last executing test programs: 17.43529098s ago: executing program 0 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) shmctl$IPC_RMID(r1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) 16.409366103s ago: executing program 0 (id=420): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x9, 0x7, 0xf, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0x93, &(0x7f0000000280)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0xa, 0x6}, {0x3, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x10}, {0x0, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7}, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, 0x0, 0x0, 0xfc) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="5a384a217a2d82c5ec7bde148b403544b4bdb579f3e3fbf170a3469a03b7ba2a91da2bb5fefdfb5ee8c9a765bd0aa2e8b8b401f3b58de521f3e6db76caf7b9ea41905fac2631a75e5d2e09e06515ff14b80da52516075f57e7407448ffbd076beeb37ba4a5553141482cafea7fcf5fb2b03efdf1b49c8c8170587ce2a60a85024c7adbc4b334ecb3167e533aa35d2741012c718c73d8650095eed7a7569fa74c352893ad1a22c5a77af8f2e7970aed14104738b5cd78bf4f9227f55d2ffb78093c957d1bff072137969865ccfca5afbe63fe8f1a6684bb1eaecbf9172186d97535ff934b122eb8e8262e97bd6fad21d3a14a3786585270769d87b6477cfe0740555c6da4d5e600ae4d5af479dc1ffef196e1332ad95c1c58bc9d1cdac91ef22c1c8f32008601d4fe42493b4cf49166688aa5ed31c4b0dd072f6e4209d418914c3df34c2bbf7726603ffa60954980a1de421eb16f23729f3d9c822089d1f5ed131be61fae0e87ed82495a55162fef5ec693639d3772513e0e1dd42f674da3c9e7dd19bcacd8c68f39e7c51b3b021b1c88b3044a33b28781c3b945b720000587415401aa2187cf293f6e1f0877262954823a45e40630d06b6bb31d1fabd80fbdbcf9ebc9b8dd416dbc156eae3bd7926994196f9fa280c6642db7906dcfc4f5aacfe58f7798742b134e98faf62d2dddd2503240ed38d50809662fcb3f6086b01aa8fc52d0eaf04d3d2a36beaee875fc3d2cb2b97496ac90ea79d279ab0cc8a442df0859765930d95bd82f8282144d1d8dd8eab0285c7743b776421010d7b74acf7bcc6c6e9d38713de9c99df8ac8469590b23ae358de52a6f2d7e00286675b4e2fc168d3f2b9ca6388cb87b97acc90639a1d1d16013910a795d2590f559ceea19f0a0be189c346eaf27d8c53aed71ef8c819cdf0d7239bde7831fc23be532bc065d1812b070655ae6dff2c3261d35ff1a404ef927c028e726107fe26808352e944335b6e9895c6112b49862089e7b37c16efbf7dd7d5569c2dd14915154465c94b50ff43452d66c797bac0acb102cec36acfc561beb71d92ba83d6fa24ccdd5290779c5ee075b9baf835f21b2d76a74c42af035079e62b09ccf512b1cdde4ed0679c230d4739ecec880123845a8b17762a5dd9873dcdeebf809a42899a49b2693c2d87efb3b8a2f2bdda5dacd8084d91d71c603f2c7f0a9e8db7080e575aa8baaae6791530b74e6d9bd887379058673a579de4ab71988b8fef429d45560cabc32553103d1e7156608bba760dde9ea3452a4958ef0dc4d1176de951ace0e05033cc974e80bcde9601e267d80578565d49a497cc981d4e304978262124cf712231335266ea736481669706bd5f997f793f428a7d3ee5bda9b702f88c8c95541441f9f88b7a3b643e4a3aaa32fcc537063e447ba5928e7da583033c1642acc16b42d8baea677a2ba9a189ac745e6c8762257644c5dcc1ed8c60663a17ecd8be62830bd16b9eee4dfcf6cb13d0067f36f4d811fe961d2553a02fb7f117f07099d5c4747345531e807f13a90049a56c7816d76c503c5b7d04394955ba8e53a54309e811ac396ede3142dd41f9a1f695b72e8b75d68db27ff9c5e5fac36337f41aac853add254a4e8f2e3912d77ace9a27e58951d055a5f492accdd4bccb7379533b9b01f10042c294e8afb407c8dc752785f0e6078aa76f0f8598d9c26a6e6cd3948d1b1d6bcf51d7a1b9050fef9be16fe4bc4e40686813940c1748e00602ec782118395e7c07022ca8ac248f5c3b53a45cec6bb7f962add742b68c36cde15ff0f76c1fc596bca8d42c03722f6e78260cb30f47c84d567a089e1ab987c304e1bf70b668d1a35e72980ea7b9ec5a91c49c2a8962bb5f337434ea2ad80438f55ae50040390141eb4a9c2b47ea88adc9034f6d308449e4f40a2c1339a77ffa6e7239dab74f08bf1cc126bf318f47d5bbca4c9f4c9724fca344f93b0fc264ab7fc4d487861798e3d4fc5ce64de71e47bdb31b90d6e3046463082d3eaed3556115084c9111b6d9b0195ea7856aa83259a37bc6e512b762203cb1cd337666bc0620272de220e76f1cbb6ead7d1161610a0ac6c41dec1affb8ed57dd67910ba24545a89d230a1f6e8d86d979f497d1beede4918fbd4b61923d89dbd3440685863c4d1bb3d81973ba48a63133d9251e643c4647ad4aac03dc6db40ad92da439a3543df9483df651aea2c0bafb7f351166d75c746afeb330d610891c1c4f01a04668eff5e8ee2481ee358aa7b28f14c50b010e2c511354cbdea3c058f01f2e83f0db5a8a6e8235eb6eb15f2fb3dd9cd62bce66e5e46f50fc14e5710a4d97256ba724ae7a3cdfab2df2c3eaf131fff623a26b2aa6c9bca974bdb61938ac8cae4f0f1ec85788d0054a386772e38740d7bf1d0acd9d2f140d71e3353d2d97e0eb153685fef685bf06bee0c10e6df49a757018a29bd745a9680775219cb5248367e4c4990e25735948c94039f76c86168a687660ef7d8e2684ea650472198637c944ad226737dd2abf3c71d4f01eb482f80e5e62a16491a4ce110e51a7b5b6dcb2f788d2a929dc3a55b97f9bbf9bac9232a4193f359dde048c46ca16c654c712b8152779b3c495733801bcdd12b5b4b87380fc71cc9442c549dc7b40d351ea690b4b92ec510f23cd232a528b4ca474f3915df278f1574d6dda0e38c52b67cdce8724a920a026569ac8229f73580908e54111b638f93a94c632667d36381fdb6cc7fa6c97c60fb719e5aab698f0a553f47726ecd81207b4c9545f3f3c719ef6c0e847b97b8d0767d66306210ff653ecc97032eaf2504b85d2562bbb94160799046cda1b8877706ecbc100eb4a1de99b727a863c825c19b64a3c5d2db34224ab34e9efc99b792c0eafdd5eaa8e5319aee0effb9e40ae3e1cefd2216cae96cd423ae9b4048e89cf56c28c2d3dc9b05522d84e13f193a96d37c85545625ce39cf33d9de4f96ed7d2c0e813eac440f030595ef467030c1b3381e0e4ca4f36a8e5f9cb4e09bd398d707c5c38f4252182173b1f877f87e933fe59cfc10f88169625c2293d34a22062399543cf88a1097026d6f2effdfc05a50b1519dbae43289f64580a85978aa63ed218c958209c07ddfa9ee021c30b6ac427230bd5b45e86f1e0c47278680237527099fab4c3009e5c356c93a7041610616166b8c287eba20a43eb02351767996c9d1b20f058ff969547f79f381f45463f412d08407eb6f472ca7639c17994f4d9d4e9cb9464b4a096c96582e406ea972898400c11b083d7abfb0a8a0616819d4723fd23aec2e26b1c8b57c7ab0256a055df78beca014eca7ee4d88acd12bd0fb91cc68081958f69c969a37da61445d8dc65f945c288ff465a7678129391997a33e86e412d56af4f556d68f1c9ac6c6eae2f153a7d4755ccd748f3ee17104221030038bf79309b37a232b804cd5673e7ce403e118a899f776e37499f180777bfca4a8e4d2b987b55de542cdb9b8209473a719762a5d3717f69c8539a3bc4bf5c79e7e45626384f9b2b76e465c06ad0f39eafde6408ed883bf629f3f3c84024c636c7fc3eeb61fb33bb03393c23eb5050d401535d877d8f37a660b4bf9994b71b55e65b02a30717b799d6beed60ae51a70c9eae4e1ac391363f9d9a5dda9d82679e906ea31242b08a2b88b48abcf108d1d8ccf6435f5a66f862a59fb4a1c68ade20b4ab39bfb54b6cb41a675310f99509197f56f2ddbf58c18e749e9d5d7fafcf04db05c6a46d0752500957580e31e247a850c8306299f5360ca7a852a5de2ae63df4f1a167ab010621fa21320218a3eb9e3ad88e04eb9d8ed4a57055e9c6b55bba9f28520c5eca8fa7b7863df61b1382f35c2b63076acf244bc81f6ad558bb96c7b6ddd066caf5039694e7db19b3ade35ac3b7b555ae4ed5c0fd90219a729b433d23f39deca9f70852dd1ce3e1b445c9d14be1d7dd3e8a9aa8031dcec3ae918f22eccabb7e23856d223550d672950f7b3278e230c7019e19a86e59275562e5b427968953011b51fd6bac313151f0adf3d90559312afde4cace169ae9a2148a756ef3fdf69c4ef0fc406a44c7d3f70cca1f5dccfbb876a9ce272a4428dcb5fe7eedf34aeb67925fef9af40782944806d85744d727873844a34d6a836d6e9fcf296ba5747703550501b1546f43650c8e80c5a6a3bba2b6657ffafa84ee54bf186d0854cb6a23844566e87823266a3f9f81b1b3e4fadafb9524f61fda29df9f85577b51ad58c9b6ba2491b4c9e91731b769b5ecf14b17bc87cc4c8a82feeb6be4a0f3837330f5e0e5f11888f26d781e5a69837b457e278c21553fac6c34fb597410045f991d60488468eec4dea940dcf5dc00ba5f608effa2ef3575df8c9b31e1796326df0879169cb9808cc4199236667453f5fa9240995748176f9ff98186b6e4cbd53444a32631afddf752bed4f2755e76c24185742b76976cf519de5c8b0262a07a506002d02e43a4d617b4d72e6cfb0d8c4155aef8d89f8d3541d21026bfa578c5f7e97a47b2603bf1f5405e776197f661e8d3c16a4d77b741191119efdaaf4560d06370fe13199a525da5e7e9b821ec5f5799297c45c3eb8715809619fe945cc78a8967e24df52e5d67e85bc1d73db843921fe2beecb6cc3a076fb73227e55eb78e58f618c2a9c66dcc85079f4772ebcc11781c936fba9698deec242d6a14f8bbcd51cce20bc91cc5ea62400eec677c3fc2a0883f7cd030fe3fb3f20c63bd82de9ab62b73f339741d50f94049153c3d1adc24b6b7fc6db720ae6e9c3d8993a85793e73c4791ba25344381bdd7508830adad11732db0e9a2ebc6266d7681984b318dcfa8f99898dcbddb9c635bf634db92bb277190e9c6b1fe0d7d27ccd2848196ef427100f6343bce66a3c2ce1a88aac1f722e75f128086c6eb9764e8fcd08bf4688512b2669dd1fc18ed0816b9f9fd026c88da2acc4a43ee8b2a5bd6689625273abf3b796be0c7e319a9c89cf255e933ff11b1ac859b5fb1bad6781afb42d33cba9564f7c0ae1b3b7d6c6c45b2ed8c0273310f5b98bda44b5c11341ffc5fc7a72634fc620a5832c9cf491bb3bf2bd8edb6a84d521701e8e6ffb9f1d55657b919988c5732540e84fae746e5a966299a7429a262b3403fb3f70c4c5524ea18cfb04bd2159cb914e6a98e267ce6971d0efdc5bb636d9cd15681693edb21f764e7c9bb0d5a07869fae818506f353428252aaa20cbf4bd8ce1ebc4a76ce54c5595bba9b244e0e4a7a537607afa38e41368a8c293fdbd8490d93dbb7f82a89a2d65def069a49290ee087d985c099da3763a2dd79dcb09959c392ebda65680a895a745d726f59086e61106b90900000016622668ce9a80418e91609c529c088326b1bd12d6959741cc19d44f2095dd9b2f1b4cc007c0fb26f77ff244c875c46f4f85e6c65e43f2275331001e1440afc31d8af2f404fb14235e5ef484a55631a581be353672e8a9b47455f50cf4b8bd9030e9b4b298b4b43e920389c5aae890d9ec4d128dd1fcb256d06ad807c03dbac97d5d4d128687585574fbdc595b253e70b9fc8dc4f92ad7f36a9a730e3b94db7897394ba7a334cd6d7b79dee3577035700c560ed50cd70a2855ceb7fa58abfe381027437df41ec4a7bf19b01d4a3dd2d11e98e1e6365777d826e41e75d75df7b11e383faf089c7fa02b1cc4dffe3371b7282a5209d22d6593226716e784db16e3f54ed2f84e3f042df105f2dd8bb2f2b3d530d01a90deaae4854a78cad97e7eb00ed3d12f414c86bf4938878ec66f24aba4ee61d41133e66503174081144ae0630f1fabae5400f0b6cc9119b3c4d1a7382570fe9de7bc91d32fdc8f8f212f25560414fe27528db1026a6f71a373766771bd63b45d09e730be1f46bb608c6e43bfb1ac74469ec6b63e3114209a1b023d7fc6f7d0b0624ca7fed9a197d0ea1760302d47d8f749cf4b4711f9096fae58e941f428d3d46c17590d55cb275352b207970ab498a9fc380c0e23943e7bbfaafa9fc50b2b019f4ee955f52ab2938518a643a20e753d9d6c3144ed8ffbb2638a7d6dff9ad3f085a815e99b1334144e33679add52d473d4c7eaf1740e2bbd5469286b78b1f8853d2e24abd329666cd8c496051b7df363184d633abdc206f84d8119ab15ecc43bd4d3dc75c7c7d0e49764139be5d1c6ffa01ac8829e32d5e6d795f2760b55f6d2a4e487d6c8d24a4fd84f5ebd9b4cd8cd3868fe20658f79e22c29b34c07c127d4bde9cf7d1c3fbf92395012968c0923bc1e040d283d128a84d651de93459773d28990ee096f313334dacac65b09b8ecd5ab776f065ccd253c261bbce2ef637e4be0f384bf9d0705fe276be81a2aa8db6b882055ec11df91d13be28bf3e51c4269a6af8edc79fc9cffb97a7477fd121eb188f7a35e50d1830db8c388604030d26e67745f9cdf609d36463f0214a74b4277245215916379f78c8584a474f1eb28e14bdfef3fc02c09846952a23993bc2eeda301d6e4c58346b0a9ab96b59dfd6429bb90258a1fdc38de55443237e3559cccd7547307918ba6cf18091b3bc538da982c05adebeab41a59c2ee78e8c5dd4d4411a91179dcbaafd602ca0333ee6c6668abe24c836bdd5a5261aadac11fd8f1682044a819b6a3cd85015efcb685eede35ef046a11407e939fcfb7b4edb3f046c7d27947ba9a89e4f7068103ebcb0855d4923c4b9ee3ec5d476c4b72c1f6ed8ad1d991f6ef2f0eaa78758fdca67ede06e552b9df7532cc3f1d407fa23d9f5962e0305cedbff19a96b801f6f93a6fcec281fd30f57cffe8a26e2419f4b6a819281b3eb3bc7195e8cf4b8f3080f73c7b1fae8e7e606b5c8bcc493f8c1cae298995241957ee13d4fea8c92e63f16744bebdce3b8c57cb0f7716ccc950ef38c3133a0296ecd512191b8e9b68d3b232d2b7462174ed3d0f1bc6a0f5027fa4f88e99abaf6017f722f916726ec3eb59f19abd628b733654e4a24227889a99d01fb1e1cf7fb60f1d0a4671d5a7d47b56efaee313c53bfcb970e0878865e914f9e1884bee7f4fb787084315656b34c22dbf42aac3ebac5a500f8ce5d9bc47653f9e37a4d58e3c905db02e5ccf89701f9879831ec147baa80f122eeea1e3c9872669b0a29a24ea60e21d87bd51156f1e13e7d5132cec711f665df124cf7182c75103f35ba36ef96d36524a2525c88ae1fbe4192664080fc2735a789ae7f7b7774aaa9f18e6a8cfe46b714aed5d082ccb8001ca6bf33bd3a833681071fe6143a2daef7a637046c5dfeaa89d9285cf9052b02f699681a276f688b473b751d4da6be75a7d142e6b74897ea18812532579a7f495e4b77af68f5057b74e039adbc16624ecaec8aa058c491a1968e9f3d133304e6e1c150b8b10db993ce67e502bec06b239454ab0eb19af034afb8756a06e0550be1a63e31a85fda372bc5d6f2759adabf29d90eed494bed32cca3cbcdb874a982e0a9e0d81708814c88d88ae30344ae1b7527486e18c63c1c5b6fc74a241c63eab588ed78a295471229b1b5c20cc230bc6d81cdbff66b8d901e6d61cd5f385b31d0b492f36ab440b193fa86c9114fca2f2d1a4f73d9a05b1a26822135c86941ec989a6fd3962af599d3e8a0b9d87cf08205a2d4c2498c1682402a629ff583cdd4abd3ce46e76bb5cea903f01a9e88408584991b2bf5633671d9c4303e1045a6224d59dc3bdead4f4db2c555c92b296551d1f79db944d7e632bb6f6ccc93fb3cd69ab6b97e592e41529917fb5bc21226912815717a277e5edb3577519b8fe9f3885f08c6b24d957be1e119b7d592012fedf58c51344317c209d882fcc3212b39f45b0001b620ae8a3756ff1c5567557694a10da1ec3918d935a3a632f82ab8a3a909b663ac2de45d4a24c3e625eb73ba7c6f6460e2742b05cb438008691e2fae34e709b078759b7c766e7c093633b3224ebc2e1d76bc708f439760f31ddb1ac76251093ecb2e6a917e0910a06dde3acfdce6c24cae79944cce15a8fa07abc9ab6de33861abd43ff1e5948d217acc7aa3fd1a561abdddbad0ea60fb5088c8be468227fae9ac182c98de0b8833aba584f05023cbc4593a155463fc98a5e895d3297208913b4af3c81e7749db4580f6b19a247cc1cb15dc57d8cb2bc164f450fd252d2a903fa8e99ff99616ba949f323e6f9b69a1ff7e0ae57f9473164c1f60014a8e296d3bca29488346ea0220b8d9937a04d0e5a06a8ac25020c5e63c3f887c3c586601b652f9e2bc97ad88a8f1b895ec380da4b525472e290cf29a3ded06308fac229da619325e5221912a828e03e8ded81df5f709b452ce392a3a39c1aadd4612f8acf6247f4dcd082c1253f65279364c99a97757816a86ecddc05ad48a32158565d44aef33c0a6768fcb7af6c9ec8618efa0e8680761d00052f65a80a327bc74a1ad5975621e6c74e4e7b471c882ed63ac777eb34c6346cf603cbdfc14e76198fa83af5a742fbf385c9d528e6586653f24ed5374d70a4a5ea1ac7b4b04b49635f84b18a281921671df2bdc037ca182b9b645bc250c2001c36a46e8a4e4e850acf535edde1b4a233269d8ef7738d5532c75c71670921f8b4ea656ceb4a4066a04bb8a540988cc14e938b141fe51bf0d647de78bedd148cde21eff2428ebac2e4b40c466f2bac3100a16ba6fcffe361e752873c1e92104582ab48dedb3b93ddd29d81fac27b84e9a2538468f91172171e710aa992f3d488360be5f1a8ebf06223ff30d55953beea4