last executing test programs: 17.042149621s ago: executing program 3 (id=396): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x1406, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.721851782s ago: executing program 1 (id=398): r0 = socket(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x2}]}, 0x10) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg(r1, 0x0, 0x20004000) 14.738232288s ago: executing program 1 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0]}, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.60931833s ago: executing program 1 (id=402): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x2fda, 0x4, 0x5, 0x4, 0x4, 0x58, 0x3, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x8000, 0x1, 0xe, 0x7f, 0x7fff}}, &(0x7f0000000280)=0xb0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x81c0, 0x10) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) 13.440137938s ago: executing program 1 (id=404): open(0x0, 0x108843, 0x98) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) lseek(r5, 0x101, 0x1) 12.67956171s ago: executing program 2 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x8}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x4200, 0x128) mount(0x0, 0x0, &(0x7f00000000c0)='efs\x00', 0x208000, 0x0) syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup(r4) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22c4a65c05}, 0x20008040) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 11.136867325s ago: executing program 3 (id=411): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) unlink(&(0x7f0000002ac0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcaa41000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r6, &(0x7f0000001340)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000003740)=ANY=[], 0xb8) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffe1, 0x0, 0x2000000) 11.088859095s ago: executing program 2 (id=412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x4100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000500)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40}]}, &(0x7f0000000180)=0x10) 10.416944396s ago: executing program 0 (id=414): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 9.693741708s ago: executing program 2 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 9.693343917s ago: executing program 3 (id=416): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x27f8e39913961d64, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 8.330104189s ago: executing program 0 (id=417): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x25a5, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x303, 0x0, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 7.104902538s ago: executing program 4 (id=418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000002b000b000000000000000000080000000c00018008000000628dbf0a8683d3ce7adae31b68be84"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) 6.870876902s ago: executing program 3 (id=419): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r4, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c001600421bff9d727dc600fedbdf250500000007fff70005b578516d171e9ff3598a3fe6824d27119527c0143da4a8ebad19600293e09e11b940217c9ee230701b8e8788ee3baea35fe1ca6ffbe99dff53eb7895003ef638fe394d023f117a39566e2398a0c0a39d891f1a4277d69aa0eae233116ad74fe7d4c13880560c19b7559b", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 4.927292302s ago: executing program 4 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x7, 0x4) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x3, "6e145c0ef608314ceb833d278fe1d4dd16331c3e1ef459aa6db8a9f4d600", 0x30313953}) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000b40)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516", 0x6c}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xd650d37082cf89f1, 0x1}) 4.849784244s ago: executing program 2 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.384946381s ago: executing program 0 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x8}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x4200, 0x128) mount(0x0, 0x0, &(0x7f00000000c0)='efs\x00', 0x208000, 0x0) syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup(r4) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22c4a65c05}, 0x20008040) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 4.375404191s ago: executing program 3 (id=423): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8110}, 0x8000) dup(r2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[]) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) 3.430064086s ago: executing program 4 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0]}, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.917397054s ago: executing program 0 (id=425): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.749672797s ago: executing program 3 (id=426): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x29, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 2.749396757s ago: executing program 1 (id=427): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 2.709328227s ago: executing program 4 (id=428): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.659462598s ago: executing program 2 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x27f8e39913961d64, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 1.703137393s ago: executing program 4 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = epoll_create(0x6) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4044080) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.407095568s ago: executing program 1 (id=431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000002b000b000000000000000000080000000c00018008000000628dbf0a8683d3ce7adae31b68be84"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) 1.2712768s ago: executing program 0 (id=432): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 56.048304][ T4254] cgroup: Unknown subsys name 'net' [ 56.152028][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.383778][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.838632][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.838632][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.839599][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.846676][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.855638][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.861287][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.868076][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.876019][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.882309][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.889024][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.896375][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.903961][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.916761][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.923472][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.931520][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.945730][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.946051][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.960944][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.969296][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.973755][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.976632][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.984163][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.992878][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.999164][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.005813][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.022012][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.033396][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.044744][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.052448][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.061034][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.413583][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 59.470291][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 59.562534][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 59.582013][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 59.657093][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.664221][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.673754][ T4266] device bridge_slave_0 entered promiscuous mode [ 59.689894][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.697131][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.705123][ T4267] device bridge_slave_0 entered promiscuous mode [ 59.721311][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.728620][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.736574][ T4266] device bridge_slave_1 entered promiscuous mode [ 59.746463][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.753600][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.761525][ T4267] device bridge_slave_1 entered promiscuous mode [ 59.785125][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 59.826868][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.861286][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.869221][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.877363][ T4276] device bridge_slave_0 entered promiscuous mode [ 59.887404][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.898205][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.907531][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.914668][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.922391][ T4264] device bridge_slave_0 entered promiscuous mode [ 59.937423][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.945216][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.952896][ T4276] device bridge_slave_1 entered promiscuous mode [ 59.985315][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.994752][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.001840][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.010397][ T4264] device bridge_slave_1 entered promiscuous mode [ 60.036145][ T4266] team0: Port device team_slave_0 added [ 60.060211][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.070530][ T4266] team0: Port device team_slave_1 added [ 60.088603][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.102864][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.122011][ T4267] team0: Port device team_slave_0 added [ 60.129531][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.162288][ T4267] team0: Port device team_slave_1 added [ 60.200181][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.207300][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.233477][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.254168][ T4264] team0: Port device team_slave_0 added [ 60.260583][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.268244][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.276737][ T4265] device bridge_slave_0 entered promiscuous mode [ 60.285619][ T4276] team0: Port device team_slave_0 added [ 60.291657][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.299873][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.307739][ T4265] device bridge_slave_1 entered promiscuous mode [ 60.316767][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.323728][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.350641][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.371626][ T4264] team0: Port device team_slave_1 added [ 60.379011][ T4276] team0: Port device team_slave_1 added [ 