last executing test programs: 14.128153159s ago: executing program 1 (id=429): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 13.008325287s ago: executing program 1 (id=433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x1, 0xda01, 0x0, 0x0}], 0x1}) socket$key(0xf, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.893211942s ago: executing program 0 (id=435): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 12.567138486s ago: executing program 0 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000010900010073797a310000000068000000030a01040000000000000000010000000900030073797a31000000000900010073797a31000000003c000480080002401886c30108000140000000051400030070696d726567310000000000000000001400030076657468305f746f5f626f6e6400000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 12.222890211s ago: executing program 0 (id=440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c00000001b001d0328bd7000fcdbdf257f000001000000000000000000000000fe8000000000000000000000000000244e2000014e240400020080a08700000098434df3d118549d56b6c1d7c0c272c7ab25a016b18697cace984d5d1c31957053a2bc16781957c878e17f3bf7f80872b9ecb0b99e00ab09214f1a5a909f99c75ea6dff2a5b413dc339edd5d39f3fa15b3441548b9a8b07a478b24627e4490d0f29754bc3bac8d9d3947db201056417cdd"], 0xc0}}, 0x4000) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) unshare(0xa050000) pipe2(&(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.534474644s ago: executing program 0 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 9.035510729s ago: executing program 1 (id=446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000002440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r5}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x910008eb) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) 9.01464131s ago: executing program 0 (id=447): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x3, 0x5, "eaaa11940d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "c47f"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, 0x0) 8.115711389s ago: executing program 2 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8d1}, 0x40) 8.003908124s ago: executing program 2 (id=451): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x7fff, 0x2004cb, 0x0, 0x9, 0x68ff, 0x4000000000000, 0xfffffffffffffffe, 0x7, 0x2], 0x10000, 0x100612}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x4, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 5.890415985s ago: executing program 2 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.553995733s ago: executing program 2 (id=458): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 4.450408888s ago: executing program 2 (id=460): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x2, 0x200000000000000, 0x3, r2}) 4.359944781s ago: executing program 4 (id=462): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) 4.279464275s ago: executing program 4 (id=463): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4.259296036s ago: executing program 3 (id=464): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0xaac, &(0x7f0000000100)={0x0, 0x1692, 0x1000, 0x3, 0x3e3}) io_uring_setup(0x4c8a, &(0x7f00000002c0)={0x0, 0x8b3d, 0x80, 0x8, 0x46, 0x0, r5}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) 3.203833632s ago: executing program 0 (id=465): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20a2, 0x0, 0x0) 3.203362712s ago: executing program 3 (id=466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x9}, @window={0x3, 0x7}, @sack_perm], 0x4) 3.202667742s ago: executing program 4 (id=467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r5) 3.0010993s ago: executing program 3 (id=468): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) 2.240073203s ago: executing program 4 (id=469): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000080)) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) 2.120030358s ago: executing program 1 (id=470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1f) 2.063395181s ago: executing program 1 (id=471): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x10000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_submit(0x0, 0x0, &(0x7f0000004200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) mmap(&(0x7f00005b3000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r5, 0xe1306000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x1, 0x101, 0x6, {0x3, 0xfa5, 0x7, 0x6d0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001400110200000000fedbdf25ffffffff000000000000000000000000fc0000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c06b6e000000000008001f00000000000c001500"], 0x64}}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000001240)={'syztnl1\x00', r6, 0x8000, 0x7818, 0x9, 0x909, {{0x5, 0x4, 0x0, 0x29, 0x14, 0x68, 0x0, 0xf, 0x29, 0x0, @loopback, @loopback}}}}) 2.063227921s ago: executing program 3 (id=472): socket$inet(0x2b, 0x801, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 422.773682ms ago: executing program 1 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x61f7}}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x400) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [0x40000000, 0x4], [0xfffffffffffffffc]}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x154c, 0xef91, 0x48, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r7, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 375.361844ms ago: executing program 2 (id=474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 374.920655ms ago: executing program 3 (id=475): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) 320.133017ms ago: executing program 4 (id=476): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 74.129277ms ago: executing program 4 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x20ac) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) 0s ago: executing program 3 (id=478): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) write$char_usb(r0, &(0x7f00000000c0)="4ad9ee6375df3f974c34abbb8753d0ebf5a6afadda83eb16e5360abb28", 0x1d) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@default, @bcast, @default, 0x4, 0xfffffffffffffffc, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x143000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. syzkaller login: [ 65.695605][ T4173] cgroup: Unknown subsys name 'net' [ 65.830550][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.322369][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.949221][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.012034][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 69.055482][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.091136][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.118985][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.126574][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.135052][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.169723][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.177399][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.185844][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.205233][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 69.278874][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.305090][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.312211][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.324492][ T4196] device bridge_slave_0 entered promiscuous mode [ 69.340975][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.363094][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.370601][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.378851][ T4196] device bridge_slave_1 entered promiscuous mode [ 69.406355][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.413896][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.422020][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.438577][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.446060][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.454471][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.473764][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.481067][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.489304][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.504009][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.511294][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.519869][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.529539][ T4183] team0: Port device team_slave_0 added [ 69.554134][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.572706][ T4183] team0: Port device team_slave_1 added [ 69.596107][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.622596][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.630206][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.638303][ T4195] device bridge_slave_0 entered promiscuous mode [ 69.648154][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.668128][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.686523][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.693778][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.702232][ T4195] device bridge_slave_1 entered promiscuous mode [ 69.711278][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.730511][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.740761][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.747935][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.774276][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.804818][ T4196] team0: Port device team_slave_0 added [ 69.818272][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.825580][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.852482][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.884520][ T4196] team0: Port device team_slave_1 added [ 69.893542][ T4191] team0: Port device team_slave_0 added [ 69.911086][ T4184] team0: Port device team_slave_0 added [ 69.919479][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.931648][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.957634][ T4191] team0: Port device team_slave_1 added [ 69.965244][ T4184] team0: Port device team_slave_1 added [ 70.024506][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.031555][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.058266][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.087015][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.094390][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.121202][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.135487][ T4195] team0: Port device team_slave_0 added [ 70.142338][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.149634][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.175787][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.187839][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.194957][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.221733][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.233400][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.240361][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.266984][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.281487][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.288895][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.297499][ T4195] team0: Port device team_slave_1 added [ 70.318925][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.325960][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.352061][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.382043][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.389136][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.415334][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.431992][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.439512][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.465943][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.524130][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 70.524130][ T2237] Bluetooth: hci1: command 0x0409 tx timeout [ 70.542752][ T4196] device hsr_slave_0 entered promiscuous mode [ 70.550748][ T4196] device hsr_slave_1 entered promiscuous mode [ 70.557954][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.567156][ T4196] Cannot create hsr debugfs directory [ 70.588337][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.595752][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.602325][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.610785][ T4191] Cannot create hsr debugfs directory [ 70.623634][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 70.629801][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 70.636583][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.662762][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.669896][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.676721][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.684537][ T4184] Cannot create hsr debugfs directory [ 70.693596][ T4195] device hsr_slave_0 entered promiscuous mode [ 70.700483][ T4195] device hsr_slave_1 entered promiscuous mode [ 70.707447][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.715951][ T4195] Cannot create hsr debugfs directory [ 71.037182][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.052290][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.061593][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.077255][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.126431][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.140694][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.149861][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.164618][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.216402][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.237400][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.250191][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.271899][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.322610][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.376830][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.388981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.400167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.410710][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.429374][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.443169][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.453454][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.474964][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.487216][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.494187][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496521][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.512034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.522681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.532150][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.539610][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.548749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.561717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.570957][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.578098][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.586396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.594628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.622605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.631857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.641761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.651398][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.658532][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.669227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.679694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.712889][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.725073][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.734439][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.741620][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.749420][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.759445][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.768420][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.777545][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.810303][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.819241][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.828959][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.842328][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.850912][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.868973][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.882047][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.894772][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.914895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.932158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.942126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.957542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.971403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.980636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.989968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.001693][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.010600][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.020639][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.032212][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.046991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.056279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.066176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.085236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.093135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.115255][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.153942][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.162627][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.172999][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.186152][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.195279][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.204410][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.211499][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.220721][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.242737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.257974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.269336][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.276509][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.333538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.350781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.360418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.375976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.387863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.400279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.409404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.419707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.428599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.452389][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.463830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.472316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.487371][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.512217][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.525164][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.542392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.551684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.566551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.574826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.590890][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.603908][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 72.613626][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 72.620647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.629369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.639105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.648489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.658365][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.665528][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.679640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.683640][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 72.689761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.698516][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 72.708649][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 72.720377][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.739379][ T4183] device veth0_vlan entered promiscuous mode [ 