abb0b3f6364834be74e9c6b6cf1a498bea069834892678217d12a0196df373e84e7c5c3c8e33d5666892bf2405f5f16203d5d8058f9c9ff54e7cdb429d2dddd14fd0009a9c36e4c4585b373228eec0fdc4d156950e4810f44867968937b4c8efeeebc32737b5a8a1a09c0308e65d528c877d3fa494b1c323baa49fe1c451a4fe1d4badf29e39d5387478b99f17f37fbe2fcb0fb1855a62476bcda1121a38a086c529fbe7b5764e2ae6c686a02051619740baada5a2fb76dc37f4ad80757dcaded49cb38e56674b4797ed403261d83a57832062c9dfc138c447d2543dfb21b44b423ce536b7472342ae0f788a36ea087f500b6476181d5379d7e8d70d8311e9e020f95750d314ab4e2fd4b8229cb354eba745eea10c66c7d0d1128fdfe91d6c7b1d0489264861f5404f6319a9ddc0b1bd0288b62dd76b79f86f0588e3a353b3098e1629de6808c2dc8ee7e432d3f7a4cabf102ad524ce4c6a3a2c962675e985378d904c4d6efade29e3f95ffe80a984d932e53643da5f622d535de5887b04c9c7616f31a16d279f26c02213532e3798645e4a09aa0785ab6e330818140347a2a80abd1d8e271bbf916c492125e914830f28619536ec7a1c842331ef2921b267e3666c96a122447e30928db0d29c958f9e492b8568734eb7f84ccddb1e5dbc0b6cc16c1fda02a524654a0ef8d4d01aad02f1a8fba9dacdb1380e38637203030ef1a8115d62c7c72ac7f7bf74b4decbefdc0f101d804c7f42e68ee44bbaed6fc36f0251b5ae9f42853d0954e46900fd75972f9af23cdf864f2f285f0f31521c5ad6e549084734f8dd510919aeb820ebd723b7ed30a89d6e2af2df8c4d796eb29c508b7306512d698cc153f0d35540bf757f3e25d4c573e71c4b4c8402bde20481d3459f11b477bfc5dab01281fb8e6c76cdad4974c14e0d2cdd93ab64b0810c18e8346ee495d0fc49f3b97a3a40f2d445777951521bd638000808f2c258daa20461eaeb98ccfc952bcd10364ac586843eef5096113b62e57828e5326f752431839cd9e71e13a248873c61065cf311cd6a3b37c12d952474fc8022fb11031d8091622ced80b12018f8a80e84d883c3749a5fac55c6f05e4ea352bc954fea3299aab478c2ae73e787c6dad3df26bd9317c7569f752b956fd806dd1f6d82df9ac538b7c404d1b97402c8ed3e90e9462b6a8bbae259cf20648872b549e01721da0adc082d0f4e03cd38ac5ad787beea3cc3ae43966a1402c7e54a5dd3d3d0cc62ad3a8283b74c2d3779375bae563de07ea3b1945c0bbce91fe1a824e04906255f4165f4e3d727ecca00e9abc587de38b825c6c7f86f4409642d6684205f90a03a880bd317c5aec106a461f3f158f152f26f7b4747213f631c5eb27f2b05ceb5da505ba05e82478e53021c484b08859dbccca5e1e6e38115995db6ba34891a604ab46574f8455f44a0e40658d944110a27908fc9d3b2147d2b3cad2bd9edae0a463b5800cc32f6f944cc7f35e06d67dc7fb227e3dffe2b11c29f8003a8aefd7469ae7488b2af5f3e4a843d40ec183262fa37d82a50cfbebc77253ac7259212fc492a6c33cc4fbc86e78f506a74be94e5edb9e6eb283a9f8a83101f3b3f13429c4a0032a0954c18b3455d2243a2c84ce1c9e8345a2d75f42ba376985fbabd979ffcd97aa6ed6452f1e1fd42a13e8f01271136652de2148fb54af4f3b93813014cfb5476423b0ec06172e0eeba8503a4e16faff749f8fc9b12a822ffae780416d3678432c0d658d5a712d2397291acf14d12412df8e9c353858b7fefbfe3bfb90699c5a4ea50cb895211e35170247eca1d44803beed64a61357cb0fc1f5babacfbac2c027ab56c7f010246f9bd5214b3349e751ab8a6dd7e69eebcf564684fe29c1e035f01caee11cd6a49dbe11a05920f41d3d9ac59d03483a33714603c0d1b5fe38ba9f517d170ded57fcd394bfe25e660e38a089993301ad58ae20cffb4a8d78f987e5fadc6be770249eae31a65c0d5b40156c225c0e1889b5c3a41b13597d7b6f290086f0f2f682e7c63c6f0a3f3b2fa88846cf0ac84b78a54a29c8155a0db21ed3e823d20284cedf75fdb40f6fd3e1099981cbc5f119846bd4ec29e55d0178e9a227b013519c28bdf8e9e04b5e4957719188ecc9331f598bb0719cb97c2408e884601c011b01d86652ba537c1f8713c608dad4994d4ed7f786771cfc51f0495406353b4850b77e9dea4fd684cfeaf6b2763499be4df9b6fb4c624b320da8d84ea25793aee5bd16bfaf5406cfded9f58c3f535f54c03bb1b20f4106a2465dcc3a758c1f1a924e567b99feda45d0742f073558db72c4eac0b729ba726fa086c21b8f4464b908c84e744c0c27a67911889b77c5e5dd8e87106825d939207da3a74289a197174ff2c1cd89d1659f398821f8f2cf0c81dbba69d6933896913904ced56cc50acbd337c36dacf175b264b9e9518d856ccccaaab6d0d329eee8383474e434a2d68c51256f57900e18adb4799ffc2f45fe0f550cd49242f494b9c45e16ef1c005e31f8523f2eb6c4598ccbed376f3a638264fc6fb128a2e63c8490ee3c5b2b2c8ac19f647de6e22ec7574a67ea49c9a5c404fa7b39ad98d2d017f2056239df839a2719be27d993767c1b46decdea2e31f4c8e73d7514bbae8f026048754fdae46017eae25ae6ca1288f3441aa6d0f962f1c62eea19663c8fb895148b36ef2ee1afa363d50f3053ffdcbda2e96e13c619b13b9fa6b31dca929126cf3bf1be8c9374c6fa652bae273679924172c1e4dd4e3f9a5f892532138d91375438c1dc98434d238ec81166aa28f878ef9f130676f55e3ecc808f718e7cedbf40dcb270368762d8", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 13.027955722s ago: executing program 4 (id=437): epoll_wait(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xfffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40044103, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x68881) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r7, 0x0, 0x0) 12.896415286s ago: executing program 0 (id=439): r0 = socket(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x855) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000001900), 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x0) getpriority(0x2, r1) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f00000000c0)=""/6, 0x6) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0) 12.167308589s ago: executing program 4 (id=442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000104000480080002000100000008000100000000000400088010000c800c000b800800"], 0x3c}}, 0x0) 12.048545053s ago: executing program 4 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 11.895234588s ago: executing program 4 (id=444): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.547992809s ago: executing program 3 (id=449): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 11.49900966s ago: executing program 1 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 11.252703068s ago: executing program 3 (id=452): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7597970", 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="03d84e40c93c41f9aa166f21751eb0e38d24d22c3dcf2f12fe52ddcfaf7f83f150b11c1f6b6049a6e36126ad6b6883682b8611c0c78cfb94c6e6360f8b19221a1ca0268b3026f66ab2dba7765016cfa08f11a6369e374eab38d5756715528d3aa4ac18deaff75ca7e056dd60004395d26fc058", 0x73, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x2140403) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0x4) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x218440, 0x0) r4 = io_uring_setup(0x54e6, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) io_uring_setup(0x421e9, &(0x7f00000001c0)={0x0, 0xfe5, 0x1000, 0x2, 0x211, 0x0, r4}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xfff1, 0x9}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = accept4(r2, 0x0, 0x0, 0x80800) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) 10.413903995s ago: executing program 1 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x48200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xdddd0000, 0x80a0000, 0x26000, 0x30000], 0x4, 0x92}) 10.095369825s ago: executing program 1 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)=@arm64) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) 10.042126387s ago: executing program 1 (id=455): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) 9.00975794s ago: executing program 0 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffaa, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2d1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01018000000000000000000900"/26], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r5, 0x27f4, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) pipe2$watch_queue(&(0x7f0000001180), 0x80) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r6, 0x40045108, &(0x7f00000002c0)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 7.419176162s ago: executing program 0 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x505, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 7.418856671s ago: executing program 1 (id=458): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02) 7.352696104s ago: executing program 3 (id=460): syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7.15407433s ago: executing program 4 (id=462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat$null(0xffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x68) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) uname(0xfffffffffffffffc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x10, 0x100, 0x3c, 0x41540200}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 5.154721254s ago: executing program 3 (id=464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x10, 0x3, 0xfc, 0x2, 0x0, 0xa, 0xe00}}, 0x1c}, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.487545268s ago: executing program 2 (id=465): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x400}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000045c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000001100)="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", 0x523, 0x10000800, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.486716137s ago: executing program 1 (id=466): r0 = socket(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x855) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000001900), 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) getpriority(0x2, r1) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f00000000c0)=""/6, 0x6) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0) 3.183193847s ago: executing program 4 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e"], 0xd0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="e2713a787c2fa96c68eecfb6effe5f1291bdc4f0c000fae6961f1606d1fedf218381a14c7a5a7c78073e1abe4ff13ac1f2419d6af2e372cf7a7b2b280fde213f7df01f0896d81346f6d0b8e46f0c22c22e7db8ba30a82747bab1a5e82f3e217caee4997a7886da11a75d7ae3de3ca9f7f45dbac849d457c9008504d0eea695085713776f2cdf66b6aeda9722c8678bb2a6dcea05a0639723a18d7f8b313b3873e304ab2b163618aaf2b1cf287579751a1034d52e8d7ff8148db72cc21375746466808148306ab0e3"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x320, {0xc}, {}, @quote={{0x3, 0x8}, 0x7e59}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {}, {}, @quote}], 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x985, 0x12) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) acct(&(0x7f00000001c0)='./file0\x00') 1.996407165s ago: executing program 3 (id=468): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000013c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="04002a0044002d80040000000a00000001010101010100000a0000feff018a83eca461ff8963c09e244ff67c1f01"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x20040000) 1.591950439s ago: executing program 3 (id=469): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x9, 0x7, 0xf, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0x93, &(0x7f0000000280)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0xa, 0x6}, {0x3, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x10}, {0x0, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7}, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, 0x0, 0x0, 0xfc) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 1.338740327s ago: executing program 2 (id=470): r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4, 0x1000}], 0x18) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1f4, 0x0) 427.213016ms ago: executing program 2 (id=471): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/99, 0x63}], 0x1, 0x60, 0x99}}], 0x48, 0x8004}, 0x0) 420.381826ms ago: executing program 0 (id=472): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x160, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109024e01020105c003090400000102020000072406000181"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 251.322782ms ago: executing program 2 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') timer_create(0x2, &(0x7f0000000400)={0x0, 0x21, 0x2, @thr={&(0x7f0000000200)="1683afaf05b91122383ebd03831e9a57aa56da3332bd43cf2036720469a55d09b55d4d7349e09f649734db4a2cf6a9a78336ac672f8e321ba3e898e4c233d914add7702e71afab8fcb65271749df92108b3534ee45ed09d3217a7672374ed9", &(0x7f0000000340)="8e601fa1e6dcfb78bc0656c0792a1fb0c4e7da5336f27e264cfaf97eb96c8e2ba7fb7bf6a34b46e69bea31aa497c6fd75b6f2c9250a745805772a454d148a049be672af2eb83316683caa82550d879aef8ade724914a5722a3281b106837f6dae3ca915ebeb115a6e5025164c30d33051c8273151ce7ebccf45abf6431bcc07100ee"}}, &(0x7f0000000440)) lseek(r0, 0x10000000005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setuid(0xee00) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r4, 0x8}, &(0x7f00000002c0)=0xc) 227.486502ms ago: executing program 2 (id=474): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) r3 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000f97000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) io_uring_setup(0xfe1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002e9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f00000002c0)={0x130, 0x0, r6, {0x4000000000007, 0x8, 0x0, '\x00', {0x1, 0x200, 0x4, 0x412, 0xffffffffffffffff, 0x0, 0x2000, '\x00', 0x3, 0x8000, 0x7, 0x7, {0x1, 0x12b}, {0x3d82, 0x5}, {0xc, 0x9}, {0xfffffffffffffefa, 0xdb23}, 0xffffffff, 0x5, 0xffe00000, 0x8000}}}, 0x130) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 'vcan0\x00'}) 0s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. syzkaller login: [ 62.997689][ T4175] cgroup: Unknown subsys name 'net' [ 