last executing test programs: 2m37.057774405s ago: executing program 4 (id=503): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002200010125bd7000fddbdf25022080070c00000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r6}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2m36.137375377s ago: executing program 4 (id=507): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4004000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a0001"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 2m35.013496664s ago: executing program 4 (id=511): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrlimit(0x3, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 2m33.862318215s ago: executing program 4 (id=515): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000d, 0x10010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r2}, 0x18) writev(r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r4, 0x0, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x1, "000000000039361e97000000001b0200", 0x43564548}) 2m32.052842086s ago: executing program 4 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f000001b000)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000085) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m31.168035416s ago: executing program 4 (id=520): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 2m18.793246894s ago: executing program 1 (id=544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) 2m17.870042046s ago: executing program 1 (id=546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000380)=[@request_death], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 2m16.829806657s ago: executing program 1 (id=548): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x11080}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r6 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f00008ec000/0x1000)=nil, 0x1000, 0x2000003, 0x97052, r6, 0xfffff000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0x0}, 0x0, 0x25}, 0xa0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) unshare(0x8000000) 2m16.217807985s ago: executing program 1 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xffffc017, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f6"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2m15.819908466s ago: executing program 32 (id=520): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 2m15.205306774s ago: executing program 1 (id=552): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x1c, 0x0, &(0x7f0000000400)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008000000"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af0ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m14.464095082s ago: executing program 1 (id=555): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="dd83d75a172af83b95b08fe68860b1c3e4ee11eb83eec1b76a8688bdb9d69b1d4f16ca31f8f59cd9cc45014508600b16fc6f9c26656771d3b55b56f369cda24fed6e560ec64d1f5152c18906fbc9", 0x4e}], 0x1}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3d6fc80, 0x380, 0x0}) 1m59.288936989s ago: executing program 33 (id=555): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="dd83d75a172af83b95b08fe68860b1c3e4ee11eb83eec1b76a8688bdb9d69b1d4f16ca31f8f59cd9cc45014508600b16fc6f9c26656771d3b55b56f369cda24fed6e560ec64d1f5152c18906fbc9", 0x4e}], 0x1}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3d6fc80, 0x380, 0x0}) 11.76961991s ago: executing program 5 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10.684864445s ago: executing program 5 (id=847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 10.399500347s ago: executing program 5 (id=851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332e6fe2f7726c53d86149a16c217605187d90d608d611fca8d", 0x27}], 0x2) 9.694558102s ago: executing program 5 (id=854): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x11080}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r6 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f00008ec000/0x1000)=nil, 0x1000, 0x2000003, 0x97052, r6, 0xfffff000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0x0}, 0x0, 0x25}, 0xa0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) unshare(0x8000000) 9.34287211s ago: executing program 6 (id=856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) readahead(0xffffffffffffffff, 0x7, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000001340)={0x15, 0x1, 0x2, "ff3a00d10052d0002000ffc800001c000000efff00", 0x32525942}) 7.901437072s ago: executing program 3 (id=863): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000640)=ANY=[]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x5}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 7.41883425s ago: executing program 5 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat(0xffffffffffffffff, 0x0, 0x1b1600, 0x0) 7.348949995s ago: executing program 2 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffff"], 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7.008183992s ago: executing program 2 (id=869): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mknod(0x0, 0x6000, 0x77b) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 5.988182772s ago: executing program 6 (id=870): recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000006180)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/235, 0xeb}], 0x3}, 0x1}], 0x1, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.948148705s ago: executing program 0 (id=871): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.944913965s ago: executing program 3 (id=872): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.900328279s ago: executing program 2 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5.708118444s ago: executing program 6 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x200000000000009}, 0x18) syz_clone(0x4804080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.696626995s ago: executing program 0 (id=875): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x1000, "a3a1b56a4c84226a928a751f1cb50b3e6421ca43d00c7441b04e9026e3dbaf07", 0x80, 0x8}) 5.008830479s ago: executing program 3 (id=876): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r6 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f00008ec000/0x1000)=nil, 0x1000, 0x2000003, 0x97052, r6, 0xfffff000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0x0}, 0x0, 0x25}, 0xa0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) unshare(0x8000000) 4.9876537s ago: executing program 2 (id=877): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x4, &(0x7f0000000240)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x401, @loopback, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x7, 0x2000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 4.900062697s ago: executing program 0 (id=878): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpgrp(r2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x111000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.829642323s ago: executing program 5 (id=879): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r2, 0x0, 0xc010) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x2fff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r7, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xfa, 0x0, 0xa4}, {0x9, 0x80, 0x6, 0xf}]}, 0x6f2f9a4d14f397c7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) shutdown(r0, 0x1) 3.688563342s ago: executing program 3 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.536084054s ago: executing program 6 (id=881): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 3.535792943s ago: executing program 0 (id=882): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r5, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 3.46029199s ago: executing program 6 (id=883): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x8, 0x800) r4 = fanotify_init(0x200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x380, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x334, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1872d826626968b73a849aae5d589e2685ef573d06ed67a39441e0c0e4599f00"}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3099ace9f33b89487dd6902e2affad7fcfdf1fa9cd361539fd39689b86522f04"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}]}, {0x4}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}]}]}, 0x380}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.978956476s ago: executing program 0 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x9, 0x4, 0x1c, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x3, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x7, 0x7c, [@multicast2]}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x8000) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c850) 1.978805545s ago: executing program 3 (id=885): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.978543285s ago: executing program 6 (id=886): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.853331766s ago: executing program 2 (id=887): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/cpu/#/msr\x00', 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = eventfd2(0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000480)) read$eventfd(r3, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ca1cb0bfeeb78abbc118cd5560ba0000000086dd60122d9200083a"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() 1.548513549s ago: executing program 3 (id=888): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002200010125bd7000fddbdf25022080070c00000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) 629.934591ms ago: executing program 0 (id=889): socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x4f, &(0x7f0000000380)={@empty, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x5c, 0x0, {0x7, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0x3, 0x4e}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xa}, 0x4}) 0s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) socket$kcm(0xa, 0x3, 0x11) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0500000000000200000006000000080061b2", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x16, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYBLOB="050000000000fbdbdf250f0000000f85edb9063c11212c10edbd77fff90dd902dfdc186745f2d5364ae4112785f1a747df92a8a1e8f8ab1bc9f87c2cf7d86354afe9f9cabe69072d0971d0b0cf35db0061a3a043000000aa2cb5d4c2e245ea61bb0028af2abec24647f805d8d54e031a6d6cc41641fe43b86593239e2a"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4801) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES32=r5], 0x14}, 0x1, 0x0, 0x0, 0x40400c3}, 0x8041) kernel console output (not intermixed with test programs): er on device bond0 [ 55.348301][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.357190][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.365507][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.372589][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.382343][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.391307][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.402033][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.410678][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.425906][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.437657][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.456480][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.465622][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.474775][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.504941][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.538125][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.547452][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.556247][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.567570][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.576112][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.585027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.593465][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.603392][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.611336][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.619471][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.629885][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.639442][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.658908][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.672717][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.686987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.696412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.711781][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.718928][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.728090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.736941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.745810][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.752997][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.761310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.772972][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.792236][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.810859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.826278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.834859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.845026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.855656