60.401273][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.408712][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.434908][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.471334][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.478527][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.505231][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.524035][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.531114][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.557196][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.586363][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.593336][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.619552][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.632416][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.645761][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.652735][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.679208][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.703012][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.713133][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.720463][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.746512][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.763903][ T4266] device hsr_slave_0 entered promiscuous mode [ 60.771122][ T4266] device hsr_slave_1 entered promiscuous mode [ 60.832316][ T4265] team0: Port device team_slave_0 added [ 60.841035][ T4276] device hsr_slave_0 entered promiscuous mode [ 60.848638][ T4276] device hsr_slave_1 entered promiscuous mode [ 60.855352][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.863087][ T4276] Cannot create hsr debugfs directory [ 60.893575][ T4267] device hsr_slave_0 entered promiscuous mode [ 60.900378][ T4267] device hsr_slave_1 entered promiscuous mode [ 60.907196][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.914864][ T4267] Cannot create hsr debugfs directory [ 60.921412][ T4265] team0: Port device team_slave_1 added [ 60.954102][ T4264] device hsr_slave_0 entered promiscuous mode [ 60.960964][ T4264] device hsr_slave_1 entered promiscuous mode [ 60.967803][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.975780][ T4264] Cannot create hsr debugfs directory [ 60.995403][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.002378][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.028396][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.055417][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 61.056094][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 61.061697][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 61.082544][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.090837][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.116978][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.134723][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 61.134736][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 61.241053][ T4265] device hsr_slave_0 entered promiscuous mode [ 61.247772][ T4265] device hsr_slave_1 entered promiscuous mode [ 61.254537][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.262113][ T4265] Cannot create hsr debugfs directory [ 61.454280][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.466015][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.482958][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.498652][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.557736][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.582851][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.592147][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.628881][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.653485][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.680279][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.695028][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.707409][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.718578][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.766379][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.786038][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.797361][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.829698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.838598][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.848745][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.855998][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.865592][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.886582][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.902849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.912301][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.921275][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.928436][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.936974][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.951135][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.960599][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.986248][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.998851][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.008591][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.018146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.028225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.037158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.058466][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.070055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.098529][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.112036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.121407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.130317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.140458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.149327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.158087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.178928][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.206246][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.217732][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.273530][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.283398][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.307915][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.324915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.333311][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.382235][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.392266][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.406791][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.413920][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.423184][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.433460][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.442460][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.449557][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.457592][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.466660][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.478050][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.500958][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.509323][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.520361][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.530445][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.541022][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.554159][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.573910][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.595746][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.610661][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.620085][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.627242][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.640302][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.658508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.668435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.677767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.687454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.698123][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.705238][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.713127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.723680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.732436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.741946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.755928][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.768768][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.787368][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.797846][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.807788][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.819488][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.828529][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.835673][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.843261][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.851404][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.867940][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.879684][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.894899][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.903743][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.912698][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.921519][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.931442][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.940420][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.949417][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.958389][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.968039][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.975232][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.983205][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.992842][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.006576][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.016219][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.029065][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.036741][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.070881][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.081568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.092050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.101457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.131343][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.138742][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 63.138779][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 63.146372][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 63.166326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.177157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.187797][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.200286][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.209008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.216969][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 63.224010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.224936][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 