63.145761][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.554620][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.914456][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.055867][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.063147][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.072052][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.097490][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.104719][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.112958][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.168804][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 66.184919][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.220216][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.233909][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 66.244997][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.301931][ T4189] team0: Port device team_slave_0 added [ 66.307966][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.329354][ T4189] team0: Port device team_slave_1 added [ 66.394595][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.401645][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.427687][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.457925][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.464976][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.490975][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.522249][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.529430][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.537499][ T4199] device bridge_slave_0 entered promiscuous mode [ 66.553479][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.561024][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.568865][ T4197] device bridge_slave_0 entered promiscuous mode [ 66.583339][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.591354][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.599423][ T4197] device bridge_slave_1 entered promiscuous mode [ 66.607055][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.614346][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.622530][ T4199] device bridge_slave_1 entered promiscuous mode [ 66.642443][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.649535][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.658051][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.689404][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.696617][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.704701][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.713430][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.720589][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.728350][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.737078][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.754893][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.771031][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.778116][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.786192][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.802274][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.843840][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.855701][ T4197] team0: Port device team_slave_0 added [ 66.865632][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.872945][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.888323][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.905505][ T4197] team0: Port device team_slave_1 added [ 66.925149][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.943062][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.966710][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.993586][ T4199] team0: Port device team_slave_0 added [ 67.007536][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.014604][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.046358][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.072442][ T4199] team0: Port device team_slave_1 added [ 67.080321][ T4190] team0: Port device team_slave_0 added [ 67.088142][ T4188] team0: Port device team_slave_0 added [ 67.094947][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.103020][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.129121][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.150327][ T4190] team0: Port device team_slave_1 added [ 67.163959][ T4188] team0: Port device team_slave_1 added [ 67.203858][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.210953][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.237654][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.275972][ T4197] device hsr_slave_0 entered promiscuous mode [ 67.282751][ T4197] device hsr_slave_1 entered promiscuous mode [ 67.289260][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.297165][ T4197] Cannot create hsr debugfs directory [ 67.303373][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.310867][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.336891][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.356165][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.363279][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.390075][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.402123][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.409092][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.435560][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.448013][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.455272][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.481661][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.502001][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.508990][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.535516][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.621562][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.628428][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.635296][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.642988][ T4190] Cannot create hsr debugfs directory [ 67.652303][ T4199] device hsr_slave_0 entered promiscuous mode [ 67.658926][ T4199] device hsr_slave_1 entered promiscuous mode [ 67.665842][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.673871][ T4199] Cannot create hsr debugfs directory [ 67.709644][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.716762][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.727305][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.735773][ T4188] Cannot create hsr debugfs directory [ 67.751007][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 67.757761][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 67.764377][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 67.770785][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 67.777556][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 67.996606][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.027162][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.039236][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.061457][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.122511][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.132868][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.142116][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.157138][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.237920][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.250995][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.275114][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.282904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.293036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.301995][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.312706][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.323527][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.342109][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.351415][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.361740][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.368953][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.378912][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.388458][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.397537][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.404649][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.434176][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.445508][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.454372][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.478193][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.500398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.509507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.522507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.532843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.549590][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.560603][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.584028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.592477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.602501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.611762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.620935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.629641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.638673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.647714][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.658106][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.676096][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.687438][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.726514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.737898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.747379][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.754523][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.764322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.775883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.785706][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.792832][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.801817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.858616][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.868180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.879293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.890259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.902381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.914489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.926501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.938770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.947890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.958436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.980592][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.993864][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.005337][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.015459][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.024032][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.037653][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.046160][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.062093][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.072190][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.084034][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.103226][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.118730][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.130488][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.138026][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.174448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.187770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.202830][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.210004][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.224482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.254894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.264563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.273714][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.280845][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.312370][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.322079][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.337728][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.349174][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.373350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.401307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.412076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.421747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.432304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.441088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.449543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.458510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.473955][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.492345][ T4189] device veth0_vlan entered promiscuous mode [ 