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.894277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.904356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.913874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.922815][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.929978][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.938855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.949596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.958219][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.965255][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.973161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.982428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.992395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.001533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.010402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.019149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.028578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.065595][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.078066][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.094607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.102405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.111278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.122443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.131485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.140563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.149072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.164812][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.179642][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.193934][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.221211][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.232772][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.244271][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.254277][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.262943][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.272428][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.286227][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.300143][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.314811][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.348134][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.355323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.366848][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 56.376135][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 56.387194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.417334][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 56.423779][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 56.435978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.447013][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 56.457555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.471988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.480582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.490635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.499605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.509148][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.516200][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.523997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.532961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.541466][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.548544][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.583311][ T4189] device veth0_vlan entered promiscuous mode [ 56.592928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.602102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.611150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.620626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.630684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.640138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.649671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.659616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.669914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.678677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.691500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.701120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.711785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.719704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.734875][ T4189] device veth1_vlan entered promiscuous mode [ 56.758686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.767703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.776030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.790975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.799881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.811729][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.840016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.855803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.865906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.879604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.888050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.896363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.926338][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.937493][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.945493][ T4181] device veth0_vlan entered promiscuous mode [ 56.954268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.969059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.988492][ T4189] device veth0_macvtap entered promiscuous mode [ 57.011615][ T4181] device veth1_vlan entered promiscuous mode [ 57.027859][ T4189] device veth1_macvtap entered promiscuous mode [ 57.073357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.082875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.102640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.113007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.122251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.131747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.155817][ T4181] device veth0_macvtap entered promiscuous mode [ 57.167697][ T4181] device veth1_macvtap entered promiscuous mode [ 57.177187][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.189405][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.196884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.205403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.214317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.222855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.232015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.241125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.249955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.259086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.275319][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.293976][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.306365][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.329155][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.338410][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.347959][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.357636][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.368123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.377360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.390555][ T4182] device veth0_vlan entered promiscuous mode [ 57.416118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.424608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.435608][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.447629][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.458812][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.479510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.488846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.496492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.505580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.516054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.523864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.531581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.540661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.552222][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.562339][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.571337][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.580306][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.603404][ T4182] device veth1_vlan entered promiscuous mode [ 57.615240][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.675081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.684685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.693588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.703807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.715287][ T4184] device veth0_vlan entered promiscuous mode [ 57.733327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.743564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.781319][ T4184] device veth1_vlan entered promiscuous mode [ 57.793357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.831222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.841775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.851084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.860014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.871551][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.883354][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.889691][ T4182] device veth0_macvtap entered promiscuous mode [ 57.923986][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.932877][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.957156][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.966829][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.981803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.992708][ T4182] device veth1_macvtap entered promiscuous mode [ 58.009830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.018864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.028483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.049715][ T4184] device veth0_macvtap entered promiscuous mode [ 58.058908][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.066963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.067578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.074575][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.092276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.101275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.111135][ T4188] device veth0_vlan entered promiscuous mode [ 58.126137][ T4184] device veth1_macvtap entered promiscuous mode [ 58.136557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.144798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.152965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.176211][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.188379][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.193111][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.196321][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.212243][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.224746][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.238385][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.255177][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.279289][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.290093][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.300832][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.313712][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.324411][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.337418][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.353791][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.364624][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.375768][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.390847][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.402036][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.410742][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.418994][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.428354][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.438431][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.438462][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 58.447792][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.458180][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 58.461715][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.466532][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 58.481317][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.493121][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.507555][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 58.512617][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.513849][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 58.524320][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.540522][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.553551][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.564560][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.585990][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.603987][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.614362][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.625129][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633908][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.645105][ T4188] device veth1_vlan entered promiscuous mode [ 58.660302][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.670314][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.685148][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.729038][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.741811][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.761727][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.773856][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.960845][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.985227][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.145159][ T4296] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 59.145159][ T4296] The task syz.0.1 (4296) triggered the difference, watch for misbehavior. [ 59.504531][ T4188] device veth0_macvtap entered promiscuous mode [ 59.513415][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.524247][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.528384][ T1110] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.542118][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.551471][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.559768][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.567971][ T1110] usb 4-1: Product: syz [ 59.568836][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.597849][ T4188] device veth1_macvtap entered promiscuous mode [ 59.612236][ T1110] usb 4-1: Manufacturer: syz [ 59.617267][ T1110] usb 4-1: SerialNumber: syz [ 59.633207][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.660745][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.669318][ T1110] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.701248][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.720336][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.737082][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.745096][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.764930][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.781116][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.792196][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.803130][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.816125][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.827256][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.849806][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.860753][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.874009][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.882503][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.893042][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.902083][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.912708][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.944361][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.949834][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.963286][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.966530][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.978769][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.991707][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.001853][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.012589][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.023072][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.035184][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.048509][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.059782][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.068207][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.078813][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.099617][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.131891][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.141419][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151081][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.321867][ T1110] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.520243][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 60.534935][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 60.547401][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 60.597239][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 60.606813][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 60.900787][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.959090][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.998181][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.006831][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.051071][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.056099][ T4312] bridge0: port 3(gretap0) entered blocking state [ 61.072488][ T4312] bridge0: port 3(gretap0) entered disabled state [ 61.085520][ T4312] device gretap0 entered promiscuous mode [ 61.093466][ T26] audit: type=1400 audit(1765844934.905:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4311 comm="syz.4.7" [ 61.113592][ T4312] bridge0: port 3(gretap0) entered blocking state [ 61.120278][ T4312] bridge0: port 3(gretap0) entered forwarding state [ 61.178280][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.227087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.236088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.245064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.254069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.263082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.272188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.281196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.290192][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.299196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.308185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.800085][ T1110] usb 4-1: Service connection timeout for: 256 [ 62.806307][ T1110] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 62.912064][ T4289] usb 4-1: USB disconnect, device number 2 [ 62.949209][ T1110] ath9k_htc: Failed to initialize the device [ 62.988712][ T4289] usb 4-1: ath9k_htc: USB layer deinitialized [ 64.096405][ T4337] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12'. [ 66.309611][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 66.328329][ T4359] process 'syz.3.18' launched '/dev/fd/11' with NULL argv: empty string added [ 67.431266][ T26] audit: type=1326 audit(1765844940.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 68.996017][ T26] audit: type=1326 audit(1765844940.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.027054][ T26] audit: type=1326 audit(1765844940.595:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.049001][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.147117][ T26] audit: type=1326 audit(1765844940.595:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.309552][ T26] audit: type=1326 audit(1765844940.595:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.331522][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.344635][ T26] audit: type=1326 audit(1765844940.595:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.397132][ T26] audit: type=1326 audit(1765844940.595:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.421553][ T26] audit: type=1326 audit(1765844940.595:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.452292][ T26] audit: type=1326 audit(1765844940.595:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.565526][ T26] audit: type=1326 audit(1765844940.595:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 69.567895][ T4371] netlink: 'syz.4.22': attribute type 7 has an invalid length. [ 69.622894][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 71.242955][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250755][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.469820][ T4395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.520000][ T4396] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 3072 [ 75.274892][ T4427] comedi comedi1: pcm3724: I/O port conflict (0xffffffffffffffff,16) [ 76.511218][ T1335] cfg80211: failed to load regulatory.db [ 80.866691][ T1335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.266797][ T1335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.266823][ T1335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.346910][ T1335] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.346934][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.346946][ T1335] usb 1-1: SerialNumber: syz [ 81.650035][ T1335] usb 1-1: 0:2 : does not exist [ 82.148838][ T1335] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 83.112326][ T1335] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 83.376749][ T1335] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 83.456877][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.473832][ T4536] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.511753][ T4536] sp0: Synchronizing with TNC [ 83.687572][ T1335] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 83.967836][ T1335] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 84.087641][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.140335][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.166712][ T1110] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 84.196471][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.230408][ T1110] usb 3-1: config 0 descriptor?? [ 84.406840][ T1335] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 84.677516][ T1335] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 84.720906][ T1335] usb 1-1: USB disconnect, device number 2 [ 84.764097][ T1110] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 84.822084][ T1110] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 84.966843][ T1110] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 86.396634][ T1335] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.526833][ T1110] cp2112 0003:10C4:EA90.0001: error setting SMBus config [ 86.640901][ T1110] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 86.760765][ T1110] usb 3-1: USB disconnect, device number 2 [ 86.786874][ T1335] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 86.814978][ T1335] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 86.956626][ T1335] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 86.985530][ T1335] usb 1-1: config 220 has no interface number 2 [ 87.005373][ T1335] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.037805][ T1335] usb 1-1: config 220 interface 0 has no altsetting 0 [ 87.739095][ T1335] usb 1-1: config 220 interface 76 has no altsetting 0 [ 87.746062][ T1335] usb 1-1: config 220 interface 1 has no altsetting 0 [ 87.986720][ T1335] usb 1-1: string descriptor 0 read error: -71 [ 87.992981][ T1335] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 88.039119][ T4559] fido_id[4559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 88.064027][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.106872][ T1335] usb 1-1: can't set config #220, error -71 [ 88.229897][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.247159][ T1335] usb 1-1: USB disconnect, device number 3 [ 90.929579][ T4593] capability: warning: `syz.4.87' uses deprecated v2 capabilities in a way that may be insecure [ 91.307450][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.617860][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 91.733482][ T4608] tipc: Started in network mode [ 91.738713][ T4608] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.750978][ T4608] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 91.760530][ T4608] tipc: Enabled bearer , priority 10 [ 91.817099][ T21] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.470606][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.481635][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.491867][ T21] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.510760][ T21] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.520220][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.778153][ T4297] tipc: Node number set to 1 [ 93.521563][ T21] usb 4-1: GET_CAPABILITIES returned 0 [ 93.538519][ T21] usbtmc 4-1:16.0: can't read capabilities [ 93.906223][ T4569] usb 4-1: USB disconnect, device number 3 [ 94.476684][ T4637] Zero length message leads to an empty skb [ 97.723629][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 100.325787][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 100.325807][ T26] audit: type=1326 audit(1765844974.015:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 101.220064][ T26] audit: type=1326 audit(1765844974.025:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 102.034834][ T26] audit: type=1326 audit(1765844974.025:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 102.190660][ T26] audit: type=1326 audit(1765844974.035:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 102.418487][ T26] audit: type=1326 audit(1765844974.035:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 102.676874][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.914283][ T26] audit: type=1326 audit(1765844974.045:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 102.971961][ T26] audit: type=1326 audit(1765844974.045:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 