72.747209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.756252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.765562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.775152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.785480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.795128][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.802222][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.828993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.839739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.861026][ T4183] device veth1_vlan entered promiscuous mode [ 72.874030][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.887065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.895786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.905951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.939555][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.947647][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.957471][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.969241][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.979402][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.988490][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.997793][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.006158][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.043077][ T4183] device veth0_macvtap entered promiscuous mode [ 73.055128][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.065459][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.075499][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.085636][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.094436][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.103006][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.112123][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.121927][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.131366][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.140055][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.149624][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.158374][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165490][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.178381][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.188087][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.199766][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.213912][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.222968][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.232712][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.248584][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.258827][ T4183] device veth1_macvtap entered promiscuous mode [ 73.268532][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.276931][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.292866][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.301684][ T4191] device veth0_vlan entered promiscuous mode [ 73.369447][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.379119][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.389026][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.396182][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.405874][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.418518][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.428143][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.437649][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.447850][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.467517][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.480961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.490747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.500199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.510829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.520605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.530063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.549654][ T4191] device veth1_vlan entered promiscuous mode [ 73.562262][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.571629][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.587589][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.599823][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.619440][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.630865][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.649003][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.663237][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.680155][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.689214][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.705081][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.714626][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.723028][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.733081][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.742150][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.750193][ T4196] device veth0_vlan entered promiscuous mode [ 73.762142][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771480][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.781457][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790492][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.816916][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.838959][ T4196] device veth1_vlan entered promiscuous mode [ 73.847101][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.857710][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.865542][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.873038][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.882646][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.905558][ T4191] device veth0_macvtap entered promiscuous mode [ 73.959974][ T4191] device veth1_macvtap entered promiscuous mode [ 73.976557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.987053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.995758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.006347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.014360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.031374][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.040854][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.067665][ T4196] device veth0_macvtap entered promiscuous mode [ 74.082525][ T4196] device veth1_macvtap entered promiscuous mode [ 74.102916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.112714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.125170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.135014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.150729][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.159910][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.172773][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.190103][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.214932][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.233758][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.244012][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.254708][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.266784][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.282498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.292300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.303375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.312687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.350342][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.365913][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.378964][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.399219][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.411671][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.422318][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.434014][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.447061][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.455378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.464087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.472522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.481731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.491549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.501299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.510260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.518579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.530271][ T4195] device veth0_vlan entered promiscuous mode [ 74.541311][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.550641][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.560140][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.570227][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591425][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.606051][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616352][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.624231][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.632960][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.644089][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.669323][ T4195] device veth1_vlan entered promiscuous mode [ 74.683999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.684397][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 74.696981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.735228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.745128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.748224][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 74.767090][ T4247] Bluetooth: hci4: command 0x040f tx timeout [ 74.773396][ T4247] Bluetooth: hci3: command 0x040f tx timeout [ 74.779555][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 74.798898][ T512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.811336][ T512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.838959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.851929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.892835][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.910965][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.922552][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.933664][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.946376][ T4195] device veth0_macvtap entered promiscuous mode [ 74.962207][ T4184] device veth0_vlan entered promiscuous mode [ 