69.502495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.511325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.519023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.527710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.536576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.545664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.556340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.564706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.578980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.588354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.597464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.607365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.616094][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.623236][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.632955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.646607][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.663778][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.674578][ T4189] device veth1_vlan entered promiscuous mode [ 69.699028][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.723731][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.743361][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.763067][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.770340][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.794994][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.806971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.826616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.840208][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 69.846596][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 69.860064][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.862880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.874465][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.890212][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 69.897059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.915152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.936650][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.972157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.981253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.989096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.998838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.007989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.017266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.028127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.038442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.053842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.065413][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.072582][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.092699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.101969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.113036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.134864][ T4189] device veth0_macvtap entered promiscuous mode [ 70.146974][ T4189] device veth1_macvtap entered promiscuous mode [ 70.163998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.173373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.181264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.191487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.200639][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.207737][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.216041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.226839][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.250136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.267099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.277985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.295923][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.308332][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.326078][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.334893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.343712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.356578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.365275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.374693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.410337][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.427188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.438099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.453685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.469046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.478398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.487846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.501995][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.514138][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.528267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.537664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.546440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.556189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.584558][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.600650][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.609516][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.620267][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.664639][ T4199] device veth0_vlan entered promiscuous mode [ 70.675674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.686474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.695302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.705355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.727025][ T4197] device veth0_vlan entered promiscuous mode [ 70.744957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.765549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.774872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.788871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.803637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.811746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.823912][ T4199] device veth1_vlan entered promiscuous mode [ 70.840192][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.849518][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.862747][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.883050][ T4197] device veth1_vlan entered promiscuous mode [ 70.904029][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.979036][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.987524][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.996432][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.004921][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.014404][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.025007][ T4199] device veth0_macvtap entered promiscuous mode [ 71.067705][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.076245][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.084446][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.092243][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.102231][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.118708][ T4199] device veth1_macvtap entered promiscuous mode [ 71.144454][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.155655][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.167573][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.183409][ T4197] device veth0_macvtap entered promiscuous mode [ 71.194970][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.207983][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214812][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.221873][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.232512][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.241320][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.254657][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.266109][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.276680][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.282755][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.294838][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.308003][ T4197] device veth1_macvtap entered promiscuous mode [ 71.320501][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.331515][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.342628][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.351653][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.359649][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.369413][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.385474][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.394677][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.404593][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.413587][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.454471][ T4190] device veth0_vlan entered promiscuous mode [ 71.463161][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.472229][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.482049][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.492001][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.502820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.512746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.536683][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.548030][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.558346][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.569035][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.582160][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.592618][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.594373][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.610398][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.618655][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.628350][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.640476][ T4190] device veth1_vlan entered promiscuous mode [ 71.659091][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.670831][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.684812][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.698860][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.711177][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.718554][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.727014][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.736204][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.745118][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.775837][ T4188] device veth0_vlan entered promiscuous mode [ 71.789761][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.803673][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.825708][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.837418][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.851688][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.867798][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.876668][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.888856][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911515][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.932478][ T4188] device veth1_vlan entered promiscuous mode [ 71.960639][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.969018][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.977346][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.997556][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 72.005830][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.014438][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 72.031680][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 72.042105][ T4190] device veth0_macvtap entered promiscuous mode [ 72.070264][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.080004][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.094962][ T4190] device veth1_macvtap entered promiscuous mode [ 72.146457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.197579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.228498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.296941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.494961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.526273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.618567][ T4188] device veth0_macvtap entered promiscuous mode [ 72.754417][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.804855][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.846642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.892005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.948506][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.013058][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.023523][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.034939][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.045058][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.055616][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.078520][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.097480][ T4188] device veth1_macvtap entered promiscuous mode [ 