63.232937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.246733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.255266][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.262321][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.270201][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.279199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.288469][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.295610][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.326064][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.337362][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.350057][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.359106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.368434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.378269][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.387744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.398366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.408020][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.416880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.425674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.434194][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.443045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.452071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.461127][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.470531][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.479220][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.488382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.498978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.507054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.569043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.586686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.622583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.656214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.668658][ T4264] device veth0_vlan entered promiscuous mode [ 63.685956][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.693474][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.748684][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.773418][ T4264] device veth1_vlan entered promiscuous mode [ 63.825810][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.839348][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.858012][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.898119][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.907588][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.940759][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.953732][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.976639][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.009485][ T4266] device veth0_vlan entered promiscuous mode [ 64.053857][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.078747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.119332][ T4266] device veth1_vlan entered promiscuous mode [ 64.148139][ T4264] device veth0_macvtap entered promiscuous mode [ 64.172729][ T4264] device veth1_macvtap entered promiscuous mode [ 64.182122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.191225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.201424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.209626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.218214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.226013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.233429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.241222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.252224][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.278805][ T4266] device veth0_macvtap entered promiscuous mode [ 64.288570][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.297325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.307996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.319101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.330205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.348092][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.363203][ T4266] device veth1_macvtap entered promiscuous mode [ 64.372400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.388189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.399377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.411933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.431651][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.452374][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.465968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.481503][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.522363][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532167][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.542780][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557984][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.571732][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.586498][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.598774][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.607208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.616180][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.626044][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.635066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.644658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.653690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.672960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.681703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.701418][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.713473][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.730943][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.751026][ T4276] device veth0_vlan entered promiscuous mode [ 64.759094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.770358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.778507][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.787347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.796408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.805573][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.834219][ T4265] device veth0_vlan entered promiscuous mode [ 64.844238][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.853969][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.863106][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.872437][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.886723][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.895765][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.921555][ T4276] device veth1_vlan entered promiscuous mode [ 64.950291][ T4265] device veth1_vlan entered promiscuous mode [ 64.983938][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.992956][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.003255][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.012332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.033821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.043192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.052099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.096570][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.105339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.113439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.121063][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.145743][ T4267] device veth0_vlan entered promiscuous mode [ 65.164111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.183157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.200381][ T4265] device veth0_macvtap entered promiscuous mode [ 65.209049][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.218106][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 65.225015][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 65.225379][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 65.242807][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.255615][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.267352][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.277553][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.286539][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.295148][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 65.295158][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 65.307510][ T4276] device veth0_macvtap entered promiscuous mode [ 65.321540][ T4265] device veth1_macvtap entered promiscuous mode [ 65.330108][ T4267] device veth1_vlan entered promiscuous mode [ 65.345913][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.354101][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.362342][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.370790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.380235][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.393168][ T4276] device veth1_macvtap entered promiscuous mode [ 65.412333][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.423746][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.434085][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.444965][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.457907][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.494221][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.506557][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.517737][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.528261][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.539080][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.552553][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.563670][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.571686][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.580011][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.588993][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.599006][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.608951][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.632114][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.643160][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.653339][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.667252][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.679008][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.690521][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.712474][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.725112][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.735400][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.744406][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.764376][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.797066][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.808773][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818961][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.830287][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.840197][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.850881][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.868776][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.878710][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.888453][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.897597][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.906934][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.972748][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.982576][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.093566][ T4267] device veth0_macvtap entered promiscuous mode [ 66.106656][ T4267] device veth1_macvtap entered promiscuous mode [ 