4d18abf7ba36bf5178fd98c06c2901b2ed51c19964381e6c8d9d50f1903e8ab1fc1a98081378d242d5675d703b4ec9ea295a55099264936bdea5ada37319b596cb9f6be125941496a62bc5c8bb8748288c80ea21ffcebffeaeb3b589b36c9e2cba7743b430b642aeb6be19bdf587c6d84f93d86accf6f4b3ac1b840848900ea17c604346af5e2c154fad9b3b76aa3ddfd2ebff61525cba725f9117b9179a0dfb05d2be0b7df54aa906bb2574058cf516b5932e0c384379fba5f1e786d9d457d64a9ed5c02a942034c9c8f91c8878807fc3d3c8d2520e8b4b0bc3b304711389280bf7b525a17dceabc365d996f9bc43f89067a764140a9954713e0fc0896cadf221816e9dd9161812a43a9cf856005c8067533f181c76b8f40fe9bcb304e5e872c7de7505689a0457143c6a7bc879c28262d0a4241e5dc36465231a9e6e6ac38527328c202dd9d006a14981827e814a105e5ec002d15265025aa8aadb61c20cb585d30ff96aa7276faa290c73eb69a8bd0b32f44a3113bf8dcfe2308cc67c3cb1e4dff3be9378c5b9f28a4ccada01f9680739ba3229ac672229bd88f7184e7a0c2d57fa7a61cb2905b2e4c67e582a45c519c6f55c4be960374f2df81555e415d930d93bd383bdc376cabec9a3e8a5b0902a5d3ce3a4a5a9a05045c0eaf51e74ad7cd29077b352df4acd1579c78ef3bc6e614511e2013e40d475e3f2a966696521fd93ef4c2d7a9d5e630244a290e2d1e378b2323acfa", 0x3bf}], 0x1}}], 0x1, 0x20044000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000300)='n\x12>\xd3\x0f\x83oS_\xbe\x04\x83\xab\xc6\xf0\f\xbd`(\x19\xf51?8\x8d\x7fk$\x11\xdf_|\x06>\xba\xf9\x10\x87e\x97^\x18=\xa0\xfe*\xfd\xc7\xb9\xe8\x83\xd1.\xec$l\xfa\xc5\xb9\t\x94\xce\"\x03\xfb\x19\xd4\xa8\xb9\xd2\xeauY\x17P\xa8}[h\xe7\xb0\xbb\xd6\x8a2\x1a\x8c\xdc\n\xc7') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2800000007) mmap(&(0x7f00006e3000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0xa4e51000) 1.749592054s ago: executing program 0 (id=523): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 1.749182724s ago: executing program 1 (id=524): socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x3, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.497971802s ago: executing program 0 (id=525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0x2, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 1.431128284s ago: executing program 1 (id=526): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003d2000/0x400000)=nil) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.315532048s ago: executing program 5 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x4, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdffffffbe, 0xfdfffffffffffff9, 0x100, 0x9, 0xc82, 0x767], 0xeeef0000, 0x81082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.303484269s ago: executing program 0 (id=528): socket(0x2, 0xa, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 972.352319ms ago: executing program 1 (id=529): openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$khugepaged_scan(r2, &(0x7f0000000180), 0x8) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 971.752939ms ago: executing program 5 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 927.58444ms ago: executing program 0 (id=531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00001e0000/0x400000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) 894.587381ms ago: executing program 2 (id=532): syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) openat$ppp(0xffffff9c, &(0x7f0000000080), 0x240100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) io_setup(0x6, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfff0) 700.020698ms ago: executing program 5 (id=533): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 551.690483ms ago: executing program 0 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 452.520036ms ago: executing program 1 (id=535): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 302.075231ms ago: executing program 0 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 139.650936ms ago: executing program 5 (id=537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000005c0)}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4208, r2) syz_usb_connect(0x6, 0x187, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socket(0x10, 0x3, 0x0) 106.454447ms ago: executing program 1 (id=538): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8000000000000000) 0s ago: executing program 4 (id=539): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x89, 0xfffc, @private, @local, {[@cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0xf, 0x0, [@dev, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0x2}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 40.093366][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.109347][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. syzkaller login: [ 63.453333][ T4175] cgroup: Unknown subsys name 'net' [ 63.557201][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.040651][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.485190][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.516047][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.591160][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.639263][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 66.723492][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.731591][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.740884][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.755717][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.763113][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.771718][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.793047][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.802961][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.810239][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.819456][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.831111][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.838471][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.846596][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.866775][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.873974][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.882353][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.912752][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.922859][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.930453][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.939382][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.964319][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.984968][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.998204][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.049897][ T4188] team0: Port device team_slave_0 added [ 67.055979][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.064160][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.072238][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.089311][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.100840][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.116201][ T4188] team0: Port device team_slave_1 added [ 67.122382][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.129649][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.138148][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.147884][ T4189] team0: Port device team_slave_0 added [ 67.180174][ T4189] team0: Port device team_slave_1 added [ 67.212755][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.231694][ T4195] team0: Port device team_slave_0 added [ 67.238592][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.245559][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.271700][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.283869][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.291266][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.299689][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.308248][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.315333][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.323357][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.332581][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.349752][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.356976][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.383242][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.397110][ T4195] team0: Port device team_slave_1 added [ 67.403389][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.410802][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.436950][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.472322][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.479460][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.505636][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.538555][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.574056][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.585427][ T4194] team0: Port device team_slave_0 added [ 67.592252][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.600121][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.627117][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.639811][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.646794][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.673434][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.689940][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.700289][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.715638][ T4194] team0: Port device team_slave_1 added [ 67.748689][ T4190] team0: Port device team_slave_0 added [ 67.757305][ T4190] team0: Port device team_slave_1 added [ 67.780828][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.787872][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.794948][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.803032][ T4189] Cannot create hsr debugfs directory [ 67.862244][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.869433][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.895699][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.907583][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.914560][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.940550][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.963275][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.970524][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.977175][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.984788][ T4195] Cannot create hsr debugfs directory [ 67.991590][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.998879][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.024901][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.036445][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.043699][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.069690][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.167806][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 68.174548][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.177116][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.192333][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 68.199854][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.207125][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.214444][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.222213][ T4190] Cannot create hsr debugfs directory [ 68.247010][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 68.261821][ T4194] device hsr_slave_0 entered promiscuous mode [ 68.268948][ T4194] device hsr_slave_1 entered promiscuous mode [ 68.275632][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.283360][ T4194] Cannot create hsr debugfs directory [ 