103.056040][ T26] audit: type=1326 audit(1765844974.045:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 103.638521][ T26] audit: type=1326 audit(1765844974.045:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 103.718334][ T26] audit: type=1326 audit(1765844974.055:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 103.856735][ T13] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 103.980374][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.268429][ T13] usb 3-1: config 0 descriptor?? [ 104.546827][ T13] [drm] vendor descriptor length:26 data:06 5f 00 00 00 00 00 00 00 00 00 [ 104.575849][ T13] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 104.902055][ T13] [drm:udl_init] *ERROR* Selecting channel failed [ 104.952774][ T13] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 104.988801][ T13] [drm] Initialized udl on minor 2 [ 105.036922][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.120161][ T13] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 105.165800][ T13] usb 3-1: USB disconnect, device number 3 [ 105.188794][ T1335] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.317358][ T4239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.676788][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 105.896769][ T4239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.934960][ T1335] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.944553][ T1335] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 106.012091][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 106.041514][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.208424][ T4239] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 107.234048][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 107.311947][ T4239] usb 2-1: Product: syz [ 107.317665][ T4239] usb 2-1: Manufacturer: syz [ 107.329027][ T4239] usb 2-1: SerialNumber: syz [ 107.365231][ T4239] usb 2-1: config 0 descriptor?? [ 107.629109][ T4239] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 107.698877][ T4239] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 107.776941][ T4239] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 108.595461][ T4239] usb 2-1: USB disconnect, device number 2 [ 111.595921][ T4821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.146'. [ 111.676803][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.131194][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 114.952402][ T13] usb 2-1: unable to read config index 0 descriptor/all [ 115.156919][ T13] usb 2-1: can't read configurations, error -71 [ 117.636712][ T4297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.106889][ T4297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.156725][ T4297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 118.203381][ T4297] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 118.233718][ T4297] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.263968][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.470377][ T4297] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 119.517925][ T4882] udevd[4882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.940239][ T4892] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 119.949716][ T4892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 120.721128][ T4902] syz.3.168 uses obsolete (PF_INET,SOCK_PACKET) [ 121.826837][ T4412] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.229154][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.240649][ T4412] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 122.256371][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.266293][ T4412] usb 2-1: config 0 descriptor?? [ 123.505311][ T4921] tipc: Started in network mode [ 123.532622][ T4921] tipc: Node identity b2b4300ad661, cluster identity 4711 [ 123.576763][ T4921] tipc: Enabled bearer , priority 0 [ 123.663264][ T4921] device syzkaller0 entered promiscuous mode [ 123.756185][ T4920] tipc: Resetting bearer [ 124.983566][ T4412] usbhid 2-1:0.0: can't add hid device: -71 [ 124.984671][ T4920] tipc: Disabling bearer [ 125.018672][ T4412] usbhid: probe of 2-1:0.0 failed with error -71 [ 125.034423][ T21] tipc: Node number set to 1691693066 [ 125.158155][ T4412] usb 2-1: USB disconnect, device number 5 [ 126.292783][ T4954] tmpfs: Unknown parameter 'usrquota' [ 127.037832][ T4239] usb 5-1: USB disconnect, device number 2 [ 127.170708][ T4412] Bluetooth: hci5: command 0x1003 tx timeout [ 127.178482][ T146] Bluetooth: hci5: sending frame failed (-49) [ 129.908436][ T4569] Bluetooth: hci5: command 0x1001 tx timeout [ 129.914561][ T146] Bluetooth: hci5: sending frame failed (-49) [ 131.106570][ T4983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 131.656771][ T4412] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.811840][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820181][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834932][ T4569] Bluetooth: hci5: command 0x1009 tx timeout [ 133.366944][ T4412] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.228679][ T4412] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 134.238881][ T4412] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 134.358286][ T4412] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.360385][ T1335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.368453][ T4412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.040073][ T5017] mmap: syz.2.202 (5017) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 135.106740][ T1335] usb 4-1: Using ep0 maxpacket: 16 [ 135.246872][ T1335] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 135.976980][ T4412] usb 5-1: can't set config #27, error -71 [ 135.991928][ T4412] usb 5-1: USB disconnect, device number 3 [ 136.067071][ T1335] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.085864][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.115135][ T1335] usb 4-1: Product: syz [ 136.128754][ T1335] usb 4-1: Manufacturer: syz [ 136.133421][ T1335] usb 4-1: SerialNumber: syz [ 136.202649][ T1335] usb 4-1: config 0 descriptor?? [ 136.273123][ T1335] usb 4-1: can't set config #0, error -71 [ 136.288233][ T1335] usb 4-1: USB disconnect, device number 4 [ 136.519517][ T151] Bluetooth: hci5: Frame reassembly failed (-84) [ 136.584893][ T151] Bluetooth: hci5: Frame reassembly failed (-84) [ 138.286857][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.548247][ T4194] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 139.366662][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 139.556695][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.647107][ T21] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 140.448173][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.491681][ T21] usb 4-1: Product: syz [ 140.522235][ T21] usb 4-1: Manufacturer: syz [ 140.546908][ T1108] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.575469][ T21] usb 4-1: SerialNumber: syz [ 140.606023][ T1108] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 140.723600][ T21] usb 4-1: config 0 descriptor?? [ 140.728794][ T1108] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 140.781472][ T1108] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.840344][ T21] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 140.876640][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.876749][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 141.138963][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.197314][ T21] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 141.206670][ T21] usb 4-1: media controller created [ 141.225736][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.306484][ T21] usb 4-1: selecting invalid altsetting 7 [ 141.316251][ T1108] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 141.332919][ T21] cxusb: set interface failed [ 141.344416][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 141.520737][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.759385][ T21] DVB: Unable to find symbol lgdt330x_attach() [ 142.765678][ T21] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 143.466682][ T21] rc_core: IR keymap rc-dvico-portable not found [ 143.474033][ T21] Registered IR keymap rc-empty [ 143.514014][ T21] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 143.549466][ T21] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 143.619991][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 143.627163][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 143.676790][ T21] usb 4-1: USB disconnect, device number 5 [ 143.877092][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 144.366488][ T1335] usb 1-1: USB disconnect, device number 4 [ 145.686662][ T1335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.096903][ T1335] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.123834][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.246938][ T1335] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.260571][ T1335] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.269628][ T1335] usb 1-1: Manufacturer: syz [ 146.294804][ T1335] usb 1-1: config 0 descriptor?? [ 146.506867][ T4238] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.526925][ T1335] rc_core: IR keymap rc-hauppauge not found [ 146.532983][ T1335] Registered IR keymap rc-empty [ 146.552883][ T1335] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.590176][ T1335] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 146.697780][ T1108] usb 1-1: USB disconnect, device number 5 [ 146.746847][ T4238] usb 3-1: Using ep0 maxpacket: 8 [ 146.866695][ T4238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.880295][ T4238] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 146.886635][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.891533][ T4238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 147.098162][ T4238] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 147.113235][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 147.146721][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 147.154791][ T4238] usb 3-1: Product: syz [ 147.154814][ T4238] usb 3-1: Manufacturer: syz [ 147.154828][ T4238] usb 3-1: SerialNumber: syz [ 147.306331][ T4238] usb 3-1: config 0 descriptor?? [ 147.306758][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.324326][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.338403][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.347640][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.370382][ T21] usb 4-1: config 0 descriptor?? [ 147.372428][ T4238] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 147.626711][ T4194] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 147.646485][ T4238] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 147.653684][ T4238] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 148.317898][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 148.395587][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 148.470290][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 148.494553][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 148.502009][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x3 [ 148.511980][ T21] microsoft 0003:045E:07DA.0002: item 0 0 0 8 parsing failed [ 148.519875][ T21] microsoft 0003:045E:07DA.0002: parse failed [ 148.525949][ T21] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 148.546507][ T21] usb 4-1: USB disconnect, device number 6 [ 148.775147][ T5152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.238'. [ 148.876723][ T4238] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.088958][ T21] usb 3-1: USB disconnect, device number 4 [ 150.162295][ T4238] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.056695][ T4238] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.096105][ T4238] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 151.920768][ T4238] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.931135][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.956132][ T5197] loop2: detected capacity change from 0 to 7 [ 154.032212][ T5197] Dev loop2: unable to read RDB block 7 [ 154.059372][ T5197] loop2: unable to read partition table [ 154.130490][ T5197] loop2: partition table beyond EOD, truncated [ 154.192660][ T5197] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.445540][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 155.995381][ T3560] Dev loop2: unable to read RDB block 7 [ 156.001409][ T3560] loop2: unable to read partition table [ 156.037239][ T3560] loop2: partition table beyond EOD, truncated [ 156.263728][ T4238] usb 2-1: can't set config #27, error -71 [ 156.300612][ T4238] usb 2-1: USB disconnect, device number 6 [ 156.649704][ T5228] misc userio: Invalid payload size [ 156.655701][ T5228] misc userio: No port type given on /dev/userio [ 157.378295][ T5243] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 158.792869][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 158.792888][ T26] audit: type=1804 audit(1765845031.785:92): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.268" name="bus" dev="ramfs" ino=36093 res=1 errno=0 [ 161.978502][ T5270] comedi comedi3: dmm32at: I/O port conflict (0x8,16) [ 164.006531][ C0] sched: RT throttling activated [ 164.006634][ T4569] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.406705][ T4569] usb 3-1: Using ep0 maxpacket: 16 [ 164.546936][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.623794][ T4569] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 164.688863][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.776143][ T4569] usb 3-1: config 0 descriptor?? [ 166.064716][ T4569] usbhid 3-1:0.0: can't add hid device: -71 [ 166.073714][ T4569] usbhid: probe of 3-1:0.0 failed with error -71 [ 166.090022][ T5323] ======================================================= [ 166.090022][ T5323] WARNING: The mand mount option has been deprecated and [ 166.090022][ T5323] and is ignored by this kernel. Remove the mand [ 166.090022][ T5323] option from the mount to silence this warning. [ 166.090022][ T5323] ======================================================= [ 166.124981][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.150487][ T4569] usb 3-1: USB disconnect, device number 5 [ 167.946614][ T4569] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 169.476871][ T4569] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.682597][ T4569] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.693295][ T4569] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 169.796304][ T4569] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.805584][ T4569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.924121][ T4569] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 170.185355][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.467872][ T5375] syz.3.304 sent an empty control message without MSG_MORE. [ 172.995226][ T4245] usb 5-1: USB disconnect, device number 4 [ 175.796735][ T4248] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.433043][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 176.439811][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 176.454384][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 176.514496][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 177.487289][ T4248] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.535319][ T4248] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.588048][ T4248] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 177.615837][ T4248] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.628669][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.809769][ T4248] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 177.926184][ T5423] udc-core: couldn't find an available UDC or it's busy [ 177.943509][ T5423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.755131][ T5423] udc-core: couldn't find an available UDC or it's busy [ 178.763321][ T26] audit: type=1326 audit(1765845052.565:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 178.796706][ T26] audit: type=1326 audit(1765845052.565:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2ecc40f90 code=0x7ffc0000 [ 178.823025][ T26] audit: type=1326 audit(1765845052.565:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2ecc4234b code=0x7ffc0000 [ 178.876776][ T5423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.974741][ T4297] usb 2-1: USB disconnect, device number 7 [ 179.989629][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.029985][ T26] audit: type=1326 audit(1765845052.565:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2ecc4234b code=0x7ffc0000 [ 180.088976][ T4569] libceph: connect (1)[c::]:6789 error -101 [ 180.097767][ T4569] libceph: mon0 (1)[c::]:6789 connect error [ 180.111921][ T26] audit: type=1326 audit(1765845052.695:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 180.135874][ T26] audit: type=1326 audit(1765845053.775:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 180.160276][ T26] audit: type=1326 audit(1765845053.785:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 180.249798][ T5450] ceph: No mds server is up or the cluster is laggy [ 180.357059][ T26] audit: type=1326 audit(1765845053.785:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 180.387095][ T4569] libceph: connect (1)[c::]:6789 error -101 [ 180.393272][ T4569] libceph: mon0 (1)[c::]:6789 connect error [ 180.402461][ T26] audit: type=1326 audit(1765845053.785:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 180.462314][ T26] audit: type=1326 audit(1765845053.785:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa2ecc42749 code=0x7ffc0000 [ 182.579743][ T4297] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.386885][ T4297] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 183.423745][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.466095][ T4297] usb 1-1: config 0 descriptor?? [ 183.518685][ T4297] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 184.033328][ T5503] tipc: Can't bind to reserved service type 0 [ 184.246701][ T1335] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.452839][ T4297] gspca_stv06xx: I2C: Read error writing address: -71 [ 184.556166][ T4297] usb 1-1: USB disconnect, device number 6 [ 185.234593][ T5512] MPTCP: addr_signal error, add_addr=1, echo=0 [ 185.426974][ T1335] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.914559][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 186.177635][ T1335] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 186.187520][ T1335] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 186.197396][ T1335] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.206728][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.950765][ T5501] udc-core: couldn't find an available UDC or it's busy [ 187.029532][ T1335] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 187.056137][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.075455][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.141327][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 187.141342][ T26] audit: type=1326 audit(1765845060.955:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 187.171248][ T5501] udc-core: couldn't find an available UDC or it's busy [ 187.187804][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.266149][ T26] audit: type=1326 audit(1765845060.985:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8827869f90 code=0x7ffc0000 [ 187.295542][ T26] audit: type=1326 audit(1765845060.985:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f882786b34b code=0x7ffc0000 [ 187.335126][ T26] audit: type=1326 audit(1765845060.985:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f882786b34b code=0x7ffc0000 [ 187.366156][ T26] audit: type=1326 audit(1765845061.105:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 187.396285][ T26] audit: type=1326 audit(1765845061.105:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 187.397846][ T1335] usb 3-1: USB disconnect, device number 6 [ 187.447036][ T26] audit: type=1326 audit(1765845061.255:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 187.575997][ T26] audit: type=1326 audit(1765845061.255:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 188.115354][ T26] audit: type=1326 audit(1765845061.255:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 192.142731][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 192.428577][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.806782][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.844945][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 192.889312][ T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 192.948829][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.080254][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.256402][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 193.357651][ T7] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 193.387931][ T5595] udc-core: couldn't find an available UDC or it's busy [ 193.396870][ T5595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.415632][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.572629][ T26] audit: type=1326 audit(1765845067.385:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 193.578386][ T5595] udc-core: couldn't find an available UDC or it's busy [ 193.652387][ T26] audit: type=1326 audit(1765845067.395:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f661bc41f90 code=0x7ffc0000 [ 193.719187][ T26] audit: type=1326 audit(1765845067.395:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f661bc4334b code=0x7ffc0000 [ 193.742251][ T26] audit: type=1326 audit(1765845067.395:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f661bc4334b code=0x7ffc0000 [ 193.882402][ T5595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.896857][ T26] audit: type=1326 audit(1765845067.715:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 194.003827][ T26] audit: type=1326 audit(1765845067.735:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 194.081812][ T26] audit: type=1326 audit(1765845067.745:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 194.112916][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.119815][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.226331][ T26] audit: type=1326 audit(1765845067.745:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 194.401261][ T26] audit: type=1326 audit(1765845067.745:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 195.325181][ T1335] usb 5-1: USB disconnect, device number 5 [ 195.714247][ T26] audit: type=1326 audit(1765845067.795:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5594 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f661bc43749 code=0x7ffc0000 [ 198.215135][ T5659] device bridge0 entered promiscuous mode [ 199.524940][ T5648] device bridge0 left promiscuous mode [ 199.709621][ T4569] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 199.806828][ T5683] sd 0:0:1:0: device reset [ 201.261325][ T5688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.406'. [ 201.310051][ T5688] unsupported nlmsg_type 40 [ 201.328287][ T4569] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 201.376414][ T4569] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 201.459780][ T4569] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.141902][ T5695] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 202.287078][ T4569] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.312111][ T4569] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.501110][ T4569] usb 4-1: Product: syz [ 203.231205][ T4569] usb 4-1: Manufacturer: syz [ 203.300574][ T4569] usb 4-1: SerialNumber: syz [ 203.308114][ T4569] usb 4-1: config 0 descriptor?? [ 203.333312][ T4569] usb 4-1: can't set config #0, error -71 [ 203.345604][ T4569] usb 4-1: USB disconnect, device number 7 [ 203.405295][ T5698] bond1: (slave gretap1): making interface the new active one [ 204.613569][ T5710] NILFS (nullb0): couldn't find nilfs on the device [ 204.629141][ T5698] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 208.440300][ T1335] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 208.827513][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 209.333279][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.375354][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 209.387115][ T1335] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 209.397146][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.409248][ T1335] usb 3-1: config 0 descriptor?? [ 209.557026][ T5749] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.582754][ T4194] Bluetooth: hci5: urb ffff888028b76400 submission failed (90) [ 210.045673][ T1335] usb 3-1: USB disconnect, device number 7 [ 212.753662][ T5796] comedi comedi1: pcm3724: I/O port conflict (0xffffffffffffffff,16) [ 215.566762][ T4569] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.020308][ T4569] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.030753][ T4569] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 216.318379][ T4569] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 216.391906][ T4569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.485757][ T4569] usb 2-1: Product: syz [ 216.618190][ T4569] usb 2-1: Manufacturer: syz [ 216.622853][ T4569] usb 2-1: SerialNumber: syz [ 216.631828][ T4569] usb 2-1: config 0 descriptor?? [ 216.656987][ T5831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.662039][ T5843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.455'. [ 216.664072][ T5831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.742407][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 216.742503][ T26] audit: type=1326 audit(1765845090.555:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.137857][ T26] audit: type=1326 audit(1765845090.555:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.408499][ T4569] usb 2-1: ucan: probing device on interface #0 [ 217.414865][ T4569] usb 2-1: ucan: invalid EP count (1) [ 217.420308][ T4569] usb 2-1: ucan: probe failed; try to update the device firmware [ 217.435613][ T26] audit: type=1326 audit(1765845090.555:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.472119][ T26] audit: type=1326 audit(1765845090.555:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.515123][ T26] audit: type=1326 audit(1765845090.555:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.634667][ T26] audit: type=1326 audit(1765845090.555:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 217.848748][ T5847] vivid-002: disconnect [ 217.855066][ T5847] vivid-002: reconnect [ 218.953253][ T4569] usb 2-1: USB