73.123389][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.133749][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.143325][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.156756][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.168187][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.178371][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.188977][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.199145][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.210610][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.225706][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.251209][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.259099][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.272655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.290479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.299467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.332068][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.350528][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.359267][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.368538][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563102][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.627169][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.668461][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.716680][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755367][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.799354][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.837682][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.883016][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.975169][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.990985][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 74.071660][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 74.092584][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 74.115264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.154507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.165461][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 74.217355][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 74.277912][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.308054][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.348022][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.392518][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.437635][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.456155][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.466962][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.477672][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.487619][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.499998][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.517557][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.525118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.555175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.595222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.645905][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.655593][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.668674][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.679610][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.791034][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.800033][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.823312][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.857500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.885047][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.890974][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.904216][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.939032][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.949031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.960119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.049974][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 75.180258][ T4236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.214380][ T4236] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.400276][ T4236] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 75.413318][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.428488][ T4236] usb 2-1: Product: syz [ 75.433346][ T4236] usb 2-1: Manufacturer: syz [ 75.437986][ T4236] usb 2-1: SerialNumber: syz [ 75.455259][ T4236] usb 2-1: config 0 descriptor?? [ 75.976294][ T150] block nbd1: Attempted send on invalid socket [ 75.984145][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.998684][ T4303] qnx6: unable to read the first superblock [ 76.006637][ T150] block nbd1: Attempted send on invalid socket [ 76.013426][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.025227][ T4303] qnx6: unable to read the first superblock [ 76.031296][ T4303] qnx6: unable to read the first superblock [ 77.162404][ T4305] ======================================================= [ 77.162404][ T4305] WARNING: The mand mount option has been deprecated and [ 77.162404][ T4305] and is ignored by this kernel. Remove the mand [ 77.162404][ T4305] option from the mount to silence this warning. [ 77.162404][ T4305] ======================================================= [ 77.224115][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.237025][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.264930][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.618633][ T4311] Zero length message leads to an empty skb [ 78.365503][ T4235] usb 2-1: USB disconnect, device number 2 [ 78.393382][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.009932][ T4332] syz.1.17 sent an empty control message without MSG_MORE. [ 81.911135][ T26] audit: type=1804 audit(1780246252.149:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 82.425076][ T4338] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by " [ 83.095044][ T4336] sched: RT throttling activated [ 83.096058][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.259973][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.639851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 83.659851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 83.679851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 83.951058][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 83.963492][ T4206] CPU: 0 PID: 4206 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 83.971072][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.981143][ T4206] Workqueue: hci1 hci_rx_work [ 83.985873][ T4206] Call Trace: [ 83.989179][ T4206] [ 83.992138][ T4206] dump_stack_lvl+0x188/0x250 [ 83.996857][ T4206] ? show_regs_print_info+0x20/0x20 [ 84.002078][ T4206] ? load_image+0x400/0x400 [ 84.006703][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 84.011846][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 84.016550][ T4206] ? process_one_work+0x85f/0x1010 [ 84.021708][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 84.026954][ T4206] kobject_add_internal+0x6e0/0xd90 [ 84.032187][ T4206] kobject_add+0x160/0x230 [ 84.036781][ T4206] ? kobject_init+0x1d0/0x1d0 [ 84.041515][ T4206] ? klist_children_get+0x50/0x50 [ 84.046575][ T4206] ? get_device_parent+0x121/0x3f0 [ 84.051731][ T4206] device_add+0x483/0xfb0 [ 84.056105][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 84.061081][ T4206] le_conn_complete_evt+0xc48/0x15c0 [ 84.066417][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 84.071565][ T4206] ? __mutex_trylock_common+0x155/0x260 [ 84.077138][ T4206] hci_le_meta_evt+0x285/0x3c90 [ 84.082019][ T4206] ? hci_event_packet+0x37b/0x1370 [ 84.087156][ T4206] ? __lock_acquire+0x7d10/0x7d10 [ 84.092213][ T4206] ? hci_remote_host_features_evt+0x280/0x280 [ 84.098311][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 84.103970][ T4206] ? mark_lock+0x94/0x320 [ 84.108321][ T4206] ? mutex_unlock+0x10/0x10 [ 84.112851][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 84.118862][ T4206] ? lock_chain_count+0x20/0x20 [ 84.123738][ T4206] ? __rwlock_init+0x140/0x140 [ 84.128552][ T4206] hci_event_packet+0xe48/0x1370 [ 84.133517][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 84.138755][ T4206] ? rcu_lock_release+0x20/0x20 [ 84.143624][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 84.148848][ T4206] hci_rx_work+0x255/0xa10 [ 84.153304][ T4206] process_one_work+0x85f/0x1010 [ 84.158285][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 84.163935][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 84.169265][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.174365][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 84.179955][ T4206] ? wq_worker_running+0x97/0x170 [ 84.184998][ T4206] worker_thread+0xaa6/0x1290 [ 84.189701][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 84.194946][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 84.200878][ T4206] kthread+0x436/0x520 [ 84.204977][ T4206] ? rcu_lock_release+0x20/0x20 [ 84.209848][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 84.214469][ T4206] ret_from_fork+0x1f/0x30 [ 84.218947][ T4206] [ 84.241911][ T4206] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.260693][ T4206] Bluetooth: hci1: failed to register connection device [ 84.649852][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.669848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.689847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.709843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.729872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.749847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 84.769848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 85.469728][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 85.580057][ T4236] usb 4-1: device descriptor read/all, error -71 [ 85.690964][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 85.706876][ T4349] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.739210][ T4350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22'. [ 86.055974][ T4349] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.555981][ T2856] cfg80211: failed to load regulatory.db [ 86.739991][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.279999][ T26] audit: type=1800 audit(1780246259.189:3): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 88.051460][ T4236] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 88.089386][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.108902][ T4236] usb 4-1: Product: syz [ 88.115211][ T4236] usb 4-1: Manufacturer: syz [ 88.123660][ T4236] usb 4-1: SerialNumber: syz [ 88.143286][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.155223][ T4236] usb 4-1: config 0 descriptor?? [ 88.213203][ T4236] ch341 4-1:0.0: ch341-uart converter detected [ 89.060199][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.160202][ T7] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 89.260696][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 89.294286][ T7] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 90.001014][ T7] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 90.140415][ T7] usb 2-1: string descriptor 0 read error: -71 [ 90.153296][ T7] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 90.180106][ T4236] ch341-uart ttyUSB0: failed to read break control: -71 [ 90.189080][ T4236] ch341-uart: probe of ttyUSB0 failed with error -71 [ 90.196231][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.227613][ T4236] usb 4-1: USB disconnect, device number 3 [ 90.250378][ T4236] ch341 4-1:0.0: device disconnected [ 90.260221][ T7] usb 2-1: can't set config #1, error -71 [ 90.288917][ T7] usb 2-1: USB disconnect, device number 3 [ 95.863291][ T4448] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 97.649912][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.230318][ T23] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 98.268048][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.328367][ T23] usb 1-1: Product: syz [ 98.350014][ T23] usb 1-1: Manufacturer: syz [ 98.373438][ T23] usb 1-1: SerialNumber: syz [ 98.448083][ T23] usb 1-1: config 0 descriptor?? [ 98.604541][ T23] ch341 1-1:0.0: ch341-uart converter detected [ 99.008072][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 100.391024][ T23] usb 1-1: failed to send control message: -110 [ 100.397384][ T23] ch341-uart: probe of ttyUSB0 failed with error -110 [ 101.474106][ T4192] usb 1-1: USB disconnect, device number 2 [ 101.486350][ T4192] ch341 1-1:0.0: device disconnected [ 101.517211][ T4495] kvm [4494]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 101.570588][ T4495] kvm [4494]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 101.673272][ T4206] block nbd0: Receive control failed (result -107) [ 101.686859][ T4508] block nbd0: shutting down sockets [ 103.173643][ T4526] process 'syz.1.68' launched './file0' with NULL argv: empty string added [ 103.464887][ T4192] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.959980][ T4192] usb 4-1: Using ep0 maxpacket: 32 [ 104.191239][ T4192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.227304][ T4192] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.316410][ T4550] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 