68.524936][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.539905][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.555040][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.573919][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.601926][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.620252][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.638665][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.656391][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.719278][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.728774][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.765626][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.778846][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.824481][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.842851][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.853187][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.865827][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.875906][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.905567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.915436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.951074][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.962320][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.972528][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.982262][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989612][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.001252][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.020941][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.037245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.046673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.057961][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.065056][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.084979][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.115602][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.125629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.136745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.146345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.155185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.168754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.179124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.188720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.200344][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.210066][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.221263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.231018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.248739][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.261366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.270973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.283699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.293121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.302112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.309279][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.339313][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.361150][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.369914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.379464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.389040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.398782][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.409127][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.418904][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.427803][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.434911][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.481030][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.489308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.503205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.513624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.525857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.534645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.549860][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.575103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.585379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.595807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.606217][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.613390][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.623222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.632706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.641811][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.648969][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.659348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.668403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.676805][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.683967][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.692963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.701495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.731997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.741665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.751614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.762652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.772868][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.780021][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.797159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.812086][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.822385][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.831601][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.841192][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.852480][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.868210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.884580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.896338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.942904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.952230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.962313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.972324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.981385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.990516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.999619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.010082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.019614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.029859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.039981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.049006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.057965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.066372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.082910][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.093174][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.107830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.117964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.143280][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.154294][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.171161][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.181287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.189503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.197549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.205927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.216400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.225262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.240633][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.248053][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 70.254431][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 70.275549][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.282387][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 70.289529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.300278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.307606][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 70.322703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.337528][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 70.351097][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.382968][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.421940][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.429115][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.446041][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.480928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.494119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.515505][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.522680][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.547240][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.559677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.609150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.628870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.659313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.672397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.723612][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.738030][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.760066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.771713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.780432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.789402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.798099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.805595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.816318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.830786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.841666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.849472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.863604][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.874916][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.924908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.940503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.970037][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.985250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.001325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.037872][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.050069][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.085406][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.103667][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.116364][ T4189] device veth0_vlan entered promiscuous mode [ 71.130499][ T4194] device veth0_vlan entered promiscuous mode [ 71.163288][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.171631][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.185630][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.194613][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.204507][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.216335][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.225536][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.234628][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.270779][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.280931][ T4194] device veth1_vlan entered promiscuous mode [ 71.292089][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298677][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.305747][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.315645][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.324875][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.334221][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.343378][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.352289][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.360174][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.368752][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.376716][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.387695][ T4195] device veth0_vlan entered promiscuous mode [ 71.410980][ T4189] device veth1_vlan entered promiscuous mode [ 71.424984][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.434487][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.443191][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.453768][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.464107][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.472387][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.483226][ T4188] device veth0_vlan entered promiscuous mode [ 71.493009][ T4195] device veth1_vlan entered promiscuous mode [ 71.523585][ T4188] device veth1_vlan entered promiscuous mode [ 71.543677][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.555476][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.564091][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.573865][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.582475][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.591180][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.600861][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.631728][ T4189] device veth0_macvtap