disconnect, device number 8 [ 219.749547][ T5883] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 219.970988][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.177375][ T5895] bond1: (slave veth3): Enslaving as an active interface with a down link [ 220.269290][ T5883] device bond_slave_1 entered promiscuous mode [ 220.293836][ T5883] device bond_slave_1 left promiscuous mode [ 220.326072][ T5883] bond1: (slave vlan2): making interface the new active one [ 220.395074][ T5883] device bond_slave_1 entered promiscuous mode [ 220.420903][ T5883] device vlan2 entered promiscuous mode [ 220.442714][ T5883] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 220.474135][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 220.856780][ T5432] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 222.646769][ T5432] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.655853][ T5432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.417713][ T5432] usb 2-1: Product: syz [ 223.421943][ T5432] usb 2-1: Manufacturer: syz [ 223.427368][ T5432] usb 2-1: SerialNumber: syz [ 223.449421][ T5432] usb 2-1: config 0 descriptor?? [ 223.686816][ T5432] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 223.704369][ T5432] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 223.739178][ T5432] usb 2-1: USB disconnect, device number 9 [ 231.364052][ T5975] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 231.866468][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 235.920686][ T6028] netlink: 196 bytes leftover after parsing attributes in process `syz.4.507'. [ 238.616916][ T5432] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 239.731065][ T144] device vlan2 left promiscuous mode [ 239.977314][ T5432] usb 3-1: config 2 has an invalid interface number: 165 but max is 0 [ 240.000350][ T5432] usb 3-1: config 2 has no interface number 0 [ 240.032411][ T5432] usb 3-1: config 2 interface 165 has no altsetting 0 [ 240.207099][ T5432] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=31.b6 [ 240.222377][ T5432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.762325][ T5432] usb 3-1: Product: syz [ 240.780462][ T5432] usb 3-1: Manufacturer: syz [ 240.780560][ T5432] usb 3-1: SerialNumber: syz [ 240.858751][ T5432] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40) [ 240.865155][ T5432] usb 3-1: Forcing UVC version to 1.0a [ 240.897328][ T5432] usb 3-1: No valid video chain found. [ 241.587817][ T1110] usb 3-1: USB disconnect, device number 8 [ 242.965383][ T6090] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 255.557305][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565518][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.010071][ T26] audit: type=1326 audit(1765845130.825:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.054103][ T26] audit: type=1326 audit(1765845130.825:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.103060][ T26] audit: type=1326 audit(1765845130.865:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.146616][ T5631] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.151518][ T26] audit: type=1326 audit(1765845130.865:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.192978][ T26] audit: type=1326 audit(1765845130.865:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.225716][ T26] audit: type=1326 audit(1765845130.865:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.256822][ T26] audit: type=1326 audit(1765845130.865:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.289501][ T26] audit: type=1326 audit(1765845130.865:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.319026][ T26] audit: type=1326 audit(1765845130.865:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.346753][ T26] audit: type=1326 audit(1765845130.865:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 257.606770][ T5631] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.633072][ T5631] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 257.671601][ T5631] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 257.694311][ T5631] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.703607][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.717004][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 257.820587][ T6191] chnl_net:caif_netlink_parms(): no params data found [ 257.831883][ T5631] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 257.857825][ T146] Bluetooth: hci1: hcon ffff88807afe8000 sent 1 < count 7 [ 257.929748][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.980357][ T6186] udc-core: couldn't find an available UDC or it's busy [ 257.992406][ T6186] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.080074][ T6186] udc-core: couldn't find an available UDC or it's busy [ 258.262012][ T6186] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 259.150409][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.256807][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.304151][ T6191] device bridge_slave_0 entered promiscuous mode [ 259.676296][ T1110] Bluetooth: hci5: command 0x0409 tx timeout [ 259.697183][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.759992][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.769493][ T6191] device bridge_slave_1 entered promiscuous mode [ 259.847229][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.990619][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.071944][ T6191] team0: Port device team_slave_0 added [ 261.123704][ T6191] team0: Port device team_slave_1 added [ 261.357338][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.416048][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.614071][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.706775][ T4255] Bluetooth: hci5: command 0x041b tx timeout [ 261.713979][ T21] usb 1-1: USB disconnect, device number 7 [ 261.864802][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.889892][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.069176][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.918622][ T1110] Bluetooth: hci5: command 0x040f tx timeout [ 264.050598][ T6191] device hsr_slave_0 entered promiscuous mode [ 264.067947][ T6191] device hsr_slave_1 entered promiscuous mode [ 264.087229][ T6191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.126370][ T6191] Cannot create hsr debugfs directory [ 266.281175][ T5631] Bluetooth: hci5: command 0x0419 tx timeout [ 266.418863][ T6191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.334268][ T6191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.553246][ T6191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.581462][ T6191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.282878][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.478186][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.077186][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.088344][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.199692][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.223970][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.285312][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.292506][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.347025][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.503205][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.558771][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.578559][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.585707][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.667077][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.736385][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.799956][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.857680][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.926424][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.961960][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.993279][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.033222][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.581202][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.618043][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.637140][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.126831][ T4297] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 274.863467][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.874290][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.946654][ T4297] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.965269][ T4297] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.975208][ T4297] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 274.992178][ T4297] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.001555][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.004281][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.282327][ T4297] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 275.355781][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.437002][ T6327] udc-core: couldn't find an available UDC or it's busy [ 275.448097][ T6327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.491069][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 275.491086][ T26] audit: type=1326 audit(1765845149.305:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 275.500540][ T5931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.540174][ T26] audit: type=1326 audit(1765845149.355:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 275.553091][ T6327] udc-core: couldn't find an available UDC or it's busy [ 275.596919][ T6327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.867119][ T26] audit: type=1326 audit(1765845149.355:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8827869f90 code=0x7ffc0000 [ 275.894196][ T26] audit: type=1326 audit(1765845149.355:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f882786b34b code=0x7ffc0000 [ 276.230330][ T4289] usb 3-1: USB disconnect, device number 9 [ 276.254519][ T26] audit: type=1326 audit(1765845149.355:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f882786b34b code=0x7ffc0000 [ 276.324032][ T26] audit: type=1326 audit(1765845149.655:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 276.377293][ T26] audit: type=1326 audit(1765845150.015:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 276.400458][ T26] audit: type=1326 audit(1765845150.045:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 276.424359][ T26] audit: type=1326 audit(1765845150.045:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 276.498018][ T5931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.619512][ T26] audit: type=1326 audit(1765845150.045:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f882786b749 code=0x7ffc0000 [ 276.718628][ T5931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.571415][ T4412] Bluetooth: hci6: command 0x0409 tx timeout [ 278.120350][ T5931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.285483][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.439566][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.508488][ T6336] chnl_net:caif_netlink_parms(): no params data found [ 279.588032][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.627180][ T4193] Bluetooth: hci6: command 0x041b tx timeout [ 279.639906][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.689649][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.727108][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.750357][ T6191] device veth0_vlan entered promiscuous mode [ 279.801542][ T6191] device veth1_vlan entered promiscuous mode [ 279.894245][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.168612][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.639738][ T6191] device veth0_macvtap entered promiscuous mode [ 280.770059][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.782692][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.821067][ T6191] device veth1_macvtap entered promiscuous mode [ 280.862567][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.950837][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.490208][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.646539][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.656407][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.727604][ T5631] Bluetooth: hci6: command 0x040f tx timeout [ 282.541156][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.566629][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.586536][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.606536][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.626583][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.642165][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.656124][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.669128][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.774557][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.796578][ T5080] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 282.830569][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.856958][ T6420] binder: 6419:6420 ioctl 4018620d 0 returned -22 [ 282.861326][ T6336] device bridge_slave_0 entered promiscuous mode [ 282.901825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.925415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.952037][ T5931] tipc: Disabling bearer [ 282.967348][ T5931] tipc: Left network mode [ 