66.116843][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.128695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.138876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.148469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.158400][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.467689][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.774709][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.789113][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.803281][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.814963][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.854753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.880290][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.905583][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.915618][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.926298][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.937245][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.947746][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.957742][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.968587][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.996720][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.068574][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.082683][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.295088][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 67.295199][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 67.302279][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 67.375699][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 67.375880][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 67.388163][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.388230][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.388240][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.388278][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.535511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.578340][ T4396] vivid-002: ================= START STATUS ================= [ 67.586965][ T4396] vivid-002: Radio HW Seek Mode: Bounded [ 67.593382][ T4396] vivid-002: Radio Programmable HW Seek: false [ 67.599787][ T4396] vivid-002: RDS Rx I/O Mode: Block I/O [ 67.605655][ T4396] vivid-002: Generate RBDS Instead of RDS: false [ 67.612096][ T4396] vivid-002: RDS Reception: true [ 67.617817][ T4396] vivid-002: RDS Program Type: 0 inactive [ 67.623682][ T4396] vivid-002: RDS PS Name: inactive [ 67.629059][ T4396] vivid-002: RDS Radio Text: inactive [ 67.634676][ T4396] vivid-002: RDS Traffic Announcement: false inactive [ 67.641547][ T4396] vivid-002: RDS Traffic Program: false inactive [ 67.648114][ T4396] vivid-002: RDS Music: false inactive [ 67.653706][ T4396] vivid-002: ================== END STATUS ================== [ 67.989622][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.064165][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.089532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.098256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 68.106533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 68.114807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 68.123097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 68.131391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 68.159039][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.169480][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.185367][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.197764][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.217091][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.240692][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.255441][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.264388][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278991][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.412794][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.441134][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.449319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 68.466441][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.475356][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.483340][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.510835][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.522558][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.540494][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.555154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.564676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 68.627461][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.981217][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.112808][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.270166][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.286134][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.388773][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.935990][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.082396][ T4412] random: crng reseeded on system resumption [ 71.334136][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.369635][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376249][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425115][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.465609][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.876976][ T4423] fuse: Unknown parameter 'group_id00000000000000000000' [ 72.144751][ T4349] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.393990][ T4349] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.443591][ T4349] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.523149][ T4349] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.584234][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.080702][ T4349] usb 2-1: usb_control_msg returned -32 [ 73.092778][ T4349] usbtmc 2-1:16.0: can't read capabilities [ 73.455739][ T4438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 73.462718][ T4438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.471617][ T4438] vhci_hcd vhci_hcd.0: Device attached [ 73.535956][ T4439] vhci_hcd: connection closed [ 73.539291][ T4311] vhci_hcd: stop threads [ 73.598030][ T4311] vhci_hcd: release socket [ 73.672079][ T4311] vhci_hcd: disconnect device [ 74.680683][ T4376] usb 2-1: USB disconnect, device number 2 [ 76.165637][ T4461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17'. [ 76.418221][ T14] cfg80211: failed to load regulatory.db [ 76.698819][ T4473] random: crng reseeded on system resumption [ 77.549798][ T4481] fuse: Bad value for 'fd' [ 77.569649][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 80.112566][ T4492] process 'syz.2.26' launched '/dev/fd/3' with NULL argv: empty string added [ 81.094601][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.308153][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 81.322199][ T14] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 81.349407][ T14] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 81.359233][ T14] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 81.370965][ T14] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 81.380929][ T14] usb 3-1: config 6 has no interface number 0 [ 81.394603][ T14] usb 3-1: config 6 has no interface number 1 [ 81.418299][ T14] usb 3-1: config 6 has no interface number 2 [ 81.424424][ T14] usb 3-1: config 6 has no interface number 3 [ 81.433448][ T14] usb 3-1: config 6 interface 28 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 64 [ 81.461937][ T14] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 81.533602][ T14] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 81.563986][ T14] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 81.582519][ T14] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 81.600288][ T14] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 81.613793][ T14] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 81.648349][ T14] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 81.664165][ T14] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 81.694395][ T14] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 81.717171][ T14] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 81.729494][ T14] usb 3-1: config 6 interface 4 has no altsetting 0 [ 81.736205][ T14] usb 3-1: config 6 interface 86 has no altsetting 0 [ 81.743496][ T14] usb 3-1: config 6 interface 191 has no altsetting 0 [ 81.764053][ T14] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 81.775412][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.783682][ T14] usb 3-1: Product: syz [ 82.567996][ T14] usb 3-1: Manufacturer: syz [ 82.577239][ T14] usb 3-1: SerialNumber: syz [ 83.090965][ T4514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32'. [ 83.909729][ T14] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 83.935371][ T14] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 83.944043][ T14] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 83.963463][ T4518] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.954030][ T4558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.47'. [ 89.159206][ T4376] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.215467][ T4320] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.366477][ T4376] usb 1-1: Using ep0 maxpacket: 8 [ 89.375914][ T4376] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 89.392655][ T4376] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 89.404553][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 89.422999][ T4320] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 89.534116][ T4376] usb 1-1: config 0 has no interface number 0 [ 89.567791][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.868112][ T4376] usb 1-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 89.885896][ T4320] usb 2-1: Product: syz [ 89.892990][ T4320] usb 2-1: Manufacturer: syz [ 89.916183][ T4376] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 89.926098][ T4320] usb 2-1: SerialNumber: syz [ 89.940313][ T4320] r8152-cfgselector 2-1: config 0 descriptor?? [ 89.947151][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 89.960272][ T4594] Device name cannot be null; rc = [-22] [ 89.966697][ T4376] usb 1-1: Product: syz [ 89.987986][ T4376] usb 1-1: config 0 descriptor?? [ 90.360954][ T4327] usb 1-1: USB disconnect, device number 2 [ 91.055650][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 91.064549][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 91.103621][ T4608] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.112733][ T4608] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.121650][ T4608] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.130542][ T4608] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.536081][ T4584] No such timeout policy "syz0" [ 91.548794][ T4320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 91.559526][ T4320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 91.584930][ T4320] r8152-cfgselector 2-1: bad CDC descriptors [ 91.599953][ T4320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 91.624027][ T4320] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 91.688569][ T4612] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 91.695122][ T4612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.702831][ T4612] vhci_hcd vhci_hcd.0: Device attached [ 91.987623][ T4349] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 92.005510][ T4614] vhci_hcd: connection reset by peer [ 92.017201][ T9] vhci_hcd: stop threads [ 92.042319][ T9] vhci_hcd: release socket [ 92.068573][ T9] vhci_hcd: disconnect device [ 93.036345][ T4632] vivid-001: ================= START STATUS ================= [ 93.047568][ T4632] vivid-001: Radio HW Seek Mode: Bounded [ 93.057351][ T4632] vivid-001: Radio Programmable HW Seek: false [ 93.070856][ T4632] vivid-001: RDS Rx I/O Mode: Block I/O [ 93.076622][ T4632] vivid-001: Generate RBDS Instead of RDS: false [ 93.084133][ T4632] vivid-001: RDS Reception: true [ 93.099986][ T4632] vivid-001: RDS Program Type: 0 inactive [ 93.114679][ T4632] vivid-001: RDS PS Name: inactive [ 93.126495][ T4632] vivid-001: RDS Radio Text: inactive [ 93.132051][ T4632] vivid-001: RDS Traffic Announcement: false inactive [ 93.194730][ T4632] vivid-001: RDS Traffic Program: false inactive [ 93.211460][ T4632] vivid-001: RDS Music: false inactive [ 93.235004][ T4632] vivid-001: ================== END STATUS ================== [ 96.654547][ T4376] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.742631][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 96.926056][ T4376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.944548][ T4376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.954343][ T4376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.984539][ T4376] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 96.999220][ T4376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.019736][ T4376] usb 5-1: config 0 descriptor?? [ 97.134780][ T4349] vhci_hcd: vhci_device speed not set [ 97.345094][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.477706][ T4376] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 97.547104][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.608857][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.671132][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.808316][ T41] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 97.851986][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.873869][ T4685] Device name cannot be null; rc = [-22] [ 97.914299][ T41] usb 2-1: config 0 descriptor?? [ 98.788734][ T41] ryos 0003:1E7D:3232.