entered promiscuous mode [ 71.650287][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.661626][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.672579][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.690661][ T4189] device veth1_macvtap entered promiscuous mode [ 71.703039][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.712025][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.720821][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.736610][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.745923][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.769457][ T4188] device veth0_macvtap entered promiscuous mode [ 71.781486][ T4195] device veth0_macvtap entered promiscuous mode [ 71.791672][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.800772][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.810008][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.821723][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.830591][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.840906][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.866642][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.875652][ T4188] device veth1_macvtap entered promiscuous mode [ 71.890791][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.899588][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.909252][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.918264][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.928671][ T4194] device veth0_macvtap entered promiscuous mode [ 71.939858][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.950451][ T4195] device veth1_macvtap entered promiscuous mode [ 71.960803][ T4190] device veth0_vlan entered promiscuous mode [ 71.970070][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.979815][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.993581][ T4194] device veth1_macvtap entered promiscuous mode [ 72.012899][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.022703][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.031968][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.041622][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061017][ T4190] device veth1_vlan entered promiscuous mode [ 72.076620][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.087712][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.100296][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.117278][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.134964][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.145317][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.156059][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.169415][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.182449][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.193264][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.206055][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.217566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.226955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.235901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.246173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.255973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.265307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.274548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.285631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.297549][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.308318][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.319064][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.329806][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 72.336056][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 72.342587][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 72.344701][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.349532][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 72.382990][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391979][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.401866][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.411459][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 72.415789][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.429515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.438554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.447435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.459360][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.468707][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.477805][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.486578][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.501837][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.512506][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.522688][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.533432][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.543725][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.554774][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.566391][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.594481][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.607497][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.618567][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.634395][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.644513][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.655898][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.668027][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.687517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.696203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.707986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.718960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.774922][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.785411][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.797471][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.806260][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.816673][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.827460][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848491][ T4190] device veth0_macvtap entered promiscuous mode [ 72.855851][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.884151][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.917378][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.940233][ T4190] device veth1_macvtap entered promiscuous mode [ 72.954696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.011209][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.023620][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.033867][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.048033][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.059094][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.069662][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.079676][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.091036][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.102494][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.130858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.140837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.170359][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.171137][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.178640][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.192227][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.209513][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.222245][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.227144][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.232540][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247036][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.257523][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.268819][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.279805][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.291585][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.307233][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.320120][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.328228][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.338011][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.362681][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.378509][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.387639][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.396369][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.422962][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.449748][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.482776][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.492127][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.503743][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.514974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.539970][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.551346][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.580667][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.605473][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.637317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.645796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.744753][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.771207][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.828855][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.851985][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.878896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.897894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.007769][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.021129][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.091181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.180356][ T4291] device syzkaller0 entered promiscuous mode [ 74.227047][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.265718][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.409176][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 74.416170][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 74.434351][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 74.441184][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 74.487951][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 74.497305][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 74.547245][ T4297] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 74.647929][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 74.977429][ T4235] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 74.991073][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.000369][ T4235] usb 4-1: Product: syz [ 75.004807][ T4235] usb 4-1: Manufacturer: syz [ 75.009940][ T4235] usb 4-1: SerialNumber: syz [ 75.241348][ T4235] usb 4-1: config 0 descriptor?? [ 75.900156][ T4235] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 75.911951][ T4235] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 75.937826][ T4297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.951197][ T4297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.150376][ T4297] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.168510][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.197125][ T4297] usb 5-1: Product: syz [ 76.202502][ T4297] usb 5-1: Manufacturer: syz [ 76.207421][ T4297] usb 5-1: SerialNumber: syz [ 76.221710][ T4297] usb 5-1: config 0 descriptor?? [ 76.238853][ T4327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 76.427397][ T4336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.448214][ T4297] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 76.555786][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.572570][ T4235] em28xx 4-1:0.0: chip ID is em2874 [ 76.576931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.586869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 76.596878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 76.739581][ T4297] usb 5-1: USB disconnect, device number 2 [ 76.977952][ T4235] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 77.006564][ T4235] em28xx 4-1:0.0: board has no eeprom [ 77.136610][ T4343] device syzkaller0 entered promiscuous mode [ 77.142742][ T4235] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 