282.969273][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.001879][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.035277][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.064205][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.080198][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.091235][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.111529][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.132360][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.166928][ T5080] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.186422][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.197554][ T5080] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 283.226958][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.244343][ T5080] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 283.257671][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.265080][ T5080] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.278648][ T6191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.287606][ T5080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.296560][ T6191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.317882][ T6191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.389260][ T6191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.409950][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.428943][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.465674][ T6336] device bridge_slave_1 entered promiscuous mode [ 283.508410][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.521082][ T5080] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 283.537362][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.655494][ T6411] udc-core: couldn't find an available UDC or it's busy [ 283.690358][ T6411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 283.694044][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.408566][ T4255] Bluetooth: hci6: command 0x0419 tx timeout [ 284.445311][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 284.445328][ T26] audit: type=1326 audit(1765845158.255:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 284.474599][ T6411] udc-core: couldn't find an available UDC or it's busy [ 284.508826][ T6411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 284.539210][ T26] audit: type=1326 audit(1765845158.285:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 284.574845][ T1110] usb 4-1: USB disconnect, device number 8 [ 285.457681][ T26] audit: type=1326 audit(1765845158.285:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e94058f90 code=0x7ffc0000 [ 285.492552][ T26] audit: type=1326 audit(1765845158.285:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9405a34b code=0x7ffc0000 [ 285.560109][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.623852][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.869588][ T26] audit: type=1326 audit(1765845158.285:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9405a34b code=0x7ffc0000 [ 285.892430][ T26] audit: type=1326 audit(1765845158.325:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 286.085846][ T26] audit: type=1326 audit(1765845158.355:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 286.190797][ T6336] team0: Port device team_slave_0 added [ 286.220111][ T6336] team0: Port device team_slave_1 added [ 286.226992][ T26] audit: type=1326 audit(1765845158.355:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 286.247288][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.265289][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.352670][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.375272][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.406927][ T26] audit: type=1326 audit(1765845158.355:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 286.424792][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.646810][ T26] audit: type=1326 audit(1765845158.355:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9405a749 code=0x7ffc0000 [ 288.953627][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.973785][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.032899][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.203243][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.227034][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.284589][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.102991][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.292604][ T6336] device hsr_slave_0 entered promiscuous mode [ 290.337160][ T6336] device hsr_slave_1 entered promiscuous mode [ 290.471022][ T6336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.483355][ T6336] Cannot create hsr debugfs directory [ 290.572407][ T5931] bridge0: port 3(gretap0) entered disabled state [ 290.702359][ T5931] device gretap0 left promiscuous mode [ 290.724621][ T5931] bridge0: port 3(gretap0) entered disabled state [ 291.697677][ T5931] bond1: (slave gretap1): Releasing active interface [ 292.256642][ T4255] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 296.924740][ T6336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.940039][ T6336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.950746][ T6336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.963169][ T6336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.588907][ T5931] device hsr_slave_0 left promiscuous mode [ 297.649374][ T5931] device hsr_slave_1 left promiscuous mode [ 297.665993][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.718239][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.745016][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.753389][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.791683][ T5931] device bridge_slave_1 left promiscuous mode [ 297.806751][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.826938][ T5931] device bridge_slave_0 left promiscuous mode [ 297.835772][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.922172][ T5931] device veth1_macvtap left promiscuous mode [ 297.929143][ T5931] device veth0_macvtap left promiscuous mode [ 297.935430][ T5931] device veth1_vlan left promiscuous mode [ 297.941594][ T5931] device veth0_vlan left promiscuous mode [ 298.086943][ T4255] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 298.094613][ T4255] usb 3-1: can't read configurations, error -71 [ 298.152038][ T5931] bond1 (unregistering): Released all slaves [ 298.343181][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 298.383758][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 298.413466][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.440056][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.564301][ T5931] bond0 (unregistering): Released all slaves [ 300.566913][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.642358][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.655716][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.840317][ T6336] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.857810][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.885756][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.083101][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.090271][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.248242][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.259155][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.269296][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.278468][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.285638][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.301275][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.311633][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.321295][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.333846][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.343607][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.427461][ T5080] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 304.455437][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.507684][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.566415][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.620250][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.651920][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.678156][ T5080] usb 3-1: Using ep0 maxpacket: 16 [ 304.690501][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.718334][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.826791][ T5080] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 305.016670][ T5080] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.032216][ T5080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.048926][ T5080] usb 3-1: Product: syz [ 305.054622][ T5080] usb 3-1: Manufacturer: syz [ 305.061893][ T5080] usb 3-1: SerialNumber: syz [ 305.079381][ T5080] usb 3-1: config 0 descriptor?? [ 307.087380][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.094950][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.147169][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.659579][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.689280][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.785281][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.890546][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.961308][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.981170][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.993603][ T6336] device veth0_vlan entered promiscuous mode [ 312.971486][ T6336] device veth1_vlan entered promiscuous mode [ 313.106138][ T13] usb 3-1: USB disconnect, device number 12 [ 313.106217][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.157568][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.196220][ T6336] device veth0_macvtap entered promiscuous mode [ 313.321067][ T6336] device veth1_macvtap entered promiscuous mode [ 313.954232][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.017864][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.143698][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.176530][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.186383][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.280627][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.326578][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.363983][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.394719][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.415990][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.453748][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.485866][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.525283][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.593405][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.618242][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.818548][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.865921][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.035517][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.194315][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.516584][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.588167][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.799333][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.853911][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.949515][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.055684][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.303210][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.360350][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.381829][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.410171][ T6336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.440876][ T6336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.469804][ T6336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.511658][ T6336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.816310][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.857236][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.912193][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.959859][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.994496][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.002421][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.024211][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.091899][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.775273][ T5931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.040097][ T5931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.147440][ T5931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.803339][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.687'. [ 329.484649][ T6888] overlayfs: missing 'lowerdir' [ 334.530853][ T5931] device hsr_slave_0 left promiscuous mode [ 334.564645][ T5931] device hsr_slave_1 left promiscuous mode [ 335.496874][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.506707][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.584289][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.619121][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.655152][ T5931] device bridge_slave_1 left promiscuous mode [ 335.676858][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.734224][ T5931] device bridge_slave_0 left promiscuous mode [ 335.756351][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.707316][ T5931] device bond_slave_1 left promiscuous mode [ 