74.977747][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.986257][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.994931][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.043829][ T4195] device veth1_macvtap entered promiscuous mode [ 75.055291][ T4184] device veth1_vlan entered promiscuous mode [ 75.100460][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.128745][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.142410][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.154972][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.168994][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.186091][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.199082][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.216120][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.229519][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.241142][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.264852][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.283825][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.291997][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.298602][ T512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.317674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.347567][ T512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.365842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.378290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.387091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.397533][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.409106][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.420782][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.452960][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.463658][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.474680][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.554939][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.854381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.910588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.979386][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.023551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.127941][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153751][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.162634][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171576][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.215403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.226454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.243008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.262201][ T512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.278275][ T4184] device veth0_macvtap entered promiscuous mode [ 76.292365][ T512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.348599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.357625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.372725][ T4184] device veth1_macvtap entered promiscuous mode [ 76.452047][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.499400][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.530719][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.547673][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.564947][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.586719][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.622776][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.692612][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.505536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.523315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.528964][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 77.540733][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 77.547588][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 77.553790][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 77.560186][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 77.568092][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.604776][ T4326] process 'syz.0.10' launched './file1' with NULL argv: empty string added [ 77.640076][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.809232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.195654][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.214857][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.226428][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.235539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.244657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.253738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.263307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.273345][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.294580][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.349995][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.422210][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.486556][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.517448][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.553343][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.632554][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.704546][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.740214][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.774050][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.825226][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.853382][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.880378][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.943433][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.108379][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.146107][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.179901][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.253634][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.254383][ T3082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.273780][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.306322][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.316087][ T3082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432384][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.486757][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.507241][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.576792][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.973299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 80.381737][ T4336] 9pnet: Insufficient options for proto=fd [ 81.169545][ T4360] Zero length message leads to an empty skb [ 83.420592][ T4354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.159286][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.699128][ T4391] sched: RT throttling activated [ 87.715386][ T23] cfg80211: failed to load regulatory.db [ 91.203398][ T4185] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.295511][ T4444] TCP: MD5 Hash failed for (0.0.0.0, 0)->(224.0.0.1, 20002) L3 index 0 [ 91.503370][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.564335][ T4185] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.608343][ T4185] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.628735][ T4185] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.663557][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.826228][ T4455] binder: 4452:4455 ioctl c00c620f 2000000003c0 returned -22 [ 91.969552][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.113736][ T21] usb 2-1: config 3 has an invalid interface number: 210 but max is 0 [ 92.123674][ T21] usb 2-1: config 3 has no interface number 0 [ 92.130089][ T21] usb 2-1: config 3 interface 210 has no altsetting 0 [ 92.244203][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.288236][ T4185] usb 1-1: config 0 descriptor?? [ 92.342745][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=18.42 [ 92.360431][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.360743][ T4185] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 92.368785][ T21] usb 2-1: Product: syz [ 92.386313][ T21] usb 2-1: Manufacturer: syz [ 92.391114][ T21] usb 2-1: SerialNumber: syz [ 92.503500][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 92.783807][ T4241] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 92.795231][ T21] usbhid 2-1:3.210: couldn't find an input interrupt endpoint [ 92.824785][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.846088][ T21] usb 2-1: USB disconnect, device number 2 [ 93.665843][ T4241] usb 4-1: Product: syz [ 93.670391][ T4241] usb 4-1: Manufacturer: syz [ 93.678853][ T4241] usb 4-1: SerialNumber: syz [ 93.699188][ T4241] usb 4-1: config 0 descriptor?? [ 93.745660][ T4241] gspca_main: sq930x-2.14.0 probing 2770:930c [ 94.181390][ T4185] Bluetooth: hci4: command 0x0405 tx timeout [ 94.654310][ T4241] gspca_sq930x: reg_r 001f failed -110 [ 94.659971][ T4241] sq930x: probe of 4-1:0.0 failed with error -110 [ 94.815475][ T4246] usb 1-1: USB disconnect, device number 2 [ 94.859912][ T4453] udc-core: couldn't find an available UDC or it's busy [ 94.896390][ T4453] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.960094][ T7] usb 4-1: USB disconnect, device number 2 [ 95.503347][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.692938][ T4507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.763617][ T4241] usb 3-1: Using ep0 maxpacket: 8 [ 95.918660][ T4515] netlink: 27 bytes leftover after parsing attributes in process `syz.3.66'. [ 96.093895][ T4241] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.180700][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.208275][ T4241] usb 3-1: Product: syz [ 96.231863][ T4241] usb 3-1: Manufacturer: syz [ 96.256238][ T4241] usb 3-1: SerialNumber: syz [ 96.274404][ T4241] usb 3-1: config 0 descriptor?? [ 96.536531][ T4241] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.773532][ T4523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 96.780384][ T4523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.799023][ T4523] vhci_hcd vhci_hcd.0: Device attached [ 96.863420][ T4526] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 96.870423][ T4526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.001122][ T4526] vhci_hcd vhci_hcd.0: Device attached [ 97.063416][ T21] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 97.091344][ T4523] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 97.098002][ T4523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.116105][ T4523] vhci_hcd vhci_hcd.0: Device attached [ 97.164391][ T4523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 97.171824][ T4523] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.270414][ T4533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.284068][ T4523] vhci_hcd vhci_hcd.0: Device attached [ 97.290913][ T4533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.364576][ T4523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.408179][ T4526] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 97.414922][ T4526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.499934][ T4526] vhci_hcd vhci_hcd.0: Device attached [ 97.704065][ T4534] vhci_hcd: connection closed [ 97.716128][ T4531] vhci_hcd: connection closed [ 97.721600][ T4529] vhci_hcd: connection closed [ 97.724688][ T4415] vhci_hcd: stop threads [ 97.731202][ T4527] vhci_hcd: connection closed [ 97.731457][ T4524] vhci_hcd: connection reset by peer [ 97.796087][ T4415] vhci_hcd: release socket [ 97.826146][ T4415] vhci_hcd: disconnect device [ 99.492896][ T4415] vhci_hcd: stop threads [ 99.497530][ T4415] vhci_hcd: release socket [ 99.502155][ T4415] vhci_hcd: disconnect device [ 99.516562][ T4415] vhci_hcd: stop threads [ 99.538885][ T4415] vhci_hcd: release socket [ 99.566891][ T4415] vhci_hcd: disconnect device [ 99.677217][ T4415] vhci_hcd: stop threads [ 99.745520][ T4241] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 99.751273][ T4415] vhci_hcd: release socket [ 100.159509][ T4415] vhci_hcd: disconnect device [ 100.192812][ T4241] usb 3-1: USB disconnect, device number 2 [ 100.237406][ T4415] vhci_hcd: stop threads [ 100.277463][ T4415] vhci_hcd: release socket [ 100.324617][ T4415] vhci_hcd: disconnect device [ 101.812960][ T4241] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.063732][ T4241] usb 3-1: Using ep0 maxpacket: 8 [ 102.204947][ T21] vhci_hcd: vhci_device speed not set [ 102.223565][ T4241] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.338213][ T4241] usb 3-1: config 4 interface 0 has no altsetting 0 [ 102.583574][ T4241] usb 3-1: string descriptor 0 read error: -22 [ 102.591034][ T4241] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 102.603634][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.784915][ T4241] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 102.835692][ T4241] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.851175][ T26] audit: type=1326 audit(1764901518.685:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.0.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271695e749 code=0x0 [ 102.851609][ T4241] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 102.905051][ T4241] usb 3-1: media controller created [ 102.970653][ T4241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.013609][ T4241] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.085271][ T4241] usb 3-1: USB disconnect, device number 3 [ 103.263867][ T4334] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 104.545616][ T4334] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 104.578407][ T4334] usb usb36-port1: attempt power cycle [ 105.044682][ T4334] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 106.798125][ T4334] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 106.838842][ T4334] usb usb36-port1: unable to enumerate USB device [ 107.521772][ T4622] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 107.532020][ T4622] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 107.541723][ T4622] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.617672][ T4622] syz.2.90 (4622) used greatest stack depth: 20744 bytes left [ 107.627224][ T26] audit: type=1800 audit(1764901523.355:3): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.90" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 114.749305][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 115.103701][ T2288] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 115.464039][ T2288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.515692][ T2288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 115.564681][ T2288] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.673759][ T2288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.715698][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.728087][ T2288] usb 3-1: SerialNumber: syz [ 115.783859][ T4695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.804417][ T2288] hub 3-1:1.0: bad descriptor, ignoring hub [ 115.810501][ T2288] hub: probe of 3-1:1.0 failed with error -5 [ 115.835343][ T2288] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 116.014010][ T4334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.046007][ T2288] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 116.104258][ T2288] usb 3-1: USB disconnect, device number 4 [ 116.394803][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.843140][ T4334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.953783][ T4334] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.979710][ T4334] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 117.008922][ T4334] usb 4-1: Manufacturer: syz [ 117.041713][ T4334] usb 4-1: config 0 descriptor?? [ 119.303488][ T4334] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 119.346639][ T4334] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 119.531370][ T4334] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 119.541591][ T4334] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 119.551739][ T4334] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 120.285398][ T4334] usb 4-1: USB disconnect, device number 3 [ 120.994691][ T4804] ======================================================= [ 120.994691][ T4804] WARNING: The mand mount option has been deprecated and [ 120.994691][ T4804] and is ignored by this kernel. Remove the mand [ 120.994691][ T4804] option from the mount to silence this warning. [ 120.994691][ T4804] ======================================================= [ 122.983868][ T4811] binder: 4807:4811 ioctl c0306201 200000000180 returned -14 [ 123.007712][ T4811] binder: 4807:4811 ioctl c0306201 0 returned -14 [ 123.935792][ T4829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 124.942184][ T4846] tipc: Started in network mode [ 125.433407][ T4846] tipc: Node identity , cluster identity 4711 [ 125.463511][ T4846] tipc: Failed to obtain node identity [ 125.480355][ T4846] tipc: Enabling of bearer rejected, failed to enable media [ 126.904134][ T4265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.193409][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 127.203514][ T4305] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 127.332548][ T4265] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 127.351566][ T4265] usb 3-1: config 0 has no interface number 0 [ 127.372575][ T4265] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.387044][ T4873] block device autoloading is deprecated and will be removed. [ 127.397165][ T4265] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.408454][ T4265] usb 3-1: config 0 interface 41 has no altsetting 0 [ 127.647357][ T4265] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 127.673336][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.687790][ T4305] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.814066][ T4305] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.980221][ T4265] usb 3-1: Product: syz [ 128.202661][ T4265] usb 3-1: Manufacturer: syz [ 128.210967][ T4305] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.253136][ T4265] usb 3-1: SerialNumber: syz [ 128.303537][ T4265] usb 3-1: config 0 descriptor?? [ 128.356959][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.373709][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.416048][ T4305] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 128.431590][ T4305] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.480391][ T4305] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.639572][ T4305] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 128.647835][ T4305] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.670929][ T4888] syz.1.153 uses obsolete (PF_INET,SOCK_PACKET) [ 128.698429][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.723298][ T4305] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 128.743463][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.616478][ T4265] Error reading MAC address [ 129.815884][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.823864][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.843611][ T4305] usb 1-1: string descriptor 0 read error: -22 [ 129.852503][ T4305] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.861848][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.025936][ T4305] adutux 1-1:168.0: interrupt endpoints not found [ 130.294315][ T4305] usb 1-1: USB disconnect, device number 3 [ 130.845235][ T4265] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 68:bc:62:06:1e:f1 [ 130.924139][ T4265] usb 3-1: USB disconnect, device number 5 [ 130.948437][ T4265] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 132.039434][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.820674][ T4947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 132.843478][ T4947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 132.898636][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 132.927849][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935853][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.997049][ T4265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.203817][ T1108] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 133.219295][ T1108] usb 4-1: config 0 has no interface number 0 [ 133.226762][ T1108] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 133.433608][ T1108] usb 4-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 133.442757][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.450882][ T4265] usb 3-1: Using ep0 maxpacket: 8 [ 133.463865][ T4964] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 133.482644][ T4964] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 133.483011][ T1108] usb 4-1: Product: syz [ 133.502975][ T1108] usb 4-1: Manufacturer: syz [ 133.517628][ T1108] usb 4-1: SerialNumber: syz [ 