105.063671][ T4549] mmap: syz.0.80 (4549) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.230484][ T4192] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 105.250208][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.269996][ T4192] usb 4-1: Product: syz [ 105.279647][ T4192] usb 4-1: Manufacturer: syz [ 105.312016][ T4192] usb 4-1: SerialNumber: syz [ 105.436597][ T4192] usb 4-1: config 0 descriptor?? [ 105.933584][ T4321] block nbd3: Attempted send on invalid socket [ 105.940796][ T4321] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.951817][ T4563] qnx6: unable to read the first superblock [ 105.960227][ T4321] block nbd3: Attempted send on invalid socket [ 105.966480][ T4321] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.977861][ T4563] qnx6: unable to read the first superblock [ 105.983962][ T4563] qnx6: unable to read the first superblock [ 106.609003][ T4566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.84'. [ 106.880612][ T4548] kvm [4547]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 106.935232][ T4548] kvm [4547]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 107.857127][ T4278] usb 4-1: USB disconnect, device number 4 [ 109.644740][ T4635] device syzkaller0 entered promiscuous mode [ 110.780056][ T4664] netlink: 256 bytes leftover after parsing attributes in process `syz.3.101'. [ 110.819832][ T4664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.101'. [ 114.136290][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.232937][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.270164][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.309974][ T4693] syz.3.108 uses obsolete (PF_INET,SOCK_PACKET) [ 114.919539][ T4704] netlink: 'syz.0.112': attribute type 49 has an invalid length. [ 117.540041][ T4177] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.020041][ T4177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.059675][ T4177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.119891][ T4177] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.169771][ T4177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.225716][ T4177] usb 5-1: config 0 descriptor?? [ 118.409960][ T4278] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.180126][ T4177] usb 5-1: string descriptor 0 read error: -22 [ 119.414158][ T4177] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 120.095870][ T4177] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 120.168176][ T4177] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 120.228719][ T4177] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 120.481269][ T4751] CUSE: unknown device info "" [ 120.486282][ T4751] CUSE: unknown device info "" [ 120.491342][ T4751] CUSE: unknown device info "" [ 120.496315][ T4751] CUSE: unknown device info "" [ 120.501301][ T4751] CUSE: unknown device info "+" [ 120.506329][ T4751] CUSE: unknown device info "" [ 120.511342][ T4751] CUSE: unknown device info "" [ 120.516271][ T4751] CUSE: zero length info key specified [ 120.774630][ T4177] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 120.791474][ T4750] 9pnet: Could not find request transport: virtie [ 120.799745][ T4177] usb 5-1: USB disconnect, device number 2 [ 120.810206][ T4278] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.890202][ T4278] usb 4-1: config 250 has an invalid interface number: 15 but max is 0 [ 120.905433][ T4278] usb 4-1: config 250 has no interface number 0 [ 120.922062][ T4278] usb 4-1: config 250 interface 15 has no altsetting 0 [ 121.169988][ T4278] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d7.d0 [ 121.217251][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.422219][ T4278] usb 4-1: Product: syz [ 121.426552][ T4278] usb 4-1: Manufacturer: syz [ 121.450085][ T4278] usb 4-1: can't set config #250, error -71 [ 121.472765][ T4278] usb 4-1: USB disconnect, device number 5 [ 126.469905][ T4278] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.689869][ T4247] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.860068][ T4278] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.899319][ T4278] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.961571][ T4278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.009939][ T4278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.054187][ T4278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.110676][ T4247] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 127.124526][ T4247] usb 1-1: config 0 has no interface number 0 [ 127.144192][ T4247] usb 1-1: config 0 interface 4 has no altsetting 0 [ 127.190109][ T4278] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.223345][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.240274][ T4278] usb 4-1: Product: syz [ 127.244577][ T4278] usb 4-1: Manufacturer: syz [ 127.341147][ T4278] cdc_wdm 4-1:1.0: skipping garbage [ 127.346562][ T4278] cdc_wdm 4-1:1.0: skipping garbage [ 127.425251][ T4278] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 127.451748][ T4278] cdc_wdm 4-1:1.0: Unknown control protocol [ 127.553057][ T4247] usb 1-1: New USB device found, idVendor=2357, idProduct=9000, bcdDevice=99.89 [ 127.676324][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.830444][ T4247] usb 1-1: Product: syz [ 127.903762][ T4247] usb 1-1: Manufacturer: syz [ 128.017724][ T4247] usb 1-1: SerialNumber: syz [ 128.317428][ T4247] usb 1-1: config 0 descriptor?? [ 128.323469][ T4177] usb 4-1: USB disconnect, device number 6 [ 129.260795][ T4247] usb 1-1: USB disconnect, device number 3 [ 129.595856][ T4838] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 129.602850][ T4838] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.612402][ T4840] UBIFS error (pid: 4840): cannot open "", error -22 [ 129.613711][ T4838] vhci_hcd vhci_hcd.0: Device attached [ 129.930240][ T4247] usb 42-1: SetAddress Request (2) to port 0 [ 129.938505][ T4247] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 130.209676][ T4839] vhci_hcd: connection reset by peer [ 130.217152][ T4269] vhci_hcd: stop threads [ 130.222281][ T4269] vhci_hcd: release socket [ 130.259944][ T4269] vhci_hcd: disconnect device [ 130.671999][ T4858] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by " [ 131.431955][ T4860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 131.632256][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 131.913611][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.935189][ T4875] trusted_key: encrypted_key: insufficient parameters specified [ 132.169874][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 132.297358][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.074548][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.086688][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096861][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 133.109169][ T4231] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.783087][ T4247] usb 42-1: device descriptor read/8, error -110 [ 135.790344][ T4231] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 135.799426][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.909893][ T4231] usb 2-1: Product: syz [ 135.914109][ T4231] usb 2-1: Manufacturer: syz [ 136.044992][ T4231] usb 2-1: config 0 descriptor?? [ 136.150370][ T4231] usb 2-1: can't set config #0, error -71 [ 136.179967][ T4231] usb 2-1: USB disconnect, device number 4 [ 136.320046][ T4247] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 136.329943][ T4247] usb usb42-port1: attempt power cycle [ 136.700897][ T4247] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 137.103897][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 137.119672][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 137.267271][ T4926] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by " [ 137.661476][ T4247] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 137.748360][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.878026][ T4247] usb usb42-port1: unable to enumerate USB device [ 138.843162][ T4952] smc: net device wlan0 applied user defined pnetid SYZ1 [ 139.321678][ T4961] fuse: Bad value for 'fd' [ 144.069147][ T5017] 0: reclassify loop, rule prio 0, protocol 800 [ 145.960004][ T4236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.220078][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 146.345702][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.690311][ T4236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.885611][ T4236] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 146.962259][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.030835][ T5043] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by " [ 147.348684][ T4236] usb 5-1: Product: syz [ 147.728312][ T4236] usb 5-1: Manufacturer: syz [ 147.739489][ T4236] usb 5-1: SerialNumber: syz [ 147.764854][ T4236] usb 5-1: config 0 descriptor?? [ 148.262634][ T4321] block nbd4: Attempted send on invalid socket [ 148.269034][ T4321] blk_update_request: I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.281871][ T5051] qnx6: unable to read the first superblock [ 148.292268][ T4321] block nbd4: Attempted send on invalid socket [ 148.299864][ T4321] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.311091][ T5051] qnx6: unable to read the first superblock [ 148.317155][ T5051] qnx6: unable to read the first superblock [ 150.219426][ T4231] usb 5-1: USB disconnect, device number 3 [ 150.344014][ T5059] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 150.350698][ T5059] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.392977][ T5059] vhci_hcd vhci_hcd.0: Device attached [ 150.425167][ T5060] vhci_hcd: connection closed [ 150.426031][ T4611] vhci_hcd: stop threads [ 150.437274][ T4611] vhci_hcd: release socket [ 150.446561][ T4611] vhci_hcd: disconnect device [ 150.576268][ T5040] ODEBUG: Out of memory. ODEBUG disabled [ 150.886523][ T5070] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 153.288143][ T5070] syz.2.216 (5070) used greatest stack depth: 21072 bytes left [ 155.159901][ T4247] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.920073][ T4247] usb 4-1: Using ep0 maxpacket: 32 [ 156.070681][ T4247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.275347][ T4247] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.119933][ T4247] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 157.151340][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.186209][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.224717][ T4247] usb 4-1: config 0 descriptor?? [ 157.249910][ T4247] usb 4-1: can't set config #0, error -71 [ 157.265413][ T4247] usb 4-1: USB disconnect, device number 7 [ 158.110048][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.164010][ T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.188093][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.205818][ T4192] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.240825][ T7] usb 2-1: config 0 descriptor?? [ 158.246720][ T5122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 158.292281][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 158.315781][ T5128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.236'. [ 158.338851][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 158.355254][ T5128] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 158.419637][ T5132] fuse: Bad value for 'fd' [ 158.770949][ T5141] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by ""[5141] [ 159.110030][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.170103][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.241103][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.325802][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.339349][ T5145] tc action pedit offset must be on 32 bit boundaries [ 159.568754][ T4192] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 159.578045][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.586201][ T4192] usb 1-1: Product: syz [ 159.590994][ T4192] usb 1-1: Manufacturer: syz [ 159.595650][ T4192] usb 1-1: SerialNumber: syz [ 159.602181][ T4192] usb 1-1: config 0 descriptor?? [ 159.610870][ T7] pwc: recv_control_msg error -71 req 04 val 1400 [ 159.630265][ T7] pwc: recv_control_msg error -71 req 02 val 2000 [ 159.655797][ T4192] hub 1-1:0.0: bad descriptor, ignoring hub [ 159.662413][ T4192] hub: probe of 1-1:0.0 failed with error -5 [ 160.160417][ T4192] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 160.424832][ T4192] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 160.446144][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 160.469894][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 160.484865][ T4192] dib0700: firmware download failed at 7 with -22 [ 160.658806][ T5159] tipc: Started in network mode [ 160.660208][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 160.664170][ T5159] tipc: Node identity 7f000001, cluster identity 4711 [ 160.679683][ T5159] tipc: Enabled bearer , priority 10 [ 160.690895][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 160.733726][ T4192] usb 1-1: USB disconnect, device number 4 [ 161.065244][ T5171] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.162456][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 161.181966][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 161.201131][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 161.219943][ T4192] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 161.219946][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 161.249982][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 161.268474][ T7] pwc: Registered as video103. [ 161.284471][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 161.348834][ T7] usb 2-1: USB disconnect, device number 5 [ 161.706247][ T2856] tipc: Node number set to 2130706433 [ 161.719967][ T4192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.766208][ T4192] usb 1-1: not running at top speed; connect to a high speed hub [ 161.885404][ T4192] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 161.995251][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.021270][ T4192] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 162.300153][ T4192] usb 1-1: string descriptor 0 read error: -22 [ 162.515954][ T4192] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 162.526271][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.882755][ T5194] overlayfs: missing 'lowerdir' [ 162.929939][ T5194] overlayfs: failed to clone upperpath [ 163.019956][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.110064][ T4192] snd-usb-6fire 1-1:2.0: unknown device firmware state received from device: [ 163.118902][ T4192] 23 ad 01 c0 cd a8 9d bf [ 163.124059][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.134006][ T4192] snd-usb-6fire: probe of 1-1:2.0 failed with error -5 [ 163.144241][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.160496][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.169735][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.180249][ T7] usb 2-1: config 0 descriptor?? [ 163.379267][ T4192] usb 1-1: USB disconnect, device number 5 [ 164.266778][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 164.372443][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 164.468209][ T5175] udc-core: couldn't find an available UDC or it's busy [ 164.508782][ T5175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 164.713309][ T5224] udc-core: couldn't find an available UDC or it's busy [ 164.824795][ T5224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.134718][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 166.145200][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.382061][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 166.802300][ T4231] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 166.881083][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.889744][ T4231] usb 5-1: Product: syz [ 166.893996][ T4231] usb 5-1: Manufacturer: syz [ 166.899093][ T4231] usb 5-1: SerialNumber: syz [ 166.913771][ T4231] usb 5-1: config 0 descriptor?? [ 167.013189][ T7] usb 2-1: USB disconnect, device number 6 [ 167.052756][ T4231] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 167.446622][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 167.554917][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.771722][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 167.831290][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.928233][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.030102][ T4231] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 168.151912][ T4231] usb 5-1: media controller created [ 168.240796][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.821063][ T4231] usb 5-1: selecting invalid altsetting 3 [ 168.873359][ T4231] ttusb2: set interface to alts=3 failed [ 169.026704][ T5267] fuse: Bad value for 'fd' [ 169.246101][ T4231] DVB: Unable to find symbol tda10086_attach() [ 169.262801][ T4231] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 169.488259][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 169.494023][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 171.486324][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 171.492286][ T4231] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 171.502470][ T4231] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 171.513992][ T4231] usb 5-1: USB disconnect, device number 4 [ 171.663277][ T4231] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 174.580735][ T5314] fuse: Bad value for 'fd' [ 174.987760][ T5322] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by " [ 176.475386][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.210948][ T5341] overlayfs: failed to clone upperpath [ 178.643448][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 179.784056][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.872186][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 179.945406][ T13] usb 1-1: can't read configurations, error -71 [ 183.910571][ T5402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.973707][ T5402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.172066][ T5321] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.490982][ T5421] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by " [ 187.807216][ T5321] usb 1-1: device not accepting address 8, error -71 [ 188.395069][ T5436] pit: kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 189.065167][ T5436] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 192.886052][ T5321] Bluetooth: hci1: command 0x0406 tx timeout [ 192.899628][ T5321] Bluetooth: hci3: command 0x0406 tx timeout [ 192.906566][ T5489] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by " [ 193.053993][ T5495] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.141042][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.690022][ T5321] Bluetooth: hci2: command 0x0406 tx timeout [ 193.696137][ T5321] Bluetooth: hci0: command 0x0406 tx timeout [ 195.925909][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.932271][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.672375][ T4247] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 198.740161][ T5533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.147348][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.171612][ T5542] input: syz1 as /devices/virtual/input/input6 [ 200.089374][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.099311][ T4247] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 200.522823][ T5551] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by " [ 200.524485][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.860677][ T4247] usb 1-1: config 0 descriptor?? [ 200.990059][ T4247] usb 1-1: can't set config #0, error -71 [ 200.998182][ T4247] usb 1-1: USB disconnect, device number 10 [ 202.037978][ T5561] netlink: 'syz.0.369': attribute type 154 has an invalid length. [ 202.060020][ T5561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.369'. [ 202.093042][ T4235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.634562][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 207.694676][ T4235] usb 4-1: device descriptor read/all, error -71 [ 210.534379][ T5606] futex_wake_op: syz.4.381 tries to shift op by 144; fix this program [ 210.545224][ T5607] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by " [ 213.726907][ T5626] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 213.814014][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.836388][ T5627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.446512][ T5638] netlink: 27 bytes leftover after parsing attributes in process `syz.1.390'. [ 216.596377][ T5321] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 218.784501][ T5321] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 219.468204][ T5321] usb 5-1: config 0 has no interface number 0 [ 219.549155][ T5321] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 219.750597][ T5321] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.797018][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 219.813637][ T5321] usb 5-1: string descriptor 0 read error: -71 [ 219.820620][ T5661] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by " [ 219.838555][ T5321] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 221.699100][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.717635][ T5321] usb 5-1: config 0 descriptor?? [ 221.754051][ T5321] usb 5-1: can't set config #0, error -71 [ 221.805874][ T5321] usb 5-1: USB disconnect, device number 5 [ 223.983853][ T4177] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.007066][ T5700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.139110][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 226.367009][ T4177] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 227.691193][ T4177] usb 4-1: config 0 has no interface number 0 [ 227.697795][ T4177] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 227.708264][ T4177] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.764132][ T4177] usb 4-1: string descriptor 0 read error: -71 [ 227.774609][ T5737] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by " [ 227.779542][ T4177] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 228.482836][ C0] hrtimer: interrupt took 26942 ns [ 229.036324][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.145578][ T4177] usb 4-1: config 0 descriptor?? [ 229.179200][ T4177] usb 4-1: can't set config #0, error -71 [ 229.290349][ T4177] usb 4-1: USB disconnect, device number 10 [ 229.580029][ T5773] tipc: Started in network mode [ 229.596187][ T5773] tipc: Node identity 024b1a9bc84d, cluster identity 4711 [ 229.604716][ T5773] tipc: Enabled bearer , priority 0 [ 229.876388][ T4177] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.236637][ T5773] device syzkaller0 entered promiscuous mode [ 230.263215][ T5772] tipc: Resetting bearer [ 230.351758][ T5772] tipc: Disabling bearer [ 230.373896][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 230.483176][ T4177] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 230.492315][ T4177] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 230.543509][ T4177] usb 4-1: Product: syz [ 230.553386][ T4177] usb 4-1: Manufacturer: syz [ 230.558369][ T4177] usb 4-1: SerialNumber: syz [ 230.592027][ T4177] usb 4-1: config 0 descriptor?? [ 230.675544][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 230.710118][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.723091][ T4177] ch341 4-1:0.0: ch341-uart converter detected [ 231.219407][ T4278] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.479517][ T4177] usb 4-1: failed to send control message: -71 [ 231.486099][ T4177] ch341-uart: probe of ttyUSB0 failed with error -71 [ 231.519995][ T4177] usb 4-1: USB disconnect, device number 11 [ 231.553704][ T4177] ch341 4-1:0.0: device disconnected [ 231.579610][ T5813] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 231.589122][ T5813] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 231.671186][ T5823] xt_SECMARK: invalid mode: 2 [ 231.676162][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 231.810377][ T4278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.831857][ T4278] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.011415][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 232.053961][ T4278] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 232.066708][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.076214][ T4278] usb 1-1: Product: syz [ 232.091462][ T4278] usb 1-1: Manufacturer: syz [ 232.096102][ T4278] usb 1-1: SerialNumber: syz [ 232.127789][ T4278] usb 1-1: config 0 descriptor?? [ 232.147333][ T5839] loop7: detected capacity change from 0 to 7 [ 232.167412][ T4809] Dev loop7: unable to read RDB block 7 [ 232.187808][ T4809] loop7: unable to read partition table [ 232.197656][ T4809] loop7: partition table beyond EOD, truncated [ 232.286187][ T5839] Dev loop7: unable to read RDB block 7 [ 232.292516][ T5839] loop7: unable to read partition table [ 232.298423][ T5839] loop7: partition table beyond EOD, truncated [ 232.304773][ T5839] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 232.354276][ T5841] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by " [ 232.584425][ T1108] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 232.638690][ T4247] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 232.698740][ T5845] qnx6: unable to set blocksize [ 232.963621][ T4247] usb 4-1: Using ep0 maxpacket: 32 [ 233.083473][ T1108] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 233.092877][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.134094][ T5823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.235483][ T1108] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 233.500373][ T5851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 233.667938][ T4247] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 233.707768][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.742365][ T4247] usb 4-1: Product: syz [ 233.756578][ T4247] usb 4-1: Manufacturer: syz [ 233.772196][ T4247] usb 4-1: SerialNumber: syz [ 234.111979][ T4247] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 234.127442][ T4247] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 234.186604][ T4247] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 234.238634][ T4247] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 234.307294][ T4247] usb 4-1: USB disconnect, device number 12 [ 234.438071][ T4247] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 234.596278][ T4247] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 234.641552][ T4247] visor 4-1:1.0: device disconnected [ 234.655458][ T1108] usb 1-1: USB disconnect, device number 11 [ 236.273438][ T4278] usb 5-1: USB disconnect, device number 6 [ 240.472195][ T5899] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 240.486849][ T5899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 241.043960][ T5321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 241.120530][ T5906] sg_write: data in/out 764/8 bytes for SCSI command 0xd6-- guessing data in; [ 241.120530][ T5906] program syz.4.467 not setting count and/or reply_len properly [ 241.259641][ T5906] loop9: detected capacity change from 0 to 524287936 [ 241.325916][ T5321] usb 2-1: Using ep0 maxpacket: 32 [ 241.394465][ T5908] block device autoloading is deprecated and will be removed. [ 241.455758][ T5321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.486356][ T5321] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.726627][ T5321] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 241.932172][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.994386][ T5321] usb 2-1: Product: syz [ 242.016601][ T5321] usb 2-1: Manufacturer: syz [ 242.027415][ T5321] usb 2-1: SerialNumber: syz [ 242.057457][ T5321] usb 2-1: config 0 descriptor?? [ 242.244543][ T5914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.481844][ T5926] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by " [ 242.727992][ T264] block nbd1: Attempted send on invalid socket [ 242.825014][ T264] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.842687][ T5928] qnx6: unable to read the first superblock [ 242.851483][ T264] block nbd1: Attempted send on invalid socket [ 242.858337][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.870466][ T5928] qnx6: unable to read the first superblock [ 242.876524][ T5928] qnx6: unable to read the first superblock [ 243.524517][ T23] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 243.850362][ T5909] [ 243.852812][ T5909] ====================================================== [ 243.859842][ T5909] WARNING: possible circular locking dependency detected [ 243.866882][ T5909] syzkaller #0 Not tainted [ 243.871301][ T5909] ------------------------------------------------------ [ 243.878518][ T5909] syz.4.467/5909 is trying to acquire lock: [ 243.884403][ T5909] ffff88802a4e6138 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 243.894169][ T5909] [ 243.894169][ T5909] but task is already holding lock: [ 243.901549][ T5909] ffff88802012f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 243.910359][ T5909] [ 243.910359][ T5909] which lock already depends on the new lock. [ 243.910359][ T5909] [ 243.920774][ T5909] [ 243.920774][ T5909] the existing dependency chain (in reverse order) is: [ 243.929793][ T5909] [ 243.929793][ T5909] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 243.937280][ T5909] __mutex_lock_common+0x1e3/0x2400 [ 243.943028][ T5909] mutex_lock_killable_nested+0x17/0x20 [ 243.949112][ T5909] lo_open+0x6a/0x100 [ 243.953616][ T5909] blkdev_get_whole+0x90/0x390 [ 243.958902][ T5909] blkdev_get_by_dev+0x2d0/0xa60 [ 243.964374][ T5909] blkdev_open+0x12d/0x2c0 [ 243.969307][ T5909] do_dentry_open+0x7ff/0xf80 [ 243.974523][ T5909] path_openat+0x26f5/0x2fa0 [ 243.979668][ T5909] do_filp_open+0x1e2/0x410 [ 243.984704][ T5909] do_sys_openat2+0x150/0x4b0 [ 243.989895][ T5909] __x64_sys_openat+0x135/0x160 [ 243.995266][ T5909] do_syscall_64+0x4c/0xa0 [ 244.000221][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.006642][ T5909] [ 244.006642][ T5909] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 244.014458][ T5909] __mutex_lock_common+0x1e3/0x2400 [ 244.020211][ T5909] mutex_lock_nested+0x17/0x20 [ 244.025519][ T5909] blkdev_get_by_dev+0x157/0xa60 [ 244.031011][ T5909] swsusp_check+0xa1/0x2b0 [ 244.035962][ T5909] software_resume+0xc6/0x3b0 [ 244.041172][ T5909] resume_store+0xe4/0x130 [ 244.046118][ T5909] kernfs_fop_write_iter+0x379/0x4c0 [ 244.051942][ T5909] vfs_write+0x745/0xd60 [ 244.056711][ T5909] ksys_write+0x152/0x260 [ 244.061564][ T5909] do_syscall_64+0x4c/0xa0 [ 244.066504][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.072930][ T5909] [ 244.072930][ T5909] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 244.081438][ T5909] __mutex_lock_common+0x1e3/0x2400 [ 244.087156][ T5909] mutex_lock_nested+0x17/0x20 [ 244.092451][ T5909] software_resume+0x7c/0x3b0 [ 244.097664][ T5909] resume_store+0xe4/0x130 [ 244.102602][ T5909] kernfs_fop_write_iter+0x379/0x4c0 [ 244.108454][ T5909] vfs_write+0x745/0xd60 [ 244.113235][ T5909] ksys_write+0x152/0x260 [ 244.118092][ T5909] do_syscall_64+0x4c/0xa0 [ 244.123022][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.129434][ T5909] [ 244.129434][ T5909] -> #3 (&of->mutex){+.+.}-{3:3}: [ 244.136638][ T5909] __mutex_lock_common+0x1e3/0x2400 [ 244.142376][ T5909] mutex_lock_nested+0x17/0x20 [ 244.147857][ T5909] kernfs_seq_start+0x51/0x3c0 [ 244.153144][ T5909] seq_read_iter+0x3c4/0xd50 [ 244.158289][ T5909] vfs_read+0x759/0xd60 [ 244.162979][ T5909] ksys_read+0x152/0x260 [ 244.167741][ T5909] do_syscall_64+0x4c/0xa0 [ 244.172675][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.179088][ T5909] [ 244.179088][ T5909] -> #2 (&p->lock){+.+.}-{3:3}: [ 244.186120][ T5909] __mutex_lock_common+0x1e3/0x2400 [ 244.191851][ T5909] mutex_lock_nested+0x17/0x20 [ 244.197142][ T5909] seq_read_iter+0xad/0xd50 [ 244.202185][ T5909] do_iter_readv_writev+0x47e/0x5f0 [ 244.207914][ T5909] do_iter_read+0x20b/0x7c0 [ 244.212950][ T5909] loop_process_work+0x16dd/0x24a0 [ 244.218589][ T5909] process_one_work+0x85f/0x1010 [ 244.224078][ T5909] worker_thread+0xaa6/0x1290 [ 244.229287][ T5909] kthread+0x436/0x520 [ 244.233899][ T5909] ret_from_fork+0x1f/0x30 [ 244.238838][ T5909] [ 244.238838][ T5909] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 244.248206][ T5909] process_one_work+0x7bb/0x1010 [ 244.253660][ T5909] worker_thread+0xaa6/0x1290 [ 244.258879][ T5909] kthread+0x436/0x520 [ 244.263475][ T5909] ret_from_fork+0x1f/0x30 [ 244.268459][ T5909] [ 244.268459][ T5909] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 244.276555][ T5909] __lock_acquire+0x2c42/0x7d10 [ 244.281926][ T5909] lock_acquire+0x19e/0x400 [ 244.286957][ T5909] flush_workqueue+0x16c/0x13d0 [ 244.292339][ T5909] drain_workqueue+0xcf/0x380 [ 244.297562][ T5909] destroy_workqueue+0x7b/0xb20 [ 244.302956][ T5909] __loop_clr_fd+0x234/0xb90 [ 244.308188][ T5909] blkdev_put+0x53f/0x7d0 [ 244.313067][ T5909] blkdev_close+0x76/0xa0 [ 244.317945][ T5909] __fput+0x234/0x930 [ 244.322451][ T5909] task_work_run+0x125/0x1a0 [ 244.327601][ T5909] do_exit+0x626/0x20c0 [ 244.332293][ T5909] do_group_exit+0x12e/0x300 [ 244.337410][ T5909] get_signal+0x6d6/0x12d0 [ 244.342363][ T5909] arch_do_signal_or_restart+0xe7/0x12c0 [ 244.348542][ T5909] exit_to_user_mode_loop+0x9e/0x130 [ 244.354363][ T5909] exit_to_user_mode_prepare+0xee/0x180 [ 244.360423][ T5909] syscall_exit_to_user_mode+0x16/0x40 [ 244.366399][ T5909] do_syscall_64+0x58/0xa0 [ 244.371338][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.377789][ T5909] [ 244.377789][ T5909] other info that might help us debug this: [ 244.377789][ T5909] [ 244.388020][ T5909] Chain exists of: [ 244.388020][ T5909] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 244.388020][ T5909] [ 244.401487][ T5909] Possible unsafe locking scenario: [ 244.401487][ T5909] [ 244.408963][ T5909] CPU0 CPU1 [ 244.414361][ T5909] ---- ---- [ 244.419738][ T5909] lock(&lo->lo_mutex); [ 244.424004][ T5909] lock(&disk->open_mutex); [ 244.431137][ T5909] lock(&lo->lo_mutex); [ 244.437908][ T5909] lock((wq_completion)loop9); [ 244.442778][ T5909] [ 244.442778][ T5909] *** DEADLOCK *** [ 244.442778][ T5909] [ 244.450920][ T5909] 2 locks held by syz.4.467/5909: [ 244.455960][ T5909] #0: ffff88801ff5e118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 244.465299][ T5909] #1: ffff88802012f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 244.474531][ T5909] [ 244.474531][ T5909] stack backtrace: [ 244.480428][ T5909] CPU: 1 PID: 5909 Comm: syz.4.467 Not tainted syzkaller #0 [ 244.487726][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.497810][ T5909] Call Trace: [ 244.501116][ T5909] [ 244.504056][ T5909] dump_stack_lvl+0x188/0x250 [ 244.508731][ T5909] ? load_image+0x400/0x400 [ 244.513250][ T5909] ? show_regs_print_info+0x20/0x20 [ 244.518468][ T5909] ? print_circular_bug+0x12b/0x1a0 [ 244.523662][ T5909] check_noncircular+0x296/0x330 [ 244.528613][ T5909] ? add_chain_block+0x940/0x940 [ 244.533575][ T5909] ? lockdep_lock+0xf1/0x1f0 [ 244.538186][ T5909] ? mark_lock+0x94/0x320 [ 244.542517][ T5909] __lock_acquire+0x2c42/0x7d10 [ 244.547434][ T5909] ? verify_lock_unused+0x140/0x140 [ 244.552652][ T5909] ? verify_lock_unused+0x140/0x140 [ 244.557859][ T5909] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.563875][ T5909] ? verify_lock_unused+0x140/0x140 [ 244.569069][ T5909] ? memset+0x1e/0x40 [ 244.573061][ T5909] lock_acquire+0x19e/0x400 [ 244.577630][ T5909] ? flush_workqueue+0x150/0x13d0 [ 244.582810][ T5909] ? read_lock_is_recursive+0x10/0x10 [ 244.588367][ T5909] ? __init_swait_queue_head+0xa5/0x150 [ 244.593963][ T5909] flush_workqueue+0x16c/0x13d0 [ 244.598839][ T5909] ? flush_workqueue+0x150/0x13d0 [ 244.603889][ T5909] ? __lock_acquire+0x7d10/0x7d10 [ 244.608957][ T5909] ? __mutex_lock_common+0x465/0x2400 [ 244.614361][ T5909] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 244.619935][ T5909] ? lockdep_hardirqs_off+0x70/0x100 [ 244.625235][ T5909] ? rcu_work_rcufn+0x120/0x120 [ 244.630103][ T5909] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 244.635759][ T5909] ? finish_wait+0xc0/0x1d0 [ 244.640292][ T5909] drain_workqueue+0xcf/0x380 [ 244.644986][ T5909] destroy_workqueue+0x7b/0xb20 [ 244.649832][ T5909] __loop_clr_fd+0x234/0xb90 [ 244.654438][ T5909] ? lo_release+0x172/0x1f0 [ 244.658953][ T5909] ? lo_open+0x100/0x100 [ 244.663192][ T5909] blkdev_put+0x53f/0x7d0 [ 244.667554][ T5909] blkdev_close+0x76/0xa0 [ 244.671934][ T5909] ? blkdev_open+0x2c0/0x2c0 [ 244.676581][ T5909] __fput+0x234/0x930 [ 244.680569][ T5909] task_work_run+0x125/0x1a0 [ 244.685212][ T5909] do_exit+0x626/0x20c0 [ 244.689392][ T5909] ? put_task_struct+0x80/0x80 [ 244.694161][ T5909] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 244.700175][ T5909] ? lock_chain_count+0x20/0x20 [ 244.705035][ T5909] ? _raw_spin_lock_irq+0xb7/0xf0 [ 244.710077][ T5909] do_group_exit+0x12e/0x300 [ 244.714673][ T5909] ? lockdep_hardirqs_on+0x94/0x140 [ 244.719893][ T5909] get_signal+0x6d6/0x12d0 [ 244.724326][ T5909] arch_do_signal_or_restart+0xe7/0x12c0 [ 244.729975][ T5909] ? kernel_read+0x1e0/0x1e0 [ 244.734606][ T5909] ? get_sigframe_size+0x10/0x10 [ 244.739572][ T5909] ? __fget_files+0x40f/0x480 [ 244.744269][ T5909] ? ksys_read+0x1fd/0x260 [ 244.748686][ T5909] ? exit_to_user_mode_loop+0x3b/0x130 [ 244.754154][ T5909] exit_to_user_mode_loop+0x9e/0x130 [ 244.759437][ T5909] exit_to_user_mode_prepare+0xee/0x180 [ 244.764993][ T5909] syscall_exit_to_user_mode+0x16/0x40 [ 244.770469][ T5909] do_syscall_64+0x58/0xa0 [ 244.774912][ T5909] ? clear_bhb_loop+0x30/0x80 [ 244.779609][ T5909] ? clear_bhb_loop+0x30/0x80 [ 244.784299][ T5909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.790232][ T5909] RIP: 0033:0x7fb0c827ee59 [ 244.794644][ T5909] Code: Unable to access opcode bytes at RIP 0x7fb0c827ee2f. [ 244.802010][ T5909] RSP: 002b:00007fb0c6496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.810419][ T5909] RAX: 0000000000018ff8 RBX: 00007fb0c84f8180 RCX: 00007fb0c827ee59 [ 244.818386][ T5909] RDX: 0000000000018ff8 RSI: 0000200000001a40 RDI: 0000000000000009 [ 244.826364][ T5909] RBP: 00007fb0c8314d6f R08: 0000000000000000 R09: 0000000000000000 [ 244.834346][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.842327][ T5909] R13: 00007fb0c84f8218 R14: 00007fb0c84f8180 R15: 00007ffdbf961898 [ 244.850314][ T5909] [ 244.928097][ T4247] usb 2-1: USB disconnect, device number 7 [ 245.019404][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.172535][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.182825][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.191712][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.463460][ T23] usb 1-1: string descriptor 0 read error: -22 [ 245.469831][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.478997][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.749153][ T23] usb 1-1: USB disconnect, device number 12