336.884959][ T5931] device veth1_macvtap left promiscuous mode [ 336.899076][ T5931] device veth0_macvtap left promiscuous mode [ 336.936367][ T5931] device veth1_vlan left promiscuous mode [ 336.955075][ T5931] device veth0_vlan left promiscuous mode [ 337.575791][ T5931] bond1 (unregistering): (slave vlan2): Releasing active interface [ 337.624001][ T5931] bond1 (unregistering): (slave veth3): Releasing active interface [ 337.652745][ T5931] bond1 (unregistering): Released all slaves [ 338.260944][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 339.287467][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 339.361488][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.141547][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.367698][ T5931] bond0 (unregistering): Released all slaves [ 343.750170][ T4255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 344.204148][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 344.227396][ T7051] sd 0:0:1:0: PR command failed: 2 [ 344.232570][ T7051] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 344.242713][ T7055] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.252122][ T7055] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.260874][ T7055] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.269579][ T7055] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.276705][ T7051] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 344.353727][ T7055] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.362943][ T7055] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.371931][ T7055] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.381244][ T7055] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.396737][ T4255] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.434688][ T4255] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 344.455418][ T4255] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 344.467601][ T4255] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.481236][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.594361][ T4255] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 344.652180][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.797989][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 344.848038][ T7033] udc-core: couldn't find an available UDC or it's busy [ 344.855239][ T7033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 344.986979][ T7055] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.996675][ T7055] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.005408][ T7055] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.014183][ T7055] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.842410][ T7055] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.851528][ T7055] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.860433][ T7055] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.869469][ T7055] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.911048][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 345.911065][ T26] audit: type=1326 audit(1765845219.725:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5ffa749 code=0x7ffc0000 [ 346.003524][ T26] audit: type=1326 audit(1765845219.755:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5ffa749 code=0x7ffc0000 [ 350.323091][ T26] audit: type=1326 audit(1765845224.135:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7130 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea14068749 code=0x7ffc0000 [ 351.958185][ T4569] usb 6-1: USB disconnect, device number 2 [ 352.203542][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 355.402856][ T7182] 9pnet_virtio: no channels available for device syz [ 360.996562][ T1335] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.308858][ T1335] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.317414][ T1335] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.330491][ T1335] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 362.341098][ T1335] usb 6-1: config 220 has no interface number 2 [ 362.514499][ T1335] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.528302][ T1335] usb 6-1: config 220 interface 0 has no altsetting 0 [ 362.535110][ T1335] usb 6-1: config 220 interface 76 has no altsetting 0 [ 362.542142][ T1335] usb 6-1: config 220 interface 1 has no altsetting 0 [ 363.987158][ T1335] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 364.744105][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.766672][ T1335] usb 6-1: can't set config #220, error -71 [ 364.783946][ T1335] usb 6-1: USB disconnect, device number 3 [ 364.973374][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.981217][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.976108][ T7347] overlayfs: failed to get inode (-116) [ 368.015912][ T7347] overlayfs: failed to get inode (-116) [ 368.516841][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 370.585051][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 372.317871][ T7389] [U] [ 372.321017][ T7389] [U] [ 372.323743][ T7389] [U] [ 372.326448][ T7389] [U] [ 372.346411][ T7389] [U] [ 372.349170][ T7389] [U] [ 372.351892][ T7389] [U] [ 372.354609][ T7389] [U] [ 372.426764][ T7389] [U] [ 372.429529][ T7389] [U] [ 372.432238][ T7389] [U] [ 372.434935][ T7389] [U] [ 372.460756][ T7389] [U] [ 372.463535][ T7389] [U] [ 372.466264][ T7389] [U] [ 372.468979][ T7389] [U] [ 372.492974][ T7389] [U] [ 372.495730][ T7389] [U] [ 372.498448][ T7389] [U] [ 372.501161][ T7389] [U] [ 372.610016][ T7389] [U] [ 372.612773][ T7389] [U] [ 372.615486][ T7389] [U] [ 372.618191][ T7389] [U] [ 372.710491][ T7389] [U] [ 372.713260][ T7389] [U] [ 372.715983][ T7389] [U] [ 372.718706][ T7389] [U] [ 373.726970][ T7389] [U] [ 373.730182][ T7389] [U] [ 373.732893][ T7389] [U] [ 373.735599][ T7389] [U] [ 373.787639][ T7389] [U] [ 373.790381][ T7389] [U] [ 373.793086][ T7389] [U] [ 373.795764][ T7389] [U] [ 373.846057][ T7389] [U] [ 373.848800][ T7389] [U] [ 373.851480][ T7389] [U] [ 373.854151][ T7389] [U] [ 373.917114][ T7389] [U] [ 373.919868][ T7389] [U] [ 373.922574][ T7389] [U] [ 373.925275][ T7389] [U] [ 373.956893][ T7389] [U] [ 373.959628][ T7389] [U] [ 373.962304][ T7389] [U] [ 373.964975][ T7389] [U] [ 374.800167][ T26] audit: type=1326 audit(1765845248.615:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.5.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45e5ffa749 code=0x0 [ 374.866805][ T7389] [U] [ 374.869580][ T7389] [U] [ 374.872303][ T7389] [U] [ 374.875004][ T7389] [U] [ 375.096830][ T7389] [U] [ 375.099587][ T7389] [U] [ 375.102321][ T7389] [U] [ 375.105037][ T7389] [U] [ 375.145193][ T7389] [U] [ 375.147949][ T7389] [U] [ 375.150659][ T7389] [U] [ 375.153376][ T7389] [U] [ 375.177041][ T7389] [U] [ 375.179782][ T7389] [U] [ 375.182487][ T7389] [U] [ 375.185195][ T7389] [U] [ 375.236988][ T7389] [U] [ 375.239755][ T7389] [U] [ 375.242467][ T7389] [U] [ 375.245181][ T7389] [U] [ 375.302649][ T7389] [U] [ 375.305403][ T7389] [U] [ 375.308129][ T7389] [U] [ 375.310844][ T7389] [U] [ 375.558214][ T7389] [U] [ 376.872355][ T7447] netlink: 52 bytes leftover after parsing attributes in process `syz.6.837'. [ 377.302145][ T5080] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 378.516837][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.523183][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.786804][ T5080] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.806896][ T5080] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.853780][ T5080] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.914773][ T5080] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.222768][ T5080] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.262643][ T5080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.328104][ T5080] usb 7-1: Product: syz [ 379.345504][ T5080] usb 7-1: Manufacturer: syz [ 380.223272][ T5080] usb 7-1: SerialNumber: syz [ 380.266708][ T5080] usb 7-1: can't set config #1, error -71 [ 380.274583][ T5080] usb 7-1: USB disconnect, device number 2 [ 380.456610][ T4289] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 380.552689][ T7495] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 381.237244][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 381.679197][ T4289] usb 4-1: Using ep0 maxpacket: 32 [ 381.712997][ T7507] tipc: Started in network mode [ 381.724888][ T7507] tipc: Node identity 4e6adf6537b3, cluster identity 4711 [ 381.743589][ T7507] tipc: Enabled bearer , priority 0 [ 381.806772][ T4289] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 381.824605][ T4289] usb 4-1: config 0 has no interface number 0 [ 381.867772][ T7510] device syzkaller0 entered promiscuous mode [ 381.908351][ T7506] tipc: Resetting bearer [ 382.009225][ T4289] usb 4-1: config 0 interface 184 has no altsetting 0 [ 382.032677][ T7506] tipc: Disabling bearer [ 382.706665][ T4289] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 382.729446][ T4289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.980057][ T4289] usb 4-1: config 0 descriptor?? [ 382.996730][ T4289] usb 4-1: can't set config #0, error -71 [ 383.016709][ T4289] usb 4-1: USB disconnect, device number 9 [ 383.913083][ T7546] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 386.151622][ T7600] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 387.793731][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 389.598874][ T7642] kthread_run failed with err -4 [ 392.061367][ T7676] INFO: trying to register non-static key. [ 392.067232][ T7676] The code is fine but needs lockdep annotation, or maybe [ 392.074350][ T7676] you didn't initialize this object before use? [ 392.080606][ T7676] turning off the locking correctness validator. [ 392.086951][ T7676] CPU: 1 PID: 7676 Comm: syz.2.890 Not tainted syzkaller #0 [ 392.094389][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.104555][ T7676] Call Trace: [ 392.107833][ T7676] [ 392.110751][ T7676] dump_stack_lvl+0x168/0x230 [ 392.115439][ T7676] ? show_regs_print_info+0x20/0x20 [ 392.120630][ T7676] ? load_image+0x3b0/0x3b0 [ 392.125124][ T7676] ? cpumask_next+0xb3/0xd0 [ 392.129620][ T7676] ? __is_module_percpu_address+0x2a7/0x410 [ 392.135515][ T7676] ? is_kernel_percpu_address+0x143/0x160 [ 392.141234][ T7676] assign_lock_key+0x1e0/0x1f0 [ 392.145992][ T7676] ? SOFTIRQ_verbose+0x10/0x10 [ 392.150740][ T7676] ? __lock_acquire+0x289d/0x7c60 [ 392.155754][ T7676] register_lock_class+0x20e/0x880 [ 392.160864][ T7676] ? is_dynamic_key+0x1f0/0x1f0 [ 392.165703][ T7676] ? kasan_set_track+0x4b/0x70 [ 392.170457][ T7676] __lock_acquire+0x160/0x7c60 [ 392.175213][ T7676] ? __lock_acquire+0x12d9/0x7c60 [ 392.180236][ T7676] ? verify_lock_unused+0x140/0x140 [ 392.185424][ T7676] ? __mutex_trylock_common+0x14f/0x250 [ 392.190964][ T7676] ? rcu_lock_release+0x20/0x20 [ 392.195821][ T7676] ? verify_lock_unused+0x140/0x140 [ 392.201021][ T7676] lock_acquire+0x197/0x3f0 [ 392.205524][ T7676] ? gsmld_write_wakeup+0x6b/0x2b0 [ 392.210640][ T7676] ? read_lock_is_recursive+0x10/0x10 [ 392.216002][ T7676] ? mutex_lock_io_nested+0x60/0x60 [ 392.221196][ T7676] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 392.226654][ T7676] ? lockdep_hardirqs_off+0x70/0x100 [ 392.231934][ T7676] _raw_spin_lock_irqsave+0xa4/0xf0 [ 392.237122][ T7676] ? gsmld_write_wakeup+0x6b/0x2b0 [ 392.242225][ T7676] ? _raw_spin_lock+0x40/0x40 [ 392.246885][ T7676] ? __init_ldsem+0x150/0x150 [ 392.251546][ T7676] gsmld_write_wakeup+0x6b/0x2b0 [ 392.256475][ T7676] ? gsmld_receive_buf+0x340/0x340 [ 392.261572][ T7676] tty_ldisc_hangup+0x16a/0x4a0 [ 392.266409][ T7676] __tty_hangup+0x45c/0x680 [ 392.270920][ T7676] tty_ioctl+0x489/0xc20 [ 392.275160][ T7676] ? security_file_ioctl+0x7c/0xa0 [ 392.280271][ T7676] ? tty_get_icount+0xa0/0xa0 [ 392.284936][ T7676] __se_sys_ioctl+0xfa/0x170 [ 392.289515][ T7676] do_syscall_64+0x4c/0xa0 [ 392.293917][ T7676] ? clear_bhb_loop+0x30/0x80 [ 392.298578][ T7676] ? clear_bhb_loop+0x30/0x80 [ 392.303258][ T7676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.309159][ T7676] RIP: 0033:0x7f882786b749 [ 392.313566][ T7676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.333174][ T7676] RSP: 002b:00007f8825ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.341580][ T7676] RAX: ffffffffffffffda RBX: 00007f8827ac1fa0 RCX: 00007f882786b749 [ 392.349542][ T7676] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000007 [ 392.357502][ T7676] RBP: 00007f88278eff91 R08: 0000000000000000 R09: 0000000000000000 [ 392.365458][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.373415][ T7676] R13: 00007f8827ac2038 R14: 00007f8827ac1fa0 R15: 00007ffe1fd62a68 [ 392.381377][ T7676] [ 393.066502][ T1108] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 393.466828][ T1108] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.486232][ T1108] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 393.496386][ T1108] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 393.513539][ T1108] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.523099][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.597057][ T1108] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 393.624492][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.886393][ T1108] usb 7-1: USB disconnect, device number 3 [ 400.986537][ T6767] Bluetooth: hci6: command 0x0406 tx timeout