77.182778][ T4235] em28xx 4-1:0.0: dvb set to bulk mode. [ 77.214251][ T4235] usb 4-1: USB disconnect, device number 2 [ 77.253043][ T4235] em28xx 4-1:0.0: Disconnecting em28xx [ 77.275763][ T4297] em28xx 4-1:0.0: Binding DVB extension [ 77.366134][ T4297] em28xx 4-1:0.0: Registering input extension [ 77.522020][ T4354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23'. [ 77.627016][ T4297] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 77.644659][ T4297] Registered IR keymap rc-empty [ 77.678971][ T4297] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 77.716985][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.756049][ T4297] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 77.799829][ T4297] em28xx 4-1:0.0: Input extension successfully initialized [ 77.818632][ T4235] em28xx 4-1:0.0: Closing input extension [ 77.926288][ T4235] em28xx 4-1:0.0: Freeing device [ 78.056938][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.117139][ T21] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 78.127023][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 78.337355][ T21] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 78.359625][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.397351][ T21] usb 2-1: Product: syz [ 78.406202][ T21] usb 2-1: Manufacturer: syz [ 78.417140][ T4233] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.421417][ T21] usb 2-1: SerialNumber: syz [ 78.440376][ T4233] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 78.463033][ T21] usb 2-1: config 0 descriptor?? [ 78.494501][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.515401][ T21] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 78.544936][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 78.609966][ T4377] device syzkaller0 entered promiscuous mode [ 78.707060][ T4233] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.716177][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.735638][ T4233] usb 5-1: Product: syz [ 78.740347][ T4233] usb 5-1: Manufacturer: syz [ 78.767837][ T4357] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.788463][ T4233] cdc_wdm 5-1:1.0: skipping garbage [ 78.793739][ T4233] cdc_wdm 5-1:1.0: skipping garbage [ 78.805204][ T4233] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 78.977677][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 78.986990][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.004234][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 79.018276][ T4297] usb 5-1: USB disconnect, device number 3 [ 79.257073][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 79.340255][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.377269][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.394173][ T4401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.439750][ T4297] usb 2-1: USB disconnect, device number 2 [ 79.587170][ T4235] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.624102][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.661398][ T4235] usb 4-1: Product: syz [ 79.666298][ T4235] usb 4-1: Manufacturer: syz [ 79.672497][ T4235] usb 4-1: SerialNumber: syz [ 79.702843][ T4235] usb 4-1: config 0 descriptor?? [ 79.718336][ T4411] device syzkaller0 entered promiscuous mode [ 79.763823][ T4235] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.777891][ T4235] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 80.437185][ T4235] em28xx 4-1:0.0: chip ID is em2874 [ 80.609189][ T4431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.53'. [ 80.759485][ T4441] device syzkaller0 entered promiscuous mode [ 80.777091][ T4297] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.817489][ T4235] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.827895][ T4235] em28xx 4-1:0.0: board has no eeprom [ 80.977088][ T4235] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 80.989335][ T4235] em28xx 4-1:0.0: dvb set to bulk mode. [ 81.013679][ T4235] usb 4-1: USB disconnect, device number 3 [ 81.052857][ T4235] em28xx 4-1:0.0: Disconnecting em28xx [ 81.088611][ T4236] em28xx 4-1:0.0: Binding DVB extension [ 81.108264][ T4445] netlink: 64683 bytes leftover after parsing attributes in process `syz.2.58'. [ 81.173997][ T4236] em28xx 4-1:0.0: Registering input extension [ 81.181142][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 81.437165][ T4297] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.486029][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.584104][ T4297] usb 1-1: Product: syz [ 81.626953][ T4236] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 81.633537][ T4236] Registered IR keymap rc-empty [ 81.641315][ T4297] usb 1-1: Manufacturer: syz [ 81.674999][ T4297] usb 1-1: SerialNumber: syz [ 81.697847][ T4236] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 81.743452][ T4297] usb 1-1: config 0 descriptor?? [ 81.816145][ T4236] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 81.872693][ T4297] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 81.887028][ T4236] em28xx 4-1:0.0: Input extension successfully initialized [ 81.918144][ T4235] em28xx 4-1:0.0: Closing input extension [ 81.940135][ T4467] fuse: Unknown parameter 'À' [ 81.990958][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.034399][ T4461] Zero length message leads to an empty skb [ 82.037954][ T4235] em28xx 4-1:0.0: Freeing device [ 82.147381][ T4297] usb 1-1: USB disconnect, device number 2 [ 82.536911][ T4177] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.801891][ T4479] device syzkaller0 entered promiscuous mode [ 83.067196][ T4177] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 83.092782][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.132933][ T4177] usb 5-1: Product: syz [ 83.139829][ T4177] usb 5-1: Manufacturer: syz [ 83.160898][ T4177] usb 5-1: SerialNumber: syz [ 83.192249][ T4177] usb 5-1: config 0 descriptor?? [ 83.469274][ T4233] usb 5-1: USB disconnect, device number 4 [ 83.513040][ T4237] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.887199][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 83.983296][ T4523] device syzkaller0 entered promiscuous mode [ 84.068153][ T4237] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 84.090744][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.108149][ T4237] usb 1-1: Product: syz [ 84.115298][ T4237] usb 1-1: Manufacturer: syz [ 84.146135][ T4237] usb 1-1: SerialNumber: syz [ 84.189963][ T4237] usb 1-1: config 0 descriptor?? [ 84.310751][ T4237] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 84.429185][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.474990][ T4237] usb 1-1: USB disconnect, device number 3 [ 84.624530][ T4542] vivid-004: ================= START STATUS ================= [ 84.651400][ T4540] device ip6gre1 entered promiscuous mode [ 84.657339][ T4542] vivid-004: Radio HW Seek Mode: Bounded [ 84.699659][ T4542] vivid-004: Radio Programmable HW Seek: false [ 84.819410][ T4542] vivid-004: RDS Rx I/O Mode: Block I/O [ 84.825062][ T4542] vivid-004: Generate RBDS Instead of RDS: false [ 84.842814][ T4542] vivid-004: RDS Reception: true [ 84.849328][ T4542] vivid-004: RDS Program Type: 0 inactive [ 84.873395][ T4542] vivid-004: RDS PS Name: inactive [ 84.889279][ T4542] vivid-004: RDS Radio Text: inactive [ 84.935206][ T4542] vivid-004: RDS Traffic Announcement: false inactive [ 84.948619][ T26] audit: type=1326 audit(1779513720.965:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.001529][ T4542] vivid-004: RDS Traffic Program: false inactive [ 85.017244][ T4560] device syzkaller0 entered promiscuous mode [ 85.024393][ T4542] vivid-004: RDS Music: false inactive [ 85.045302][ T4542] vivid-004: ================== END STATUS ================== [ 85.104311][ T26] audit: type=1326 audit(1779513721.005:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.176893][ T26] audit: type=1326 audit(1779513721.025:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.256336][ T26] audit: type=1326 audit(1779513721.025:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.359629][ T26] audit: type=1326 audit(1779513721.025:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.396855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 85.457732][ T26] audit: type=1326 audit(1779513721.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.580655][ T26] audit: type=1326 audit(1779513721.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.662681][ T26] audit: type=1326 audit(1779513721.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 85.801796][ T26] audit: type=1326 audit(1779513721.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 86.014476][ T26] audit: type=1326 audit(1779513721.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2b2d83de59 code=0x7ffc0000 [ 86.049745][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.067469][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.102638][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.128029][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.190008][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.239576][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.292307][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.348309][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.383244][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.419856][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.469638][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.514912][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.565935][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.597046][ T4235] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 86.623114][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.651964][ T1110] cfg80211: failed to load regulatory.db [ 86.670448][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.694487][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.720706][ T4237] hid-generic 0006:0008:FFFFFF35.0001: unknown main item tag 0x0 [ 86.775761][ T4237] hid-generic 0006:0008:FFFFFF35.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 87.002975][ T4593] fido_id[4593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.017177][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 87.277289][ T4235] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.314097][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.325995][ T4235] usb 4-1: Product: syz [ 87.331190][ T4235] usb 4-1: Manufacturer: syz [ 87.336340][ T4235] usb 4-1: SerialNumber: syz [ 87.343375][ T4235] usb 4-1: config 0 descriptor?? [ 87.456458][ T4235] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 87.558682][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.631882][ T4235] usb 4-1: USB disconnect, device number 4 [ 88.807149][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.066902][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 89.417148][ T4231] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 89.445848][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.465814][ T4231] usb 2-1: Product: syz [ 89.501994][ T4231] usb 2-1: Manufacturer: syz [ 89.510336][ T4231] usb 2-1: SerialNumber: syz [ 89.530585][ T4231] usb 2-1: config 0 descriptor?? [ 89.600243][ T4231] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 89.643046][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 89.676583][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.714762][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 89.736945][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.802910][ T4625] dvb-usb: bulk message failed: -22 (7/0) [ 89.813218][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.833837][ T4625] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 89.867316][ T4231] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 89.882744][ T4625] ttusb2: i2c transfer failed. [ 89.897000][ T4231] usb 2-1: media controller created [ 89.958543][ T26] kauditd_printk_skb: 156 callbacks suppressed [ 89.958557][ T26] audit: type=1326 audit(1779513725.985:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.005422][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.112302][ T4231] usb 2-1: selecting invalid altsetting 3 [ 90.119615][ T26] audit: type=1326 audit(1779513725.985:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.154758][ T4231] ttusb2: set interface to alts=3 failed [ 90.196227][ T26] audit: type=1326 audit(1779513725.985:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.220231][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.237110][ T26] audit: type=1326 audit(1779513725.985:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.353776][ T4231] DVB: Unable to find symbol tda10086_attach() [ 90.360228][ T4231] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 90.372029][ T26] audit: type=1326 audit(1779513725.985:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.398529][ T26] audit: type=1326 audit(1779513725.985:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.422726][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.437180][ T26] audit: type=1326 audit(1779513725.985:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.464614][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 90.474551][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.496241][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 90.526116][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.557150][ T26] audit: type=1326 audit(1779513725.985:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.588726][ T26] audit: type=1326 audit(1779513725.985:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.615292][ T4231] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 90.635310][ T26] audit: type=1326 audit(1779513725.985:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4633 comm="syz.3.