133.551621][ T1108] usb 4-1: config 0 descriptor?? [ 133.606255][ T1108] HFC-S_USB: probe of 4-1:0.109 failed with error -5 [ 133.624353][ T4265] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 133.632799][ T4265] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.694990][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.714730][ T4265] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 133.727105][ T4247] kernel write not supported for file 103/net/vlan/vlan0 (pid: 4247 comm: kworker/1:6) [ 133.738051][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 134.592104][ T4265] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.605352][ T4265] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.614643][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.654921][ T2288] usb 4-1: USB disconnect, device number 4 [ 134.703657][ T4265] usb 3-1: can't set config #16, error -71 [ 134.719200][ T4265] usb 3-1: USB disconnect, device number 6 [ 137.863395][ T5000] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 138.436860][ T5005] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 138.652751][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.661328][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.854510][ T4265] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.115726][ T5006] ODEBUG: Out of memory. ODEBUG disabled [ 139.213434][ T4265] usb 3-1: config 0 has no interfaces? [ 139.219177][ T4265] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 139.263380][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.325553][ T4265] usb 3-1: config 0 descriptor?? [ 139.601102][ T4265] usb 3-1: USB disconnect, device number 7 [ 141.272596][ T5019] Cannot find add_set index 0 as target [ 145.721025][ T4185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.253299][ T4185] usb 5-1: Using ep0 maxpacket: 32 [ 146.487603][ T4185] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.508148][ T5065] xt_connbytes: Forcing CT accounting to be enabled [ 146.913819][ T4185] usb 5-1: config 0 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.961740][ T4185] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.987160][ T4185] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 146.997458][ T5065] Cannot find set identified by id 0 to match [ 147.014125][ T4185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.047726][ T4185] usb 5-1: config 0 descriptor?? [ 147.773792][ T4185] usbhid 5-1:0.0: can't add hid device: -71 [ 147.798903][ T4185] usbhid: probe of 5-1:0.0 failed with error -71 [ 147.868127][ T4185] usb 5-1: USB disconnect, device number 2 [ 149.891092][ T5123] loop4: detected capacity change from 0 to 128 [ 150.020990][ T5123] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.035036][ T5123] hpfs: filesystem error: improperly stopped [ 150.041148][ T5123] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.049110][ T5123] hpfs: You really don't want any checks? You are crazy... [ 150.057626][ T5123] hpfs: hpfs_map_sector(): read error [ 150.063606][ T5123] hpfs: code page support is disabled [ 150.072149][ T5123] hpfs: hpfs_map_4sectors(): unaligned read [ 150.078718][ T5123] hpfs: hpfs_map_4sectors(): unaligned read [ 150.084776][ T5123] hpfs: filesystem error: unable to find root dir [ 150.141965][ T5123] hpfs: hpfs_map_4sectors(): unaligned read [ 150.150637][ T5123] hpfs: hpfs_map_sector(): read error [ 152.058477][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 152.067448][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 152.101596][ T5142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.111013][ T5142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.119800][ T5142] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.128592][ T5142] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.143280][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 152.152261][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 154.328025][ T5150] mkiss: ax0: crc mode is auto. [ 156.644505][ T5163] loop3: detected capacity change from 0 to 128 [ 156.848797][ T5163] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 156.867285][ T5163] vxfs: unsupported VxFS version (-1232326277) [ 158.693391][ T4185] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.943493][ T4185] usb 5-1: Using ep0 maxpacket: 8 [ 159.063561][ T4185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.095003][ T4185] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.272698][ T4185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.343413][ T5174] loop3: detected capacity change from 0 to 32768 [ 159.709891][ T5189] ALSA: mixer_oss: invalid OSS volume '' [ 159.715485][ T4185] usb 5-1: config 0 descriptor?? [ 159.759332][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 160.243918][ T4185] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.312190][ T5201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.238'. [ 160.366449][ T4844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4844) [ 161.669052][ T4265] usb 5-1: USB disconnect, device number 3 [ 162.198612][ T5225] comedi comedi0: Minor 3 specified more than once! [ 162.951074][ T4185] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.033350][ T4305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.081193][ T5235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.213375][ T4185] usb 3-1: Using ep0 maxpacket: 32 [ 163.273611][ T4305] usb 2-1: Using ep0 maxpacket: 8 [ 163.333948][ T4185] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 163.357285][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.425347][ T4185] usb 3-1: config 0 descriptor?? [ 163.564080][ T4305] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.952786][ T4185] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 163.978932][ T4305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.998712][ T4185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.051229][ T4305] usb 2-1: Product: syz [ 164.081558][ T4305] usb 2-1: Manufacturer: syz [ 164.093724][ T4185] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 164.111283][ T4305] usb 2-1: SerialNumber: syz [ 164.121460][ T4185] usb 3-1: media controller created [ 164.157725][ T4305] usb 2-1: config 0 descriptor?? [ 164.302797][ T4185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.143357][ T4305] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 165.150772][ T4305] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 165.312765][ T4305] usb 2-1: USB disconnect, device number 3 [ 166.373467][ T4185] az6027: usb out operation failed. (-110) [ 166.403825][ T4185] az6027: usb out operation failed. (-32) [ 166.488061][ T4185] stb0899_attach: Driver disabled by Kconfig [ 166.495461][ T4185] az6027: no front-end attached [ 166.495461][ T4185] [ 166.513354][ T4185] az6027: usb out operation failed. (-71) [ 166.520369][ T4185] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 166.571872][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 166.695456][ T4185] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 166.753729][ T4185] dvb-usb: schedule remote query interval to 400 msecs. [ 168.393342][ T4185] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 168.407656][ T26] audit: type=1800 audit(1764901584.245:4): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.256" name="/" dev="fuse" ino=1 res=0 errno=0 [ 168.408999][ T4185] usb 3-1: USB disconnect, device number 8 [ 169.286623][ T4185] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.050711][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.463132][ T5318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 171.469814][ T5318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.517598][ T5318] vhci_hcd vhci_hcd.0: Device attached [ 171.593700][ T5326] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 171.600361][ T5326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.690249][ T5318] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 171.697038][ T5318] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.799057][ T4185] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 172.181816][ T5326] vhci_hcd vhci_hcd.0: Device attached [ 173.353116][ T5318] vhci_hcd vhci_hcd.0: Device attached [ 173.506316][ T5328] vhci_hcd: connection closed [ 173.506625][ T4299] vhci_hcd: stop threads [ 173.516549][ T5327] vhci_hcd: connection closed [ 173.520509][ T5321] vhci_hcd: connection reset by peer [ 173.563904][ T4299] vhci_hcd: release socket [ 173.573549][ T4299] vhci_hcd: disconnect device [ 173.649325][ T4299] vhci_hcd: stop threads [ 173.670177][ T4299] vhci_hcd: release socket [ 173.699411][ T4299] vhci_hcd: disconnect device [ 173.740395][ T4299] vhci_hcd: stop threads [ 173.804091][ T4299] vhci_hcd: release socket [ 174.257808][ T4299] vhci_hcd: disconnect device [ 174.733343][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.013537][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 175.163931][ T13] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 175.206224][ T13] usb 4-1: config 32 has no interface number 0 [ 175.314822][ T13] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.546694][ T13] usb 4-1: config 32 interface 85 has no altsetting 0 [ 175.883388][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.073938][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 176.094943][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.916322][ T13] usb 4-1: Product: syz [ 176.933980][ T4185] vhci_hcd: vhci_device speed not set [ 177.001105][ T13] usb 4-1: Manufacturer: syz [ 177.003585][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.033270][ T13] usb 4-1: SerialNumber: syz [ 177.191515][ T4231] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.201783][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.213959][ T4231] usb 1-1: config 0 descriptor?? [ 178.353817][ T4246] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 178.362811][ T4246] Bluetooth: hci1: Injecting HCI hardware error event [ 178.393906][ T4190] Bluetooth: hci1: hardware error 0x00 [ 178.542725][ T4231] pwc: Askey VC010 type 2 USB webcam detected. [ 178.603684][ T4231] pwc: send_video_command error -71 [ 178.613386][ T4231] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 178.673127][ T4231] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 