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 99.005204][ T4430] usb 5-1: USB disconnect, device number 2 [ 101.385722][ T4327] usb 2-1: USB disconnect, device number 4 [ 101.954921][ T4717] tipc: Started in network mode [ 101.994880][ T4717] tipc: Node identity c21f751eb7e1, cluster identity 4711 [ 102.012865][ T4717] tipc: Enabled bearer , priority 0 [ 102.161558][ T4726] fuse: Bad value for 'fd' [ 102.249213][ T4720] device syzkaller0 entered promiscuous mode [ 103.158085][ T4430] tipc: Node number set to 1979610398 [ 103.230129][ T4717] tipc: Resetting bearer [ 103.277499][ T4715] tipc: Resetting bearer [ 103.385172][ T4715] tipc: Disabling bearer [ 103.574824][ T4736] netlink: 6 bytes leftover after parsing attributes in process `syz.1.92'. [ 103.583605][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.592614][ T4736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.776932][ T4738] netlink: 44 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.514529][ T4327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.695779][ T4751] Device name cannot be null; rc = [-22] [ 105.126795][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.144499][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.173404][ T4327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.339953][ T4327] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 105.349526][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.441586][ T4327] usb 4-1: config 0 descriptor?? [ 105.970758][ T4327] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 106.025740][ T4758] overlayfs: failed to resolve './file0': -2 [ 106.114792][ T4327] usb 4-1: USB disconnect, device number 2 [ 107.142927][ T4770] fido_id[4770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.176661][ T4781] netlink: 6 bytes leftover after parsing attributes in process `syz.3.105'. [ 107.989084][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 107.997401][ T4781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.276643][ T4787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.106'. [ 109.783855][ T4813] Device name cannot be null; rc = [-22] [ 112.904571][ T4843] Zero length message leads to an empty skb [ 113.660307][ T4852] vivid-003: ================= START STATUS ================= [ 113.668899][ T4852] vivid-003: Radio HW Seek Mode: Bounded [ 113.674841][ T4852] vivid-003: Radio Programmable HW Seek: false [ 113.681176][ T4852] vivid-003: RDS Rx I/O Mode: Block I/O [ 113.686892][ T4852] vivid-003: Generate RBDS Instead of RDS: false [ 113.693286][ T4852] vivid-003: RDS Reception: true [ 113.698549][ T4852] vivid-003: RDS Program Type: 0 inactive [ 113.704418][ T4852] vivid-003: RDS PS Name: inactive [ 113.719676][ T4852] vivid-003: RDS Radio Text: inactive [ 113.725442][ T4852] vivid-003: RDS Traffic Announcement: false inactive [ 113.732418][ T4852] vivid-003: RDS Traffic Program: false inactive [ 113.739012][ T4852] vivid-003: RDS Music: false inactive [ 113.744761][ T4852] vivid-003: ================== END STATUS ================== [ 116.268915][ T4875] Device name cannot be null; rc = [-22] [ 116.897987][ T4880] netlink: 6 bytes leftover after parsing attributes in process `syz.0.133'. [ 116.906890][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.914980][ T4880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.903406][ T4888] vivid-001: ================= START STATUS ================= [ 117.911279][ T4888] vivid-001: Radio HW Seek Mode: Bounded [ 117.917213][ T4888] vivid-001: Radio Programmable HW Seek: false [ 117.923476][ T4888] vivid-001: RDS Rx I/O Mode: Block I/O [ 117.929260][ T4888] vivid-001: Generate RBDS Instead of RDS: false [ 117.936236][ T4888] vivid-001: RDS Reception: true [ 117.941312][ T4888] vivid-001: RDS Program Type: 0 inactive [ 117.947288][ T4888] vivid-001: RDS PS Name: inactive [ 117.952594][ T4888] vivid-001: RDS Radio Text: inactive [ 117.965705][ T4888] vivid-001: RDS Traffic Announcement: false inactive [ 117.972637][ T4888] vivid-001: RDS Traffic Program: false inactive [ 117.979216][ T4888] vivid-001: RDS Music: false inactive [ 117.984875][ T4888] vivid-001: ================== END STATUS ================== [ 118.934971][ T4310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.130385][ T4903] vivid-003: ================= START STATUS ================= [ 119.138556][ T4903] vivid-003: Radio HW Seek Mode: Bounded [ 119.144355][ T4903] vivid-003: Radio Programmable HW Seek: false [ 119.150765][ T4903] vivid-003: RDS Rx I/O Mode: Block I/O [ 119.156566][ T4903] vivid-003: Generate RBDS Instead of RDS: false [ 119.163200][ T4903] vivid-003: RDS Reception: true [ 119.168399][ T4903] vivid-003: RDS Program Type: 0 inactive [ 119.174270][ T4903] vivid-003: RDS PS Name: inactive [ 119.179647][ T4903] vivid-003: RDS Radio Text: inactive [ 119.179948][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.202388][ T4903] vivid-003: RDS Traffic Announcement: false inactive [ 119.209419][ T4903] vivid-003: RDS Traffic Program: false inactive [ 119.216011][ T4903] vivid-003: RDS Music: false inactive [ 119.221561][ T4903] vivid-003: ================== END STATUS ================== [ 119.920482][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.930399][ T4310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.944279][ T4310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 119.953463][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.970680][ T4310] usb 1-1: config 0 descriptor?? [ 120.648384][ T4310] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 120.896711][ T4310] usb 1-1: USB disconnect, device number 3 [ 121.956652][ T4926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.145'. [ 121.994937][ T4924] Device name cannot be null; rc = [-22] [ 122.002557][ T4919] fido_id[4919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.283662][ T4931] tipc: Started in network mode [ 122.307522][ T4931] tipc: Node identity ce66c3e35cd5, cluster identity 4711 [ 122.899547][ T4931] tipc: Enabled bearer , priority 0 [ 122.942600][ T4931] tipc: Resetting bearer [ 123.030386][ T4930] tipc: Disabling bearer [ 123.260659][ T4947] vivid-004: ================= START STATUS ================= [ 123.268735][ T4947] vivid-004: Radio HW Seek Mode: Bounded [ 123.274566][ T4947] vivid-004: Radio Programmable HW Seek: false [ 123.280792][ T4947] vivid-004: RDS Rx I/O Mode: Block I/O [ 123.286475][ T4947] vivid-004: Generate RBDS Instead of RDS: false [ 123.293452][ T4947] vivid-004: RDS Reception: true [ 123.298706][ T4947] vivid-004: RDS Program Type: 0 inactive [ 123.304569][ T4947] vivid-004: RDS PS Name: inactive [ 123.309862][ T4947] vivid-004: RDS Radio Text: inactive [ 123.320042][ T4947] vivid-004: RDS Traffic Announcement: false inactive [ 123.327075][ T4947] vivid-004: RDS Traffic Program: false inactive [ 123.333558][ T4947] vivid-004: RDS Music: false inactive [ 123.339197][ T4947] vivid-004: ================== END STATUS ================== [ 125.762030][ T4963] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.421028][ T4966] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 126.427569][ T4966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.435252][ T4966] vhci_hcd vhci_hcd.0: Device attached [ 126.475348][ T4968] vhci_hcd: connection closed [ 126.487113][ T4398] vhci_hcd: stop threads [ 126.533492][ T4398] vhci_hcd: release socket [ 126.553771][ T4398] vhci_hcd: disconnect device [ 127.686174][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 128.961002][ T4996] tipc: Started in network mode [ 128.969656][ T4996] tipc: Node identity 764e93d07632, cluster identity 4711 [ 128.982216][ T4996] tipc: Enabled bearer , priority 0 [ 129.186457][ T5001] device syzkaller0 entered promiscuous mode [ 129.248785][ T4996] tipc: Resetting bearer [ 129.288983][ T4995] tipc: Resetting bearer [ 129.585155][ T4995] tipc: Disabling bearer [ 130.420182][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 130.429681][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 130.441299][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 130.451711][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 131.661466][ T5031] fuse: Bad value for 'fd' [ 131.678934][ T5031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 132.737326][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743685][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.357841][ T5057] tipc: Enabled bearer , priority 0 [ 136.406281][ T5057] device syzkaller0 entered promiscuous mode [ 136.453270][ T5057] tipc: Resetting bearer [ 136.510359][ T5056] tipc: Resetting bearer [ 136.983214][ T5056] tipc: Disabling bearer [ 138.320153][ T5073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 138.326774][ T5073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.334517][ T5073] vhci_hcd vhci_hcd.0: Device attached [ 138.502255][ T5075] vhci_hcd: connection closed [ 138.503946][ T33] vhci_hcd: stop threads [ 138.689745][ T4430] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 138.856746][ T33] vhci_hcd: release socket [ 138.875357][ T33] vhci_hcd: disconnect device [ 139.325252][ T5093] vivid-002: ================= START STATUS ================= [ 139.333192][ T5093] vivid-002: Radio HW Seek Mode: Bounded [ 139.339163][ T5093] vivid-002: Radio Programmable HW Seek: false [ 139.345491][ T5093] vivid-002: RDS Rx I/O Mode: Block I/O [ 139.351217][ T5093] vivid-002: Generate RBDS Instead of RDS: false [ 139.357797][ T5093] vivid-002: RDS Reception: true [ 139.362964][ T5093] vivid-002: RDS Program Type: 0 inactive [ 139.369574][ T5093] vivid-002: RDS PS Name: inactive [ 139.403648][ T5093] vivid-002: RDS Radio Text: inactive [ 139.409493][ T5093] vivid-002: RDS Traffic Announcement: false inactive [ 139.416560][ T5093] vivid-002: RDS Traffic Program: false inactive [ 139.423140][ T5093] vivid-002: RDS Music: false inactive [ 139.428870][ T5093] vivid-002: ================== END STATUS ================== [ 139.887103][ T5077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 140.930585][ T5119] vivid-001: ================= START STATUS ================= [ 140.938553][ T5119] vivid-001: Radio HW Seek Mode: Bounded [ 140.944311][ T5119] vivid-001: Radio Programmable HW Seek: false [ 140.950785][ T5119] vivid-001: RDS Rx I/O Mode: Block I/O [ 140.956548][ T5119] vivid-001: Generate RBDS Instead of RDS: false [ 140.962916][ T5119] vivid-001: RDS Reception: true [ 140.968082][ T5119] vivid-001: RDS Program Type: 0 inactive [ 140.974001][ T5119] vivid-001: RDS PS Name: inactive [ 140.979460][ T5119] vivid-001: RDS Radio Text: inactive [ 140.994124][ T5119] vivid-001: RDS Traffic Announcement: false inactive [ 141.001192][ T5119] vivid-001: RDS Traffic Program: false inactive [ 141.008277][ T5119] vivid-001: RDS Music: false inactive [ 141.014101][ T5119] vivid-001: ================== END STATUS ================== [ 144.025293][ T4430] vhci_hcd: vhci_device speed not set [ 144.684677][ T5137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 144.691234][ T5137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.699248][ T5137] vhci_hcd vhci_hcd.0: Device attached [ 144.743681][ T5146] vhci_hcd: connection closed [ 144.748910][ T4482] vhci_hcd: stop threads [ 144.774611][ T4482] vhci_hcd: release socket [ 144.790706][ T4482] vhci_hcd: disconnect device [ 145.139821][ T5156] vivid-003: ================= START STATUS ================= [ 145.147796][ T5156] vivid-003: Radio HW Seek Mode: Bounded [ 145.153578][ T5156] vivid-003: Radio Programmable HW Seek: false [ 145.159877][ T5156] vivid-003: RDS Rx I/O Mode: Block I/O [ 145.165651][ T5156] vivid-003: Generate RBDS Instead of RDS: false [ 145.172173][ T5156] vivid-003: RDS Reception: true [ 145.177488][ T5156] vivid-003: RDS Program Type: 0 inactive [ 145.183437][ T5156] vivid-003: RDS PS Name: inactive [ 145.188815][ T5156] vivid-003: RDS Radio Text: inactive [ 145.203297][ T5156] vivid-003: RDS Traffic Announcement: false inactive [ 145.210677][ T5156] vivid-003: RDS Traffic Program: false inactive [ 145.217356][ T5156] vivid-003: RDS Music: false inactive [ 145.222928][ T5156] vivid-003: ================== END STATUS ================== [ 146.260257][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 148.281042][ T5190] fuse: Unknown parameter 'group_id00000000000000000000' [ 148.492432][ T14] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 148.682211][ T14] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 148.702337][ T14] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 148.723131][ T14] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 149.583578][ T5199] 9pnet_virtio: no channels available for device 127.0.0.1 [ 149.891404][ T5202] fuse: Bad value for 'fd' [ 149.904612][ T5202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 150.935713][ T5207] Device name cannot be null; rc = [-22] [ 155.165392][ T5252] 9pnet_virtio: no channels available for device 127.0.0.1 [ 155.537399][ T5256] autofs4:pid:5256:autofs_fill_super: called with bogus options [ 155.649138][ T5260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 157.516440][ T5275] vivid-000: ================= START STATUS ================= [ 157.524377][ T5275] vivid-000: Radio HW Seek Mode: Bounded [ 157.530385][ T5275] vivid-000: Radio Programmable HW Seek: false [ 157.537110][ T5275] vivid-000: RDS Rx I/O Mode: Block I/O [ 157.542976][ T5275] vivid-000: Generate RBDS Instead of RDS: false [ 157.549512][ T5275] vivid-000: RDS Reception: true [ 157.554609][ T5275] vivid-000: RDS Program Type: 0 inactive [ 157.560566][ T5275] vivid-000: RDS PS Name: inactive [ 157.566003][ T5275] vivid-000: RDS Radio Text: inactive [ 157.582736][ T5275] vivid-000: RDS Traffic Announcement: false inactive [ 157.589765][ T5275] vivid-000: RDS Traffic Program: false inactive [ 157.596862][ T5275] vivid-000: RDS Music: false inactive [ 157.602664][ T5275] vivid-000: ================== END STATUS ================== [ 159.334767][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.536608][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.552865][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.571011][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.584546][ T4320] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 159.601940][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.626872][ T4320] usb 4-1: config 0 descriptor?? [ 160.056611][ T4320] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 161.564806][ T4320] usb 4-1: USB disconnect, device number 3 [ 163.345567][ T5342] vivid-004: ================= START STATUS ================= [ 163.353520][ T5342] vivid-004: Radio HW Seek Mode: Bounded [ 163.359591][ T5342] vivid-004: Radio Programmable HW Seek: false [ 163.365958][ T5342] vivid-004: RDS Rx I/O Mode: Block I/O [ 163.371641][ T5342] vivid-004: Generate RBDS Instead of RDS: false [ 163.378136][ T5342] vivid-004: RDS Reception: true [ 163.383358][ T5342] vivid-004: RDS Program Type: 0 inactive [ 163.389417][ T5342] vivid-004: RDS PS Name: inactive [ 163.394854][ T5342] vivid-004: RDS Radio Text: inactive [ 163.406423][ T5342] vivid-004: RDS Traffic Announcement: false inactive [ 163.413436][ T5342] vivid-004: RDS Traffic Program: false inactive [ 163.494570][ T5342] vivid-004: RDS Music: false inactive [ 163.544849][ T5342] vivid-004: ================== END STATUS ================== [ 163.545130][ T5344] Device name cannot be null; rc = [-22] [ 165.814657][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.126271][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.149764][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.244976][ T4320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.258273][ T4320] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 166.300665][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.323933][ T4320] usb 5-1: config 0 descriptor?? [ 166.888821][ T4320] ryos 0003:1E7D:3232.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 166.982011][ T5385] Device name cannot be null; rc = [-22] [ 168.279578][ T4320] usb 5-1: USB disconnect, device number 3 [ 169.277977][ T5398] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 169.284704][ T5398] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.292674][ T5398] vhci_hcd vhci_hcd.0: Device attached [ 169.339923][ T5399] vhci_hcd: connection closed [ 169.340945][ T4398] vhci_hcd: stop threads [ 169.390171][ T4398] vhci_hcd: release socket [ 169.434365][ T4398] vhci_hcd: disconnect device [ 169.504538][ T22] vhci_hcd: vhci_device speed not set [ 170.546272][ T5419] netlink: 'syz.4.275': attribute type 20 has an invalid length. [ 170.565181][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.275'. [ 171.284113][ T5428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.278'. [ 171.414479][ T5429] fuse: Unknown parameter 'group_id00000000000000000000' [ 173.264223][ T5437] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 173.922182][ T5449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 173.928900][ T5449] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.936815][ T5449] vhci_hcd vhci_hcd.0: Device attached [ 174.207079][ T5450] vhci_hcd: connection closed [ 174.207287][ T4409] vhci_hcd: stop threads [ 174.216724][ T4409] vhci_hcd: release socket [ 174.221279][ T4409] vhci_hcd: disconnect device [ 174.274684][ T5264] vhci_hcd: vhci_device speed not set [ 175.583678][ T5473] netlink: 'syz.2.290': attribute type 20 has an invalid length. [ 175.629883][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'. [ 176.248011][ T5479] fuse: Unknown parameter 'group_id00000000000000000000' [ 176.831979][ T5484] vivid-003: ================= START STATUS ================= [ 176.839814][ T5484] vivid-003: Radio HW Seek Mode: Bounded [ 176.846051][ T5484] vivid-003: Radio Programmable HW Seek: false [ 176.852477][ T5484] vivid-003: RDS Rx I/O Mode: Block I/O [ 176.858617][ T5484] vivid-003: Generate RBDS Instead of RDS: false [ 176.866419][ T5484] vivid-003: RDS Reception: true [ 176.871500][ T5484] vivid-003: RDS Program Type: 0 inactive [ 176.877905][ T5484] vivid-003: RDS PS Name: inactive [ 176.903101][ T5484] vivid-003: RDS Radio Text: inactive [ 176.908919][ T5484] vivid-003: RDS Traffic Announcement: false inactive [ 176.915962][ T5484] vivid-003: RDS Traffic Program: false inactive [ 176.922420][ T5484] vivid-003: RDS Music: false inactive [ 176.928120][ T5484] vivid-003: ================== END STATUS ================== [ 180.564590][ T5511] fuse: Bad value for 'fd' [ 180.580997][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'. [ 182.139386][ T5512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 182.145928][ T5512] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.154171][ T5512] vhci_hcd vhci_hcd.0: Device attached [ 182.357312][ T5517] vhci_hcd: connection closed [ 182.358642][ T9] vhci_hcd: stop threads [ 182.657695][ T4376] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 182.688373][ T9] vhci_hcd: release socket [ 182.722440][ T9] vhci_hcd: disconnect device [ 183.189264][ T5528] netlink: 'syz.3.305': attribute type 20 has an invalid length. [ 183.354050][ T5528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 183.542347][ T5530] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 186.027009][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 186.033076][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 186.039141][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 186.039181][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 186.039232][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 186.670022][ T5544] tipc: Enabled bearer , priority 0 [ 186.786433][ T5548] tipc: Resetting bearer [ 186.857568][ T5540] tipc: Disabling bearer [ 186.942769][ T5555] Device name cannot be null; rc = [-22] [ 187.830519][ T4376] vhci_hcd: vhci_device speed not set [ 187.966048][ T5563] fuse: Bad value for 'fd' [ 187.979596][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 190.972721][ T5571] vivid-002: ================= START STATUS ================= [ 190.981049][ T5571] vivid-002: Radio HW Seek Mode: Bounded [ 190.987144][ T5571] vivid-002: Radio Programmable HW Seek: false [ 190.993448][ T5571] vivid-002: RDS Rx I/O Mode: Block I/O [ 190.999132][ T5571] vivid-002: Generate RBDS Instead of RDS: false [ 191.005646][ T5571] vivid-002: RDS Reception: true [ 191.010715][ T5571] vivid-002: RDS Program Type: 0 inactive [ 191.016629][ T5571] vivid-002: RDS PS Name: inactive [ 191.022038][ T5571] vivid-002: RDS Radio Text: inactive [ 191.033885][ T5571] vivid-002: RDS Traffic Announcement: false inactive [ 191.041021][ T5571] vivid-002: RDS Traffic Program: false inactive [ 191.047566][ T5571] vivid-002: RDS Music: false inactive [ 191.053160][ T5571] vivid-002: ================== END STATUS ================== [ 191.809940][ T5577] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 194.084811][ T5601] netlink: 'syz.1.322': attribute type 20 has an invalid length. [ 194.248438][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255885][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.352701][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 195.302215][ T5610] Device name cannot be null; rc = [-22] [ 195.509110][ T5612] tipc: Started in network mode [ 195.514219][ T5612] tipc: Node identity 2a2a9c02624, cluster identity 4711 [ 195.548892][ T5612] tipc: Enabled bearer , priority 0 [ 195.598650][ T5613] device syzkaller0 entered promiscuous mode [ 196.546772][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 