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2d7df1d9 code=0x7ffc0000 [ 90.671625][ T4231] usb 2-1: USB disconnect, device number 3 [ 90.823895][ T4231] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 90.896983][ T4297] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 91.193575][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.222173][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.243805][ T4663] fuse: Bad value for 'fd' [ 91.253075][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.257719][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 91.274234][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.286741][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.300728][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.315549][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.329508][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.342207][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.358174][ T4661] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 91.359118][ T4665] binder: 4662:4665 ioctl 80105873 200000000140 returned -22 [ 91.406681][ T4665] binder: 4662:4665 unknown command 1074553620 [ 91.426577][ T4665] binder: 4662:4665 ioctl c0306201 200000000640 returned -22 [ 91.447273][ T4297] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.487192][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.527117][ T4297] usb 5-1: Product: syz [ 91.531346][ T4297] usb 5-1: Manufacturer: syz [ 91.535960][ T4297] usb 5-1: SerialNumber: syz [ 91.544756][ T4297] usb 5-1: config 0 descriptor?? [ 91.607155][ T4297] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 91.729980][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.794017][ T4235] usb 5-1: USB disconnect, device number 5 [ 92.021795][ T4297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.273803][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 92.397101][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 92.408111][ T4705] process 'syz.4.146' launched './file0' with NULL argv: empty string added [ 92.577265][ T4297] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.603088][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.621986][ T4297] usb 1-1: Product: syz [ 92.626221][ T4297] usb 1-1: Manufacturer: syz [ 92.650633][ T4297] usb 1-1: SerialNumber: syz [ 92.660994][ T4297] usb 1-1: config 0 descriptor?? [ 92.670542][ T4716] fuse: Bad value for 'fd' [ 92.709015][ T4297] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.724727][ T4297] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 92.734590][ T4720] binder: 4715:4720 ioctl 80105873 200000000140 returned -22 [ 92.750046][ T4720] binder: 4715:4720 unknown command 1074553620 [ 92.756565][ T4720] binder: 4715:4720 ioctl c0306201 200000000640 returned -22 [ 92.955958][ T4726] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.969329][ T4726] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 93.353066][ T1110] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 93.357564][ T4297] em28xx 1-1:0.0: chip ID is em2874 [ 93.747009][ T4297] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.755087][ T4297] em28xx 1-1:0.0: board has no eeprom [ 93.816873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.826860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.836856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.846859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.856856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.866856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.957244][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 94.435184][ T4297] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.447829][ T4297] em28xx 1-1:0.0: dvb set to bulk mode. [ 94.453732][ T4277] em28xx 1-1:0.0: Binding DVB extension [ 94.467019][ T4297] usb 1-1: USB disconnect, device number 4 [ 94.473487][ T4297] em28xx 1-1:0.0: Disconnecting em28xx [ 94.642160][ T4277] em28xx 1-1:0.0: Registering input extension [ 94.707205][ T1110] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.716364][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.756918][ T1110] usb 2-1: Product: syz [ 94.771389][ T1110] usb 2-1: Manufacturer: syz [ 94.776060][ T1110] usb 2-1: SerialNumber: syz [ 94.823760][ T1110] usb 2-1: config 0 descriptor?? [ 94.836965][ T4277] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 94.858756][ T4277] Registered IR keymap rc-empty [ 94.885435][ T4277] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 94.954087][ T1110] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 94.956274][ T4277] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 95.035584][ T4277] em28xx 1-1:0.0: Input extension successfully initialized [ 95.059217][ T4772] fuse: Bad value for 'fd' [ 95.079990][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.096884][ T1110] usb 2-1: USB disconnect, device number 4 [ 95.106330][ T4297] em28xx 1-1:0.0: Closing input extension [ 95.177486][ T4297] em28xx 1-1:0.0: Freeing device [ 95.182936][ T4773] binder: 4771:4773 ioctl 80105873 200000000140 returned -22 [ 95.237041][ T4773] binder: 4771:4773 unknown command 1074553620 [ 95.310968][ T4773] binder: 4771:4773 ioctl c0306201 200000000640 returned -22 [ 96.012511][ T4277] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.268209][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 96.387277][ T4277] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 96.415980][ T4277] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 96.441898][ T4277] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 96.546961][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.627142][ T4277] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 96.645634][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.677210][ T4277] usb 3-1: Product: syz [ 96.694654][ T4277] usb 3-1: Manufacturer: syz [ 96.710226][ T4277] usb 3-1: SerialNumber: syz [ 96.872544][ T4277] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 96.896952][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 96.907335][ T4277] imon 3-1:155.0: unable to initialize intf0, err -19 [ 96.920379][ T4277] imon:imon_probe: failed to initialize context! [ 96.929622][ T4277] imon 3-1:155.0: unable to register, err -19 [ 97.393413][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.600399][ T1110] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.622430][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.635401][ T1110] usb 1-1: Product: syz [ 97.644833][ T1110] usb 1-1: Manufacturer: syz [ 97.654989][ T1110] usb 1-1: SerialNumber: syz [ 97.673587][ T1110] usb 1-1: config 0 descriptor?? [ 97.681175][ T4818] fuse: Bad value for 'fd' [ 97.707000][ T4237] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 97.718965][ T1110] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.737071][ T1110] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 97.793845][ T4819] binder: 4817:4819 ioctl 80105873 200000000140 returned -22 [ 97.815079][ T4819] binder: 4817:4819 unknown command 1074553620 [ 97.823166][ T4819] binder: 4817:4819 ioctl c0306201 200000000640 returned -22 [ 98.067013][ T4237] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 98.219082][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 98.237424][ T4237] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.301641][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.327506][ T4237] usb 2-1: Product: syz [ 98.331921][ T4237] usb 2-1: Manufacturer: syz [ 98.336558][ T4237] usb 2-1: SerialNumber: syz [ 98.372997][ T4277] usb 3-1: USB disconnect, device number 2 [ 98.379437][ T1110] em28xx 1-1:0.0: chip ID is em2874 [ 98.389979][ T4237] usb 2-1: config 0 descriptor?? [ 98.497615][ T4237] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 98.543913][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.661250][ T4231] usb 2-1: USB disconnect, device number 5 [ 98.747122][ T1110] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 98.759505][ T1110] em28xx 1-1:0.0: board has no eeprom [ 98.877097][ T1110] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 98.892983][ T1110] em28xx 1-1:0.0: dvb set to bulk mode. [ 98.916079][ T1110] usb 1-1: USB disconnect, device number 5 [ 98.927601][ T1110] em28xx 1-1:0.0: Disconnecting em28xx [ 98.955272][ T4231] em28xx 1-1:0.0: Binding DVB extension [ 99.026334][ T4231] em28xx 1-1:0.0: Registering input extension [ 99.162768][ T4231] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 99.180095][ T4231] Registered IR keymap rc-empty [ 99.212339][ T4231] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 99.240888][ T4231] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 99.282527][ T4231] em28xx 1-1:0.0: Input extension successfully initialized [ 99.340759][ T1110] em28xx 1-1:0.0: Closing input extension [ 99.392586][ T1110] em28xx 1-1:0.0: Freeing device [ 99.486948][ T4297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.866946][ T4297] usb 3-1: Using ep0 maxpacket: 8 [ 100.427075][ T4297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.558088][ T4297] usb 3-1: config 4 interface 0 has no altsetting 0 [ 100.589992][ T4863] fuse: Bad value for 'fd' [ 100.651535][ T4864] binder: 4862:4864 ioctl 80105873 200000000140 returned -22 [ 100.666636][ T4864] binder: 4862:4864 unknown command 1074553620 [ 100.705246][ T4864] binder: 4862:4864 ioctl c0306201 200000000640 returned -22 [ 100.867232][ T4297] usb 3-1: string descriptor 0 read error: -22 [ 100.876211][ T4297] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 100.895717][ T4297] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 100.959838][ T4297] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 100.991576][ T4297] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.017446][ T4297] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 101.035163][ T4297] usb 3-1: media controller created [ 101.066884][ T4235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.116494][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.161768][ T4839] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 101.217162][ T4297] zl10353_read_register: readreg error (reg=127, ret==0) [ 101.317802][ T4297] usb 3-1: USB disconnect, device number 3 [ 101.326950][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 101.477270][ T4235] usb 5-1: config 0 has no interfaces? [ 101.668405][ T4235] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.701479][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.724869][ T4235] usb 5-1: Product: syz [ 101.761305][ T4235] usb 5-1: Manufacturer: syz [ 101.766084][ T4235] usb 5-1: SerialNumber: syz [ 101.805810][ T4235] usb 5-1: config 0 descriptor?? [ 101.976953][ T4297] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 102.061875][ T4277] usb 5-1: USB disconnect, device number 6 [ 102.752356][ T4897] bridge0: port 1(bridge_slave_0) entered listening state [ 102.947113][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 102.994149][ T4904] fuse: Bad value for 'fd' [ 103.115852][ T4906] binder: 4902:4906 ioctl 80105873 200000000140 returned -22 [ 103.141081][ T4906] binder: 4902:4906 unknown command 1074553620 [ 103.147640][ T4297] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.171593][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.192467][ T4906] binder: 4902:4906 ioctl c0306201 200000000640 returned -22 [ 103.212208][ T4297] usb 2-1: Product: syz [ 103.216459][ T4297] usb 2-1: Manufacturer: syz [ 103.234040][ T4297] usb 2-1: SerialNumber: syz [ 103.247683][ T4297] usb 2-1: config 0 descriptor?? [ 103.329755][ T4297] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 103.370653][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.524032][ T4177] usb 2-1: USB disconnect, device number 6 [ 103.551358][ T4277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.977104][ T4277] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.999604][ T4277] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.053855][ T4277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.078313][ T4277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.101620][ T4277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.258489][ T4277] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.272267][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.298086][ T4277] usb 1-1: Product: syz [ 104.312825][ T4277] usb 1-1: Manufacturer: syz [ 104.379000][ T4277] cdc_wdm 1-1:1.0: skipping garbage [ 104.386920][ T4277] cdc_wdm 1-1:1.0: skipping garbage [ 104.438327][ T4277] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 104.445547][ T4277] cdc_wdm 1-1:1.0: Unknown control protocol [ 104.857109][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 105.966407][ T4956] fuse: Bad value for 'fd' [ 106.088034][ T4958] binder: 4955:4958 ioctl 80105873 200000000140 returned -22 [ 106.114387][ T4958] binder: 4955:4958 unknown command 1074553620 [ 106.131137][ T4958] binder: 4955:4958 ioctl c0306201 200000000640 returned -22 [ 106.208569][ T4235] usb 1-1: USB disconnect, device number 6 [ 106.477045][ T1110] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.686914][ T4235] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 106.847042][ T1110] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 107.048378][ T1110] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.063080][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.082112][ T1110] usb 4-1: Product: syz [ 107.092573][ T1110] usb 4-1: Manufacturer: syz [ 107.103450][ T1110] usb 4-1: SerialNumber: syz [ 107.137391][ T1110] usb 4-1: config 0 descriptor?? [ 107.142597][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.157664][ T4235] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.185384][ T4235] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.201825][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.223359][ T4235] usb 1-1: config 0 descriptor?? [ 107.260217][ T1110] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 107.282876][ T4235] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 107.294621][ T4235] dvb-usb: bulk message failed: -22 (3/0) [ 107.349986][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.374708][ T4235] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.427249][ T4235] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 107.451561][ T4235] usb 1-1: media controller created [ 107.469871][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.485379][ T4966] dvb-usb: bulk message failed: -22 (2/0) [ 107.507759][ T1110] usb 4-1: USB disconnect, device number 5 [ 107.582505][ T4235] dvb-usb: bulk message failed: -22 (6/0) [ 107.628647][ T4235] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.688226][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 107.847395][ T4235] dvb-usb: schedule remote query interval to 150 msecs. [ 107.886962][ T4235] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.936039][ T4235] usb 1-1: USB disconnect, device number 7 [ 108.103082][ T4235] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 109.269553][ T5007] fuse: Bad value for 'fd' [ 109.338741][ T5009] binder: 5006:5009 ioctl 80105873 200000000140 returned -22 [ 109.357483][ T5009] binder: 5006:5009 unknown command 1074553620 [ 109.386345][ T5009] binder: 5006:5009 ioctl c0306201 200000000640 returned -22 [ 109.897025][ T4277] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 110.592512][ T5040] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.858064][ T5056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'. [ 110.877180][ T4277] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 110.999188][ T5058] fuse: Bad value for 'fd' [ 111.098817][ T5059] binder: 5057:5059 ioctl 80105873 200000000140 returned -22 [ 111.117591][ T4277] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.135444][ T5059] binder: 5057:5059 unknown command 1074553620 [ 111.152082][ T5059] binder: 5057:5059 ioctl c0306201 200000000640 returned -22 [ 111.163166][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.196033][ T4277] usb 5-1: Product: syz [ 111.217032][ T4277] usb 5-1: Manufacturer: syz [ 111.240593][ T4277] usb 5-1: SerialNumber: syz [ 111.286974][ T4277] usb 5-1: config 0 descriptor?? [ 111.383821][ T4277] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 111.481325][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.543882][ T4236] usb 5-1: USB disconnect, device number 7 [ 111.787056][ T4277] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.066994][ T4277] usb 1-1: Using ep0 maxpacket: 16 [ 112.217063][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.917049][ T4277] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.950734][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.976914][ T4277] usb 1-1: Product: syz [ 112.981159][ T4277] usb 1-1: Manufacturer: syz [ 112.996088][ T4277] usb 1-1: SerialNumber: syz [ 113.009432][ T4277] usb 1-1: config 0 descriptor?? [ 113.080868][ T4277] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.118934][ T4277] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 113.559397][ T5100] fuse: Bad value for 'user_id' [ 113.737483][ T4277] em28xx 1-1:0.0: chip ID is em2874 [ 113.917077][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.137064][ T4277] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.155385][ T4277] em28xx 1-1:0.0: board has no eeprom [ 114.168300][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 114.276928][ T4277] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.284819][ T4277] em28xx 1-1:0.0: dvb set to bulk mode. [ 114.292631][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.333097][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.350324][ T4297] em28xx 1-1:0.0: Binding DVB extension [ 114.367011][ T4277] usb 1-1: USB disconnect, device number 8 [ 114.386028][ T4277] em28xx 1-1:0.0: Disconnecting em28xx [ 114.426754][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.443638][ T4297] em28xx 1-1:0.0: Registering input extension [ 114.480385][ T1110] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.541935][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.582725][ T4297] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 114.593473][ T4297] Registered IR keymap rc-empty [ 114.618474][ T4297] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 114.657177][ T1110] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.667704][ T4297] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 114.683242][ T1110] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.714708][ T1110] usb 3-1: Manufacturer: syz [ 114.736227][ T1110] usb 3-1: config 0 descriptor?? [ 114.743946][ T4297] em28xx 1-1:0.0: Input extension successfully initialized [ 114.765974][ T4277] em28xx 1-1:0.0: Closing input extension [ 114.800697][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.865095][ T4277] em28xx 1-1:0.0: Freeing device [ 114.939668][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.026133][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.139260][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.147059][ T1110] rc_core: IR keymap rc-hauppauge not found [ 115.171111][ T1110] Registered IR keymap rc-empty [ 115.187472][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.217050][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.247825][ T1110] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.297718][ T4277] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.313551][ T1110] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 115.356383][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.417031][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.453605][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.477069][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.507076][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.537022][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.567181][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.597188][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.627012][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.663803][ T1110] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.692347][ T1110] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.692375][ T1110] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.707885][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.039497][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 116.125650][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.125685][ T4277] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.125736][ T4277] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.125764][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.153947][ T4277] usb 1-1: config 0 descriptor?? [ 116.320497][ T1110] usb 3-1: USB disconnect, device number 4 [ 116.404775][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.422709][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.435470][ T5131] device bridge_slave_0 entered promiscuous mode [ 116.497403][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.511788][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.534826][ T5131] device bridge_slave_1 entered promiscuous mode [ 116.616521][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.633890][ T4277] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 116.673923][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.712560][ T4277] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.795223][ T5131] team0: Port device team_slave_0 added [ 116.806025][ T5131] team0: Port device team_slave_1 added [ 116.998421][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.005438][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.103313][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.205069][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.233119][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.282544][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.294541][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 117.542133][ T5131] device hsr_slave_0 entered promiscuous mode [ 117.565544][ T5131] device hsr_slave_1 entered promiscuous mode [ 117.591550][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.615894][ T5131] Cannot create hsr debugfs directory [ 117.836265][ T144] device hsr_slave_0 left promiscuous mode [ 117.873353][ T144] device hsr_slave_1 left promiscuous mode [ 117.891392][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.904871][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.932009][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.953478][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.966119][ T144] device bridge_slave_1 left promiscuous mode [ 118.002368][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.092027][ T144] device bridge_slave_0 left promiscuous mode [ 118.121314][ T5188] fuse: Bad value for 'fd' [ 118.124090][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.198563][ T5195] binder: 5187:5195 ioctl 80105873 200000000140 returned -22 [ 118.219227][ T144] device veth1_macvtap left promiscuous mode [ 118.225920][ T144] device veth0_macvtap left promiscuous mode [ 118.802454][ T4277] usb 1-1: USB disconnect, device number 9 [ 119.058576][ T144] team0 (unregistering): Port device team_slave_1 removed [ 119.099836][ T144] team0 (unregistering): Port device team_slave_0 removed [ 119.164457][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.211266][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.366987][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 119.621304][ T144] bond0 (unregistering): Released all slaves [ 120.017095][ T1110] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.196785][ T5131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.248830][ T5131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.276981][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 120.303514][ T5131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.373950][ T5131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.397034][ T1110] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 120.444796][ T5243] fuse: Bad value for 'fd' [ 120.521678][ T5248] binder: 5242:5248 ioctl 80105873 200000000140 returned -22 [ 120.557426][ T5248] binder: 5242:5248 unknown command 1074553620 [ 120.577167][ T1110] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.600028][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.600110][ T5248] binder: 5242:5248 ioctl c0306201 200000000640 returned -22 [ 120.616059][ T1110] usb 1-1: Product: syz [ 120.642938][ T1110] usb 1-1: Manufacturer: syz [ 120.692788][ T1110] usb 1-1: SerialNumber: syz [ 120.751108][ T1110] usb 1-1: config 0 descriptor?? [ 120.762024][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.829700][ T1110] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.841840][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.863118][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.879006][ T1110] usb 1-1: setting power ON [ 120.902074][ T1110] dvb-usb: bulk message failed: -22 (2/0) [ 120.926260][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.961136][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.993847][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.018332][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.067274][ T1110] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 121.108361][ T1110] usb 1-1: media controller created [ 121.126517][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.133720][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.232438][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.258708][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.269189][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.440254][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.715482][ T1110] usb 1-1: selecting invalid altsetting 6 [ 121.985575][ T1110] usb 1-1: digital interface selection failed (-22) [ 122.004408][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.011570][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.054907][ T1110] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 122.069592][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.105600][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.114180][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 122.137350][ T1110] usb 1-1: setting power OFF [ 122.147897][ T1110] dvb-usb: bulk message failed: -22 (2/0) [ 122.187239][ T5276] device syzkaller0 entered promiscuous mode [ 122.197916][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.207016][ T1110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 122.237913][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.259787][ T1110] (NULL device *): no alternate interface [ 122.282331][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.303180][ T5279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.326023][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.356284][ T1110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 122.419110][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.427886][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.493874][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.512095][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.530745][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.550873][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.623339][ T1110] usb 1-1: USB disconnect, device number 10 [ 122.646910][ T4236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.946951][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 122.997610][ T4236] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 123.065517][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.079981][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.084420][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.106516][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.197136][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.300521][ T5306] fuse: Bad value for 'fd' [ 123.327342][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.390227][ T5310] binder: 5305:5310 ioctl 80105873 200000000140 returned -22 [ 123.409004][ T5310] binder: 5305:5310 unknown command 1074553620 [ 123.438519][ T5310] binder: 5305:5310 ioctl c0306201 200000000640 returned -22 [ 123.457274][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.567290][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.687242][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.807320][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.848342][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.880294][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.917295][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.018511][ T5131] device veth0_vlan entered promiscuous mode [ 124.047195][ T4236] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 124.056711][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 124.163126][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.171419][ T4177] Bluetooth: hci2: command 0x0419 tx timeout [ 124.186047][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.204224][ T4236] usb 2-1: SerialNumber: syz [ 124.674077][ T4236] usb 2-1: config 0 descriptor?? [ 124.719984][ T4236] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 124.791246][ T5131] device veth1_vlan entered promiscuous mode [ 124.822485][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.866997][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.911339][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.943756][ T5279] netlink: 14 bytes leftover after parsing attributes in process `syz.1.317'. [ 125.113409][ T5279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.187378][ T5279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.280028][ T5279] bond0 (unregistering): Released all slaves [ 125.458195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.474820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.530994][ T5131] device veth0_macvtap entered promiscuous mode [ 125.565511][ T5131] device veth1_macvtap entered promiscuous mode [ 125.719166][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.802882][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.836988][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.885962][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.929092][ T5359] mmap: syz.0.329 (5359) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.977479][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.198602][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.243891][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.288144][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.318103][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.343100][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.351735][ T3545] bcm5974 2-1:0.0: could not read from device [ 126.363984][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.387775][ T4236] usb 2-1: USB disconnect, device number 7 [ 126.405541][ T3545] bcm5974 2-1:0.0: could not read from device [ 126.428884][ T3545] bcm5974 2-1:0.0: could not read from device [ 126.438615][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.488046][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.531572][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.574306][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.617932][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.676909][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.722681][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.827601][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.855822][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.010366][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.035190][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.067344][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.084778][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.120666][ T5131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.171491][ T5131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.204059][ T5131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.229189][ T5370] fuse: Bad value for 'fd' [ 127.245211][ T5131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.302038][ T5371] binder: 5369:5371 ioctl 80105873 200000000140 returned -22 [ 127.360099][ T5372] binder: 5369:5372 unknown command 1074553620 [ 127.398498][ T5372] binder: 5369:5372 ioctl c0306201 200000000640 returned -22 [ 127.450564][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.463065][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.502366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.597406][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.623881][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.688258][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.774175][ T5379] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 128.028833][ T5391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.339'. [ 129.789394][ T5434] fuse: Bad value for 'fd' [ 129.888750][ T5437] binder: 5431:5437 unknown command 1074553620 [ 129.895015][ T5437] binder: 5431:5437 ioctl c0306201 200000000640 returned -22 [ 131.665044][ T5497] fuse: Bad value for 'fd' [ 131.743758][ T5503] binder: 5495:5503 unknown command 1074553620 [ 131.771657][ T5503] binder: 5495:5503 ioctl c0306201 200000000640 returned -22 [ 132.730138][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736567][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.776932][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.207615][ T21] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.244530][ T21] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.291111][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.335237][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.427380][ T5530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.765041][ T5561] fuse: Bad value for 'fd' [ 133.892167][ T5565] fuse: Bad value for 'fd' [ 133.982878][ T5571] binder: 5562:5571 unknown command 1074553620 [ 134.000740][ T5571] binder: 5562:5571 ioctl c0306201 200000000640 returned -22 [ 134.070083][ T5568] device syzkaller0 entered promiscuous mode [ 134.272050][ T5578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.387'. [ 135.230964][ T4231] usb 5-1: USB disconnect, device number 8 [ 136.189064][ T5628] fuse: Bad value for 'fd' [ 136.252724][ T5631] binder: 5627:5631 ioctl 80105873 200000000140 returned -22 [ 136.277552][ T5631] binder: 5627:5631 unknown command 1074553620 [ 136.327277][ T5631] binder: 5627:5631 ioctl c0306201 200000000640 returned -22 [ 136.995069][ T5641] ======================================================= [ 136.995069][ T5641] WARNING: The mand mount option has been deprecated and [ 136.995069][ T5641] and is ignored by this kernel. Remove the mand [ 136.995069][ T5641] option from the mount to silence this warning. [ 136.995069][ T5641] ======================================================= [ 137.385474][ T5654] device syzkaller0 entered promiscuous mode [ 137.506894][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.516225][ T5659] device batadv_slave_1 entered promiscuous mode [ 138.195214][ T5671] fuse: Bad value for 'fd' [ 138.272300][ T5674] binder: 5670:5674 ioctl 80105873 200000000140 returned -22 [ 138.295035][ T5674] binder: 5670:5674 unknown command 1074553620 [ 138.301664][ T5674] binder: 5670:5674 ioctl c0306201 200000000640 returned -22 [ 138.679276][ T5677] team0 (unregistering): Port device team_slave_0 removed [ 138.734354][ T5677] team0 (unregistering): Failed to send options change via netlink (err -105) [ 138.757982][ T5677] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 138.830375][ T5677] team0 (unregistering): Port device team_slave_1 removed [ 139.491672][ T5695] device syzkaller0 entered promiscuous mode [ 139.858864][ T5708] fuse: Bad value for 'fd' [ 139.982357][ T5711] binder: 5707:5711 ioctl 80105873 200000000140 returned -22 [ 140.023052][ T5711] binder: 5707:5711 unknown command 1074553620 [ 140.029983][ T4231] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.049449][ T5711] binder: 5707:5711 ioctl c0306201 200000000640 returned -22 [ 140.273798][ T5722] netlink: 68 bytes leftover after parsing attributes in process `syz.2.434'. [ 140.283003][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 140.567122][ T4231] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 140.587603][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.630563][ T4231] usb 5-1: Product: syz [ 140.652236][ T4231] usb 5-1: Manufacturer: syz [ 140.679561][ T4231] usb 5-1: SerialNumber: syz [ 140.706341][ T4231] usb 5-1: config 0 descriptor?? [ 140.765057][ T4231] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 141.142789][ T5745] device syzkaller0 entered promiscuous mode [ 142.436963][ T4231] gspca_sonixj: reg_w1 err -110 [ 142.492203][ T5771] fuse: Bad value for 'fd' [ 142.497068][ T4231] sonixj: probe of 5-1:0.0 failed with error -110 [ 142.569330][ T5779] binder: 5769:5779 ioctl 80105873 200000000140 returned -22 [ 142.592089][ T5779] binder: 5769:5779 unknown command 1074553620 [ 142.622481][ T5779] binder: 5769:5779 ioctl c0306201 200000000640 returned -22 [ 142.809061][ T4236] usb 5-1: USB disconnect, device number 9 [ 144.395108][ T5826] fuse: Bad value for 'fd' [ 144.470568][ T5830] binder: 5825:5830 ioctl 80105873 200000000140 returned -22 [ 144.503444][ T5830] binder: 5825:5830 unknown command 1074553620 [ 144.540494][ T5830] binder: 5825:5830 ioctl c0306201 200000000640 returned -22 [ 144.951323][ T5842] device syzkaller0 entered promiscuous mode [ 146.285435][ T5890] fuse: Bad value for 'fd' [ 146.385298][ T5896] binder: 5886:5896 ioctl 80105873 200000000140 returned -22 [ 146.405018][ T5896] binder: 5886:5896 unknown command 1074553620 [ 146.424966][ T5896] binder: 5886:5896 ioctl c0306201 200000000640 returned -22 [ 146.439070][ T5895] device syzkaller0 entered promiscuous mode [ 148.367377][ T5949] device syzkaller0 entered promiscuous mode [ 148.737126][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.998417][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 149.137241][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 149.211807][ T5979] validate_nla: 44 callbacks suppressed [ 149.211821][ T5979] netlink: 'syz.2.508': attribute type 22 has an invalid length. [ 149.357558][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.380950][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.433100][ T23] usb 2-1: Product: syz [ 149.451274][ T23] usb 2-1: Manufacturer: syz [ 149.473924][ T23] usb 2-1: SerialNumber: syz [ 149.515163][ T23] usb 2-1: config 0 descriptor?? [ 149.599462][ T23] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.654514][ T23] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 150.249569][ T23] em28xx 2-1:0.0: chip ID is em2874 [ 150.657414][ T23] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 150.675249][ T23] em28xx 2-1:0.0: board has no eeprom [ 150.806957][ T23] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 150.825067][ T23] em28xx 2-1:0.0: dvb set to bulk mode. [ 150.859071][ T21] em28xx 2-1:0.0: Binding DVB extension [ 150.892077][ T23] usb 2-1: USB disconnect, device number 8 [ 150.937698][ T23] em28xx 2-1:0.0: Disconnecting em28xx [ 151.096293][ T21] em28xx 2-1:0.0: Registering input extension [ 151.307111][ T21] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 151.315283][ T21] Registered IR keymap rc-empty [ 151.375339][ T21] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 151.464143][ T21] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 151.580687][ T21] em28xx 2-1:0.0: Input extension successfully initialized [ 151.650555][ T23] em28xx 2-1:0.0: Closing input extension [ 151.735314][ T23] em28xx 2-1:0.0: Freeing device [ 152.128329][ T6059] syz.0.528 uses obsolete (PF_INET,SOCK_PACKET) [ 152.858027][ T6087] binder: 6086:6087 unknown command 1074291477 [ 152.894901][ T6087] binder: 6086:6087 ioctl c0306201 200000000900 returned -22 [ 153.318558][ T6102] page:ffffea0001613880 refcount:4 mapcount:1 mapping:ffff88807a57f978 index:0x0 pfn:0x584e2 [ 153.329390][ T6102] memcg:ffff88807780c000 [ 153.333670][ T6102] aops:shmem_aops ino:ac [ 153.337977][ T6102] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 153.347831][ T6102] raw: 00fff00000080015 ffffea00016e19c8 ffffea0001508f08 ffff88807a57f978 [ 153.356458][ T6102] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807780c000 [ 153.365078][ T6102] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 153.372145][ T6102] page_owner tracks the page as allocated [ 153.377892][ T6102] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6103, ts 153296480887, free_ts 153281382752 [ 153.392696][ T6102] get_page_from_freelist+0x1bbd/0x1ca0 [ 153.398299][ T6102] __alloc_pages+0x1ee/0x480 [ 153.402928][ T6102] alloc_pages_vma+0x393/0x7c0 [ 153.407729][ T6102] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 153.413409][ T6102] shmem_getpage_gfp+0x14f4/0x2d40 [ 153.418561][ T6102] shmem_read_mapping_page_gfp+0x96/0x100 [ 153.424323][ T6102] udmabuf_create+0x895/0x1570 [ 153.429134][ T6102] udmabuf_ioctl+0x1f3/0x300 [ 153.433771][ T6102] __se_sys_ioctl+0xfa/0x170 [ 153.438394][ T6102] do_syscall_64+0x4c/0xa0 [ 153.442841][ T6102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.448764][ T6102] page last free stack trace: [ 153.453455][ T6102] free_unref_page_prepare+0x637/0x6c0 [ 153.458951][ T6102] free_unref_page_list+0x119/0x820 [ 153.464189][ T6102] release_pages+0x186c/0x1be0 [ 153.468995][ T6102] tlb_finish_mmu+0x1b4/0x370 [ 153.473710][ T6102] exit_mmap+0x3d0/0x640 [ 153.477993][ T6102] __mmput+0x115/0x3b0 [ 153.482091][ T6102] exit_mm+0x5f7/0x770 [ 153.486205][ T6102] do_exit+0x5a9/0x20c0 [ 153.490393][ T6102] do_group_exit+0x12e/0x300 [ 153.495012][ T6102] __x64_sys_exit_group+0x3b/0x40 [ 153.500075][ T6102] do_syscall_64+0x4c/0xa0 [ 153.504527][ T6102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.510584][ T6102] ------------[ cut here ]------------ [ 153.516064][ T6102] kernel BUG at mm/filemap.c:166! [ 153.521157][ T6102] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 153.527267][ T6102] CPU: 0 PID: 6102 Comm: syz.1.538 Not tainted syzkaller #0 [ 153.534582][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.544679][ T6102] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 153.551147][ T6102] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 153.570791][ T6102] RSP: 0018:ffffc9000347f688 EFLAGS: 00010046 [ 153.576921][ T6102] RAX: c61adfb6bed27100 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.584942][ T6102] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200068fec4 [ 153.593105][ T6102] RBP: 1ffffd40002c2711 R08: ffff8880b902795b R09: fffff5200068fe80 [ 153.601129][ T6102] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea0001613880 [ 153.609156][ T6102] R13: dffffc0000000000 R14: ffffea0001613880 R15: ffffea0001613888 [ 153.617366][ T6102] FS: 0000555592783500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 153.626336][ T6102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.632954][ T6102] CR2: 0000200000000240 CR3: 0000000026c6f000 CR4: 00000000003506f0 [ 153.640964][ T6102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.648964][ T6102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.656967][ T6102] Call Trace: [ 153.660280][ T6102] [ 153.663250][ T6102] __delete_from_page_cache+0xbe/0x6d0 [ 153.668754][ T6102] ? _raw_spin_lock_irq+0x86/0xf0 [ 153.673813][ T6102] ? lockdep_hardirqs_off+0x70/0x100 [ 153.679298][ T6102] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 153.686373][ T6102] ? _raw_spin_lock_irq+0xb7/0xf0 [ 153.691440][ T6102] ? _raw_spin_lock_irqsave+0x100/0x100 [ 153.697027][ T6102] ? page_mapping+0x30e/0x440 [ 153.701740][ T6102] delete_from_page_cache+0x121/0x190 [ 153.707158][ T6102] truncate_inode_page+0x8d/0xb0 [ 153.712166][ T6102] shmem_undo_range+0x53c/0x1930 [ 153.717148][ T6102] ? __lock_acquire+0x13bc/0x7d10 [ 153.722230][ T6102] ? shmem_truncate_range+0xa0/0xa0 [ 153.727477][ T6102] ? do_raw_spin_lock+0x128/0x2f0 [ 153.732533][ T6102] ? __rwlock_init+0x140/0x140 [ 153.737340][ T6102] shmem_evict_inode+0x220/0xa40 [ 153.742319][ T6102] ? inode_wait_for_writeback+0x1df/0x220 [ 153.748098][ T6102] ? shmem_free_in_core_inode+0xb0/0xb0 [ 153.753682][ T6102] ? do_raw_spin_lock+0x128/0x2f0 [ 153.758747][ T6102] ? bit_waitqueue+0x30/0x30 [ 153.763385][ T6102] ? do_raw_spin_unlock+0x11d/0x230 [ 153.768620][ T6102] ? shmem_free_in_core_inode+0xb0/0xb0 [ 153.774210][ T6102] evict+0x4c9/0x8d0 [ 153.778161][ T6102] ? proc_nr_inodes+0x320/0x320 [ 153.783114][ T6102] ? do_raw_spin_unlock+0x11d/0x230 [ 153.788351][ T6102] ? _raw_spin_unlock+0x24/0x40 [ 153.793244][ T6102] __dentry_kill+0x431/0x650 [ 153.797878][ T6102] dentry_kill+0xb8/0x290 [ 153.802256][ T6102] dput+0xd8/0x1a0 [ 153.806016][ T6102] __fput+0x5ee/0x930 [ 153.810048][ T6102] task_work_run+0x125/0x1a0 [ 153.814681][ T6102] exit_to_user_mode_loop+0x10f/0x130 [ 153.820094][ T6102] exit_to_user_mode_prepare+0xee/0x180 [ 153.825683][ T6102] syscall_exit_to_user_mode+0x16/0x40 [ 153.831214][ T6102] do_syscall_64+0x58/0xa0 [ 153.835669][ T6102] ? clear_bhb_loop+0x30/0x80 [ 153.840387][ T6102] ? clear_bhb_loop+0x30/0x80 [ 153.845106][ T6102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.851052][ T6102] RIP: 0033:0x7f7a3a1ffe59 [ 153.855525][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.875166][ T6102] RSP: 002b:00007ffdf296da78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 153.883632][ T6102] RAX: 0000000000000000 RBX: 00007ffdf296db60 RCX: 00007f7a3a1ffe59 [ 153.891640][ T6102] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 153.899646][ T6102] RBP: 0000000000025698 R08: 0000000000000001 R09: 0000000000000000 [ 153.907649][ T6102] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007ffdf296dba0 [ 153.915663][ T6102] R13: 00007f7a3a478fac R14: 00000000000256f3 R15: 00007f7a3a478fa0 [ 153.923680][ T6102] [ 153.926742][ T6102] Modules linked in: [ 153.930692][ T6102] ---[ end trace cfdea61e56d176e0 ]--- [ 153.936178][ T6102] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 153.942635][ T6102] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 153.962270][ T6102] RSP: 0018:ffffc9000347f688 EFLAGS: 00010046 [ 153.968382][ T6102] RAX: c61adfb6bed27100 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.976396][ T6102] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200068fec4 [ 153.984408][ T6102] RBP: 1ffffd40002c2711 R08: ffff8880b902795b R09: fffff5200068fe80 [ 153.992418][ T6102] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea0001613880 [ 154.000424][ T6102] R13: dffffc0000000000 R14: ffffea0001613880 R15: ffffea0001613888 [ 154.008430][ T6102] FS: 0000555592783500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 154.017402][ T6102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.024024][ T6102] CR2: 0000200000000240 CR3: 0000000026c6f000 CR4: 00000000003506f0 [ 154.032039][ T6102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.040040][ T6102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.048068][ T6102] Kernel panic - not syncing: Fatal exception [ 154.054424][ T6102] Kernel Offset: disabled [ 154.058814][ T6102] Rebooting in 86400 seconds..