196.555811][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 196.588244][ T5621] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.597163][ T5621] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.606257][ T5621] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.615090][ T5621] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.630378][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 196.639516][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 196.938387][ T5612] tipc: Resetting bearer [ 196.948450][ T5264] tipc: Node number set to 1214946306 [ 197.016890][ T5611] tipc: Resetting bearer [ 197.188618][ T5611] tipc: Disabling bearer [ 197.340720][ T5631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.330'. [ 198.075299][ T5632] vivid-004: ================= START STATUS ================= [ 198.083052][ T5632] vivid-004: Radio HW Seek Mode: Bounded [ 198.089229][ T5632] vivid-004: Radio Programmable HW Seek: false [ 198.095598][ T5632] vivid-004: RDS Rx I/O Mode: Block I/O [ 198.101360][ T5632] vivid-004: Generate RBDS Instead of RDS: false [ 198.107918][ T5632] vivid-004: RDS Reception: true [ 198.112983][ T5632] vivid-004: RDS Program Type: 0 inactive [ 198.118878][ T5632] vivid-004: RDS PS Name: inactive [ 198.124218][ T5632] vivid-004: RDS Radio Text: inactive [ 198.134574][ T5632] vivid-004: RDS Traffic Announcement: false inactive [ 198.141498][ T5632] vivid-004: RDS Traffic Program: false inactive [ 198.148554][ T5632] vivid-004: RDS Music: false inactive [ 198.154484][ T5632] vivid-004: ================== END STATUS ================== [ 200.175504][ T5649] vivid-000: ================= START STATUS ================= [ 200.183322][ T5649] vivid-000: Radio HW Seek Mode: Bounded [ 200.189445][ T5649] vivid-000: Radio Programmable HW Seek: false [ 200.196439][ T5649] vivid-000: RDS Rx I/O Mode: Block I/O [ 200.202120][ T5649] vivid-000: Generate RBDS Instead of RDS: false [ 200.208881][ T5649] vivid-000: RDS Reception: true [ 200.214050][ T5649] vivid-000: RDS Program Type: 0 inactive [ 200.220279][ T5649] vivid-000: RDS PS Name: inactive [ 200.231143][ T5649] vivid-000: RDS Radio Text: inactive [ 200.237064][ T5649] vivid-000: RDS Traffic Announcement: false inactive [ 200.244015][ T5649] vivid-000: RDS Traffic Program: false inactive [ 200.250681][ T5649] vivid-000: RDS Music: false inactive [ 200.256417][ T5649] vivid-000: ================== END STATUS ================== [ 201.887789][ T5664] Device name cannot be null; rc = [-22] [ 202.091997][ T5660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 203.717570][ T5676] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 205.550933][ T5702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 205.557528][ T5702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.569750][ T5702] vhci_hcd vhci_hcd.0: Device attached [ 205.624308][ T5703] vhci_hcd: connection closed [ 205.625934][ T4610] vhci_hcd: stop threads [ 205.684324][ T4610] vhci_hcd: release socket [ 205.864667][ T5050] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 205.970970][ T4610] vhci_hcd: disconnect device [ 206.868319][ T5708] vivid-001: ================= START STATUS ================= [ 206.876428][ T5708] vivid-001: Radio HW Seek Mode: Bounded [ 206.882266][ T5708] vivid-001: Radio Programmable HW Seek: false [ 206.888749][ T5708] vivid-001: RDS Rx I/O Mode: Block I/O [ 206.894644][ T5708] vivid-001: Generate RBDS Instead of RDS: false [ 206.901163][ T5708] vivid-001: RDS Reception: true [ 206.907506][ T5708] vivid-001: RDS Program Type: 0 inactive [ 206.913385][ T5708] vivid-001: RDS PS Name: inactive [ 206.918864][ T5708] vivid-001: RDS Radio Text: inactive [ 206.924596][ T5708] vivid-001: RDS Traffic Announcement: false inactive [ 206.931581][ T5708] vivid-001: RDS Traffic Program: false inactive [ 206.938158][ T5708] vivid-001: RDS Music: false inactive [ 206.944239][ T5708] vivid-001: ================== END STATUS ================== [ 207.555031][ T5718] Device name cannot be null; rc = [-22] [ 208.052479][ T5724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.352'. [ 208.305314][ T5722] netlink: 'syz.4.358': attribute type 20 has an invalid length. [ 208.928262][ T5721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'. [ 209.538077][ T14] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 209.684329][ T14] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 209.693982][ T14] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 209.702968][ T14] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 211.154831][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 211.164010][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 211.298583][ T5751] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.307485][ T5751] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.316370][ T5751] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.325338][ T5751] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.559006][ T5761] vivid-000: ================= START STATUS ================= [ 211.566874][ T5761] vivid-000: Radio HW Seek Mode: Bounded [ 211.572703][ T5761] vivid-000: Radio Programmable HW Seek: false [ 211.579114][ T5761] vivid-000: RDS Rx I/O Mode: Block I/O [ 211.584810][ T5761] vivid-000: Generate RBDS Instead of RDS: false [ 211.591269][ T5761] vivid-000: RDS Reception: true [ 211.596412][ T5761] vivid-000: RDS Program Type: 0 inactive [ 211.602276][ T5761] vivid-000: RDS PS Name: inactive [ 211.607634][ T5761] vivid-000: RDS Radio Text: inactive [ 211.618535][ T5761] vivid-000: RDS Traffic Announcement: false inactive [ 211.625834][ T5761] vivid-000: RDS Traffic Program: false inactive [ 211.632283][ T5761] vivid-000: RDS Music: false inactive [ 211.638219][ T5761] vivid-000: ================== END STATUS ================== [ 211.647203][ T5050] vhci_hcd: vhci_device speed not set [ 212.977142][ T5763] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 212.983703][ T5763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.992138][ T5763] vhci_hcd vhci_hcd.0: Device attached [ 213.003892][ T5764] vhci_hcd: connection closed [ 213.005349][ T4390] vhci_hcd: stop threads [ 213.080774][ T4390] vhci_hcd: release socket [ 213.202374][ T4390] vhci_hcd: disconnect device [ 213.288139][ T4349] vhci_hcd: vhci_device speed not set [ 214.456423][ T5780] autofs4:pid:5780:autofs_fill_super: called with bogus options [ 216.317080][ T5794] netlink: 'syz.1.376': attribute type 20 has an invalid length. [ 216.353986][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 217.342068][ T5804] netlink: 44 bytes leftover after parsing attributes in process `syz.3.379'. [ 217.575168][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 217.584121][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 217.658150][ T5813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.667093][ T5813] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.676027][ T5813] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.684902][ T5813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.775444][ T5816] vivid-002: ================= START STATUS ================= [ 217.783225][ T5816] vivid-002: Radio HW Seek Mode: Bounded [ 217.789061][ T5816] vivid-002: Radio Programmable HW Seek: false [ 217.795336][ T5816] vivid-002: RDS Rx I/O Mode: Block I/O [ 217.801016][ T5816] vivid-002: Generate RBDS Instead of RDS: false [ 217.807973][ T5816] vivid-002: RDS Reception: true [ 217.813426][ T5816] vivid-002: RDS Program Type: 0 inactive [ 217.819372][ T5816] vivid-002: RDS PS Name: inactive [ 217.824853][ T5816] vivid-002: RDS Radio Text: inactive [ 217.838072][ T5816] vivid-002: RDS Traffic Announcement: false inactive [ 217.845109][ T5816] vivid-002: RDS Traffic Program: false inactive [ 217.851522][ T5816] vivid-002: RDS Music: false inactive [ 217.857639][ T5816] vivid-002: ================== END STATUS ================== [ 218.623011][ T5823] autofs4:pid:5823:autofs_fill_super: called with bogus options [ 221.834819][ T5846] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 221.907236][ T5847] vivid-003: ================= START STATUS ================= [ 221.915115][ T5847] vivid-003: Radio HW Seek Mode: Bounded [ 221.921004][ T5847] vivid-003: Radio Programmable HW Seek: false [ 221.927395][ T5847] vivid-003: RDS Rx I/O Mode: Block I/O [ 221.933057][ T5847] vivid-003: Generate RBDS Instead of RDS: false [ 221.940147][ T5847] vivid-003: RDS Reception: true [ 221.945266][ T5847] vivid-003: RDS Program Type: 0 inactive [ 221.951161][ T5847] vivid-003: RDS PS Name: inactive [ 221.956640][ T5847] vivid-003: RDS Radio Text: inactive [ 221.967998][ T5847] vivid-003: RDS Traffic Announcement: false inactive [ 221.975063][ T5847] vivid-003: RDS Traffic Program: false inactive [ 221.981539][ T5847] vivid-003: RDS Music: false inactive [ 221.987814][ T5847] vivid-003: ================== END STATUS ================== [ 223.637622][ T5868] vivid-004: ================= START STATUS ================= [ 223.645880][ T5868] vivid-004: Radio HW Seek Mode: Bounded [ 223.651800][ T5868] vivid-004: Radio Programmable HW Seek: false [ 223.658237][ T5868] vivid-004: RDS Rx I/O Mode: Block I/O [ 223.663918][ T5868] vivid-004: Generate RBDS Instead of RDS: false [ 223.670458][ T5868] vivid-004: RDS Reception: true [ 223.675584][ T5868] vivid-004: RDS Program Type: 0 inactive [ 223.681416][ T5868] vivid-004: RDS PS Name: inactive [ 223.686803][ T5868] vivid-004: RDS Radio Text: inactive [ 223.698526][ T5868] vivid-004: RDS Traffic Announcement: false inactive [ 223.705612][ T5868] vivid-004: RDS Traffic Program: false inactive [ 223.712124][ T5868] vivid-004: RDS Music: false inactive [ 223.717914][ T5868] vivid-004: ================== END STATUS ================== [ 224.739576][ T5875] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 224.884949][ T5875] device hsr0 entered promiscuous mode [ 224.908014][ T5875] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.920335][ T5875] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 224.931387][ T5875] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 224.944268][ T5875] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 225.437263][ T5880] usb usb8: usbfs: process 5880 (syz.2.399) did not claim interface 0 before use [ 227.060151][ T5897] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 228.277393][ T5913] vivid-004: ================= START STATUS ================= [ 228.285487][ T5913] vivid-004: Radio HW Seek Mode: Bounded [ 228.291601][ T5913] vivid-004: Radio Programmable HW Seek: false [ 228.298221][ T5913] vivid-004: RDS Rx I/O Mode: Block I/O [ 228.303826][ T5913] vivid-004: Generate RBDS Instead of RDS: false [ 228.310349][ T5913] vivid-004: RDS Reception: true [ 228.315501][ T5913] vivid-004: RDS Program Type: 0 inactive [ 228.321338][ T5913] vivid-004: RDS PS Name: inactive [ 228.326714][ T5913] vivid-004: RDS Radio Text: inactive [ 228.337460][ T5913] vivid-004: RDS Traffic Announcement: false inactive [ 228.344375][ T5913] vivid-004: RDS Traffic Program: false inactive [ 228.351544][ T5913] vivid-004: RDS Music: false inactive [ 228.358087][ T5913] vivid-004: ================== END STATUS ================== [ 229.384532][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.984640][ T4319] usb 5-1: Using ep0 maxpacket: 16 [ 229.992483][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.008743][ T4319] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 230.121724][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.341471][ T4319] usb 5-1: config 0 descriptor?? [ 233.184547][ T4319] usbhid 5-1:0.0: can't add hid device: -71 [ 233.190690][ T4319] usbhid: probe of 5-1:0.0 failed with error -71 [ 233.522264][ T4319] usb 5-1: USB disconnect, device number 4 [ 235.994136][ T5960] tipc: Enabled bearer , priority 0 [ 236.056437][ T5963] vivid-000: ================= START STATUS ================= [ 236.064338][ T5963] vivid-000: Radio HW Seek Mode: Bounded [ 236.070229][ T5963] vivid-000: Radio Programmable HW Seek: false [ 236.076605][ T5963] vivid-000: RDS Rx I/O Mode: Block I/O [ 236.082283][ T5963] vivid-000: Generate RBDS Instead of RDS: false [ 236.088887][ T5963] vivid-000: RDS Reception: true [ 236.093975][ T5963] vivid-000: RDS Program Type: 0 inactive [ 236.099933][ T5963] vivid-000: RDS PS Name: inactive [ 236.105293][ T5963] vivid-000: RDS Radio Text: inactive [ 236.120416][ T5963] vivid-000: RDS Traffic Announcement: false inactive [ 236.127529][ T5963] vivid-000: RDS Traffic Program: false inactive [ 236.134841][ T5963] vivid-000: RDS Music: false inactive [ 236.140688][ T5963] vivid-000: ================== END STATUS ================== [ 236.874382][ T5960] device syzkaller0 entered promiscuous mode [ 237.104827][ T4334] tipc: Node number set to 8164304 [ 237.372797][ T5969] tipc: Resetting bearer [ 237.436595][ T5959] tipc: Resetting bearer [ 237.493908][ T5959] tipc: Disabling bearer [ 237.583550][ T5979] netlink: 44 bytes leftover after parsing attributes in process `syz.0.425'. [ 237.892359][ T4334] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 238.614741][ T4334] usb 4-1: Using ep0 maxpacket: 16 [ 238.625309][ T4334] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 238.641859][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.654876][ T4334] usb 4-1: Product: syz [ 238.659085][ T4334] usb 4-1: Manufacturer: syz [ 238.663692][ T4334] usb 4-1: SerialNumber: syz [ 238.737760][ T4334] r8152-cfgselector 4-1: config 0 descriptor?? [ 240.053512][ T5997] No such timeout policy "syz0" [ 240.257073][ T27] INFO: task udevd:4258 blocked for more than 143 seconds. [ 240.268363][ T27] Not tainted 6.1.146-syzkaller #0 [ 240.274139][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.282966][ T27] task:udevd state:D stack:25920 pid:4258 ppid:3637 flags:0x00004002 [ 240.292577][ T27] Call Trace: [ 240.296088][ T27] [ 240.304534][ T27] __schedule+0x10e9/0x40d0 [ 240.309525][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 240.316565][ T27] ? __mutex_trylock_common+0x80/0x250 [ 240.322751][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 240.330040][ T27] schedule+0xb9/0x180 [ 240.335355][ T27] schedule_preempt_disabled+0xf/0x20 [ 240.341373][ T27] __mutex_lock+0x555/0xaf0 [ 240.346465][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 240.351516][ T27] ? uevent_show+0x16c/0x320 [ 240.357605][ T27] ? mutex_lock_nested+0x10/0x10 [ 240.363754][ T27] uevent_show+0x16c/0x320 [ 240.368939][ T27] dev_attr_show+0x50/0xb0 [ 240.373761][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 240.379140][ T27] ? device_get_ownership+0xa0/0xa0 [ 240.385111][ T27] seq_read_iter+0x49b/0xd50 [ 240.390144][ T27] ? common_file_perm+0x171/0x1c0 [ 240.395998][ T27] vfs_read+0x434/0x920 [ 240.402071][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 240.407863][ T27] ? kernel_read+0x1e0/0x1e0 [ 240.413428][ T27] ? __x64_sys_newfstat+0x171/0x1c0 [ 240.421224][ T27] ? __fdget_pos+0x2b5/0x360 [ 240.427705][ T27] ksys_read+0x143/0x240 [ 240.432519][ T27] ? vfs_write+0x960/0x960 [ 240.438080][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 240.443766][ T27] do_syscall_64+0x4c/0xa0 [ 240.448624][ T27] ? clear_bhb_loop+0x60/0xb0 [ 240.453752][ T27] ? clear_bhb_loop+0x60/0xb0 [ 240.459234][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.465737][ T27] RIP: 0033:0x7fe2328a7407 [ 240.470552][ T27] RSP: 002b:00007ffee7d543f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 240.480819][ T27] RAX: ffffffffffffffda RBX: 00007fe233034880 RCX: 00007fe2328a7407 [ 240.494768][ T27] RDX: 0000000000001000 RSI: 000055623cd25a10 RDI: 0000000000000008 [ 240.720011][ T27] RBP: 00007fe2329efff0 R08: 0000000000000000 R09: 0000000000000000 [ 240.873665][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 241.162749][ T27] R13: 00007fe2329efea0 R14: 0000000000000000 R15: 000055623cd26f30 [ 241.184683][ T27] [ 241.191666][ T27] [ 241.191666][ T27] Showing all locks held in the system: [ 242.566823][ T4334] r8152-cfgselector 4-1: Unknown version 0x0000 [ 242.592698][ T4334] r8152-cfgselector 4-1: Unknown version 0x0000 [ 242.624894][ T27] 1 lock held by rcu_tasks_kthre/12: [ 242.633683][ T4334] r8152-cfgselector 4-1: bad CDC descriptors [ 242.650819][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 242.705882][ T4334] r8152-cfgselector 4-1: Unknown version 0x0000 [ 242.741369][ T27] 1 lock held by rcu_tasks_trace/13: [ 242.748081][ T4334] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 242.771818][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 242.801543][ T27] 6 locks held by kworker/0:1/14: [ 242.807060][ T27] #0: ffff8881432f3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 242.818680][ T27] #1: ffffc90000137d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 242.830605][ T27] #2: ffff888144f89190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 242.839921][ T27] #3: ffff88802a5b3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 242.850620][ T27] #4: ffff88802d783118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 242.860254][ T27] #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0 [ 242.871157][ T27] 1 lock held by khungtaskd/27: [ 242.876348][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 242.886656][ T27] 2 locks held by getty/4028: [ 242.891443][ T27] #0: ffff88814cf39098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 242.902435][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 242.913177][ T27] 4 locks held by udevd/4258: [ 242.918206][ T27] #0: ffff88801cae3540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 242.927412][ T27] #1: ffff88802715a488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 242.937063][ T27] #2: ffff888057d89bd0 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 242.947039][ T27] #3: ffff88802a5b3190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 242.956433][ T27] 3 locks held by kworker/1:6/4334: [ 242.961828][ T27] #0: ffff8881432f3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 242.973028][ T27] #1: ffffc90004477d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 242.984779][ T27] #2: ffff888027d59190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 242.993823][ T27] [ 242.997206][ T27] ============================================= [ 242.997206][ T27] [ 243.005861][ T27] NMI backtrace for cpu 0 [ 243.010222][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 243.018119][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.028192][ T27] Call Trace: [ 243.031477][ T27] [ 243.034421][ T27] dump_stack_lvl+0x168/0x22e [ 243.039123][ T27] ? show_regs_print_info+0x12/0x12 [ 243.044327][ T27] ? load_image+0x3b0/0x3b0 [ 243.048829][ T27] ? vprintk_emit+0x571/0x680 [ 243.053498][ T27] ? printk_sprint+0x460/0x460 [ 243.058254][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 243.063209][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 243.069376][ T27] ? _printk+0xcc/0x110 [ 243.073546][ T27] ? load_image+0x3b0/0x3b0 [ 243.078043][ T27] ? load_image+0x3b0/0x3b0 [ 243.082540][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 243.088596][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 243.094584][ T27] watchdog+0xeee/0xf30 [ 243.098741][ T27] ? watchdog+0x1ed/0xf30 [ 243.103099][ T27] kthread+0x29d/0x330 [ 243.107170][ T27] ? hungtask_pm_notify+0x40/0x40 [ 243.112195][ T27] ? kthread_blkcg+0xd0/0xd0 [ 243.116793][ T27] ret_from_fork+0x1f/0x30 [ 243.121326][ T27] [ 243.125085][ T27] Sending NMI from CPU 0 to CPUs 1: [ 243.130476][ C1] NMI backtrace for cpu 1 [ 243.130487][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.146-syzkaller #0 [ 243.130501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.130509][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 243.130532][ C1] RIP: 0010:fs_reclaim_acquire+0x0/0x100 [ 243.130553][ C1] Code: 45 31 c9 50 e8 51 4d 9d ff 48 83 c4 08 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 fe 48 c7 c7 80 57 c0 8c e9 51 cf 9d ff 90 <55> 53 65 48 8b 1d 96 d2 3c 7e 48 83 c3 2c 48 89 d8 48 c1 e8 03 48 [ 243.130570][ C1] RSP: 0018:ffffc900000e7a00 EFLAGS: 00000202 [ 243.130582][ C1] RAX: b29dd0cdaf207500 RBX: ffffc900000e7a60 RCX: 0000000000000001 [ 243.130591][ C1] RDX: ffffc900000e7a60 RSI: 0000000000000000 RDI: 0000000000082a20 [ 243.130600][ C1] RBP: 0000000000082a20 R08: 0000000000082a20 R09: 0000000000000000 [ 243.130609][ C1] R10: fffffbfff2d951f2 R11: 1ffffffff2d951f1 R12: 0000000000000000 [ 243.130618][ C1] R13: 00000000ffffffff R14: ffff888017442140 R15: 0000000000000001 [ 243.130627][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 243.130639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.130649][ C1] CR2: 00007fe23251deac CR3: 000000005c259000 CR4: 00000000003506e0 [ 243.130661][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.130669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.130677][ C1] Call Trace: [ 243.130682][ C1] [ 243.130687][ C1] slab_pre_alloc_hook+0x2a/0x310 [ 243.130703][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 243.130720][ C1] __kmem_cache_alloc_node+0x4f/0x260 [ 243.130735][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 243.130751][ C1] __kmalloc_node_track_caller+0x9e/0x230 [ 243.130770][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 243.130786][ C1] __alloc_skb+0x22a/0x7e0 [ 243.130810][ C1] nsim_dev_trap_report_work+0x28f/0xaf0 [ 243.130828][ C1] ? read_lock_is_recursive+0x10/0x10 [ 243.130847][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 243.130866][ C1] ? process_one_work+0x7a1/0x1160 [ 243.130880][ C1] process_one_work+0x898/0x1160 [ 243.130899][ C1] ? worker_detach_from_pool+0x240/0x240 [ 243.130914][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 243.130930][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 243.130945][ C1] ? kthread_data+0x4b/0xc0 [ 243.130963][ C1] worker_thread+0xaa2/0x1250 [ 243.130988][ C1] kthread+0x29d/0x330 [ 243.131003][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 243.131016][ C1] ? kthread_blkcg+0xd0/0xd0 [ 243.131033][ C1] ret_from_fork+0x1f/0x30 [ 243.131054][ C1] [ 243.132492][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 243.394835][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 243.402765][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.412845][ T27] Call Trace: [ 243.416116][ T27] [ 243.419054][ T27] dump_stack_lvl+0x168/0x22e [ 243.423733][ T27] ? memcpy+0x3c/0x60 [ 243.427721][ T27] ? show_regs_print_info+0x12/0x12 [ 243.432912][ T27] ? load_image+0x3b0/0x3b0 [ 243.437420][ T27] panic+0x2c9/0x710 [ 243.441311][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 243.446937][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 243.451445][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 243.457680][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 243.463830][ T27] watchdog+0xf2d/0xf30 [ 243.467996][ T27] ? watchdog+0x1ed/0xf30 [ 243.472327][ T27] kthread+0x29d/0x330 [ 243.476391][ T27] ? hungtask_pm_notify+0x40/0x40 [ 243.481408][ T27] ? kthread_blkcg+0xd0/0xd0 [ 243.485997][ T27] ret_from_fork+0x1f/0x30 [ 243.490425][ T27] [ 243.493689][ T27] Kernel Offset: disabled [ 243.498007][ T27] Rebooting in 86400 seconds..