178.756969][ T4231] usb 1-1: USB disconnect, device number 4 [ 178.856023][ T13] appletouch 4-1:32.85: Failed to read mode from device. [ 178.863404][ T13] appletouch: probe of 4-1:32.85 failed with error -5 [ 179.222973][ T13] usb 4-1: USB disconnect, device number 5 [ 179.480787][ T5424] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.177892][ T5427] IPv6: addrconf: prefix option has invalid lifetime [ 180.305163][ T5431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.303'. [ 180.813344][ T4185] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.993897][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.001325][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.236654][ T5449] netlink: 256 bytes leftover after parsing attributes in process `syz.0.308'. [ 181.248238][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 181.263883][ T4185] usb 4-1: Using ep0 maxpacket: 8 [ 181.269318][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 181.773611][ T4185] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 181.788407][ T4185] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.826907][ T4185] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.867190][ T4185] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 181.911441][ T4185] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.966787][ T4185] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.012214][ T4185] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.049384][ T4185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.058269][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.069981][ T13] usb 3-1: config 0 has no interface number 0 [ 182.088573][ T13] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 182.120727][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.164404][ T13] usb 3-1: config 0 descriptor?? [ 182.355826][ T13] usb 3-1: selecting invalid altsetting 1 [ 182.363630][ T4185] usb 4-1: usb_control_msg returned -32 [ 182.369270][ T4185] usbtmc 4-1:16.0: can't read capabilities [ 182.864616][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 182.923665][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 183.173530][ T5463] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 183.180572][ T13] DVB: Unable to find symbol cx22700_attach() [ 183.338577][ T13] DVB: Unable to find symbol tda10046_attach() [ 183.347014][ T4231] usb 4-1: USB disconnect, device number 6 [ 183.369964][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 183.385514][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 183.474959][ T13] usb 3-1: USB disconnect, device number 9 [ 187.058544][ T26] audit: type=1804 audit(1764901602.895:5): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.321" name="/newroot/66/bus/bus" dev="overlay" ino=360 res=1 errno=0 [ 187.388831][ T5551] device vlan0 entered promiscuous mode [ 188.364156][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.393629][ T4231] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.404123][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.418797][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.431137][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.733904][ T4231] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.750340][ T5577] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.791712][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.057391][ T4231] usb 2-1: Product: syz [ 191.211399][ T4231] usb 2-1: Manufacturer: syz [ 191.333395][ T4550] Bluetooth: hci2: command 0x0406 tx timeout [ 191.815418][ T4185] Bluetooth: hci3: command 0x0406 tx timeout [ 191.831393][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 192.195324][ T5582] overlayfs: empty lowerdir [ 192.233363][ T4231] cdc_wdm 2-1:1.0: skipping garbage [ 192.276881][ T4231] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 193.180807][ T4231] cdc_wdm 2-1:1.0: Unknown control protocol [ 193.559777][ T4231] usb 2-1: USB disconnect, device number 4 [ 195.991114][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.997526][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.137675][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.465337][ T5611] device batadv_slave_0 entered promiscuous mode [ 196.520979][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.536854][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.555324][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.769389][ T5625] 9pnet_virtio: no channels available for device [ 197.928615][ T5628] netlink: 256 bytes leftover after parsing attributes in process `syz.3.348'. [ 198.204710][ T5628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.348'. [ 198.742879][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 198.752558][ T5647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 198.818716][ T5647] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.827553][ T5647] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.836397][ T5647] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.845140][ T5647] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.867901][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 198.877035][ T5647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 199.725501][ T5651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 201.671985][ T26] audit: type=1326 audit(1764901617.505:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 201.710331][ T26] audit: type=1326 audit(1764901617.505:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 201.878875][ T26] audit: type=1326 audit(1764901617.505:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 201.906813][ T26] audit: type=1326 audit(1764901617.505:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 201.970399][ T26] audit: type=1326 audit(1764901617.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.041696][ T26] audit: type=1326 audit(1764901617.505:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.071557][ T26] audit: type=1326 audit(1764901617.505:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.124605][ T26] audit: type=1326 audit(1764901617.505:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.203135][ T26] audit: type=1326 audit(1764901617.505:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.228283][ T26] audit: type=1326 audit(1764901617.505:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d28e9749 code=0x7fc00000 [ 202.398209][ T5686] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 202.433809][ T5686] input: syz1 as /devices/virtual/input/input11 [ 207.685413][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 207.803829][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.195068][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.202868][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.869718][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.925949][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.396755][ T5731] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.405937][ T5731] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.416102][ T5731] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.425162][ T5731] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.561825][ T5731] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.571207][ T5731] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.580160][ T5731] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.589428][ T5731] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.892441][ T5785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.392'. [ 215.114198][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 221.523616][ T4305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 222.303982][ T4305] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.385688][ T4305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.422945][ T4305] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 222.481560][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.532434][ T4305] usb 1-1: config 0 descriptor?? [ 222.853310][ T4246] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 223.933072][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.940760][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.948297][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.956969][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.968565][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.977090][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 223.984905][ T4305] sony 0003:054C:05C4.0003: unknown main item tag 0x0 [ 224.024944][ T4305] sony 0003:054C:05C4.0003: hidraw0: USB HID vc0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 224.133330][ T4246] usb 3-1: Using ep0 maxpacket: 32 [ 224.171100][ T4305] sony 0003:054C:05C4.0003: failed to claim input [ 224.355459][ T4305] usb 1-1: USB disconnect, device number 5 [ 224.433653][ T4246] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.521744][ T4246] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.140292][ T4246] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 225.475443][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.923142][ T4246] usb 3-1: Product: syz [ 225.976192][ T4246] usb 3-1: Manufacturer: syz [ 226.046862][ T4246] usb 3-1: SerialNumber: syz [ 226.073855][ T4246] usb 3-1: config 0 descriptor?? [ 226.109888][ T5874] fido_id[5874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 226.143432][ T4246] usb 3-1: can't set config #0, error -71 [ 226.189029][ T4246] usb 3-1: USB disconnect, device number 10 [ 227.556271][ T5906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.953504][ T4241] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.833610][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 231.413701][ T4241] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 232.170457][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.190768][ T4241] usb 2-1: config 0 descriptor?? [ 232.213397][ T4241] usb 2-1: can't set config #0, error -71 [ 232.223452][ T4305] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.234117][ T4241] usb 2-1: USB disconnect, device number 5 [ 234.200759][ T4305] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 234.210217][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.218828][ T4305] usb 1-1: Product: syz [ 234.223531][ T4305] usb 1-1: Manufacturer: syz [ 234.228264][ T4305] usb 1-1: SerialNumber: syz [ 234.601676][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.612691][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.622711][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.633666][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.643584][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.654132][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.664364][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.674924][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.373510][ T4305] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 236.043601][ T4305] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 236.094612][ T4305] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 236.181510][ T4305] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.201926][ T4305] lan78xx: probe of 1-1:1.0 failed with error -71 [ 236.220088][ T4305] usb 1-1: USB disconnect, device number 6 [ 238.200792][ T4246] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 238.396129][ T4246] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.734955][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 240.059428][ T6031] fido_id[6031]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.424295][ C0] ------------[ cut here ]------------ [ 240.430137][ C0] WARNING: CPU: 0 PID: 6044 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 240.440264][ C0] Modules linked in: [ 240.444222][ C0] CPU: 0 PID: 6044 Comm: syz.2.474 Not tainted syzkaller #0 [ 240.451544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.461684][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 240.468423][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 01 51 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 f0 50 3a f8 0f 0b e9 3c ef ff ff e8 e4 50 3a f8 <0f> 0b e9 b8 f2 ff ff e8 98 f2 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 240.488193][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 240.494501][ C0] RAX: ffffffff893d7b2c RBX: ffff88805f548c80 RCX: ffff88805e563b80 [ 240.502605][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.510745][ C0] RBP: ffffc90000007ae8 R08: ffff88805e563b80 R09: 0000000000000003 [ 240.518894][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880202a0c00 [ 240.527064][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 240.535379][ C0] FS: 00007f6d2faed6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 240.544485][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.551529][ C0] CR2: 00002000006d9000 CR3: 000000005fd4d000 CR4: 00000000003506f0 [ 240.560011][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.568189][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.576575][ C0] Call Trace: [ 240.580099][ C0] [ 240.582996][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 240.589078][ C0] ? verify_lock_unused+0x140/0x140 [ 240.594364][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 240.599768][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 240.606025][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 240.611554][ C0] __iterate_interfaces+0x243/0x500 [ 240.616834][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 240.623267][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 240.629721][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 240.636908][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 240.642160][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 240.647513][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 240.653553][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 240.659579][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 240.664324][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 240.669496][ C0] hrtimer_run_softirq+0x176/0x240 [ 240.674684][ C0] handle_softirqs+0x328/0x820 [ 240.679490][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 240.684408][ C0] ? do_softirq+0x200/0x200 [ 240.688999][ C0] __irq_exit_rcu+0x12f/0x220 [ 240.693821][ C0] ? irq_exit_rcu+0x20/0x20 [ 240.698385][ C0] irq_exit_rcu+0x5/0x20 [ 240.702666][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 240.708365][ C0] [ 240.711320][ C0] [ 240.714847][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 240.720873][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 240.726221][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 240.745890][ C0] RSP: 0018:ffffc9000324fb40 EFLAGS: 00000206 [ 240.751999][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 437e7fadbe2cd500 [ 240.760037][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 240.768072][ C0] RBP: ffffc9000324fc58 R08: dffffc0000000000 R09: fffffbfff1ff7c1f [ 240.776195][ C0] R10: fffffbfff1ff7c1f R11: 1ffffffff1ff7c1e R12: ffff88807e9b0828 [ 240.784219][ C0] R13: 1ffff92000649f74 R14: 0000000000000246 R15: dffffc0000000000 [ 240.792255][ C0] ? __might_sleep+0xf0/0xf0 [ 240.796907][ C0] ? read_lock_is_recursive+0x10/0x10 [ 240.802322][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 240.807410][ C0] __might_fault+0xb3/0x110 [ 240.811939][ C0] ? __might_fault+0x90/0x110 [ 240.816757][ C0] do_recvmmsg+0x36d/0x7a0 [ 240.821216][ C0] ? __sys_recvmmsg+0x280/0x280 [ 240.826133][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 240.831208][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 240.836292][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 240.841004][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 240.846261][ C0] do_syscall_64+0x4c/0xa0 [ 240.850721][ C0] ? clear_bhb_loop+0x30/0x80 [ 240.855444][ C0] ? clear_bhb_loop+0x30/0x80 [ 240.860148][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.866089][ C0] RIP: 0033:0x7f6d318a7749 [ 240.870530][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.890577][ C0] RSP: 002b:00007f6d2faed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 240.899057][ C0] RAX: ffffffffffffffda RBX: 00007f6d31afe090 RCX: 00007f6d318a7749 [ 240.907086][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 240.915117][ C0] RBP: 00007f6d3192bf91 R08: 0000000000000000 R09: 0000000000000000 [ 240.923228][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 240.931228][ C0] R13: 00007f6d31afe128 R14: 00007f6d31afe090 R15: 00007ffd2a2a5838 [ 240.939278][ C0] [ 240.942339][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.949637][ C0] CPU: 0 PID: 6044 Comm: syz.2.474 Not tainted syzkaller #0 [ 240.956946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.967110][ C0] Call Trace: [ 240.970410][ C0] [ 240.973288][ C0] dump_stack_lvl+0x168/0x230 [ 240.978010][ C0] ? show_regs_print_info+0x20/0x20 [ 240.983243][ C0] ? load_image+0x3b0/0x3b0 [ 240.987787][ C0] panic+0x2c9/0x7f0 [ 240.991720][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 240.996299][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 241.002046][ C0] __warn+0x248/0x2b0 [ 241.006061][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 241.011899][ C0] report_bug+0x1b7/0x2e0 [ 241.016270][ C0] handle_bug+0x3a/0x70 [ 241.020446][ C0] exc_invalid_op+0x16/0x40 [ 241.025165][ C0] asm_exc_invalid_op+0x16/0x20 [ 241.030047][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 241.036609][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 01 51 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 f0 50 3a f8 0f 0b e9 3c ef ff ff e8 e4 50 3a f8 <0f> 0b e9 b8 f2 ff ff e8 98 f2 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 241.056351][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 241.062442][ C0] RAX: ffffffff893d7b2c RBX: ffff88805f548c80 RCX: ffff88805e563b80 [ 241.070446][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.078435][ C0] RBP: ffffc90000007ae8 R08: ffff88805e563b80 R09: 0000000000000003 [ 241.086515][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880202a0c00 [ 241.094504][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 241.102506][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 241.108382][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 241.114394][ C0] ? verify_lock_unused+0x140/0x140 [ 241.119635][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 241.124712][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 241.130201][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 241.135689][ C0] __iterate_interfaces+0x243/0x500 [ 241.140991][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 241.147259][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 241.153537][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 241.160585][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 241.165907][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 241.171124][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 241.177118][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 241.183124][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 241.187842][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 241.192994][ C0] hrtimer_run_softirq+0x176/0x240 [ 241.198141][ C0] handle_softirqs+0x328/0x820 [ 241.202934][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 241.207808][ C0] ? do_softirq+0x200/0x200 [ 241.212341][ C0] __irq_exit_rcu+0x12f/0x220 [ 241.217035][ C0] ? irq_exit_rcu+0x20/0x20 [ 241.221586][ C0] irq_exit_rcu+0x5/0x20 [ 241.225854][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 241.231512][ C0] [ 241.234662][ C0] [ 241.237637][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 241.243650][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 241.249063][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 241.268898][ C0] RSP: 0018:ffffc9000324fb40 EFLAGS: 00000206 [ 241.274996][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 437e7fadbe2cd500 [ 241.283001][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 241.291091][ C0] RBP: ffffc9000324fc58 R08: dffffc0000000000 R09: fffffbfff1ff7c1f [ 241.299090][ C0] R10: fffffbfff1ff7c1f R11: 1ffffffff1ff7c1e R12: ffff88807e9b0828 [ 241.307173][ C0] R13: 1ffff92000649f74 R14: 0000000000000246 R15: dffffc0000000000 [ 241.315199][ C0] ? __might_sleep+0xf0/0xf0 [ 241.319817][ C0] ? read_lock_is_recursive+0x10/0x10 [ 241.325221][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 241.330276][ C0] __might_fault+0xb3/0x110 [ 241.334798][ C0] ? __might_fault+0x90/0x110 [ 241.339499][ C0] do_recvmmsg+0x36d/0x7a0 [ 241.343951][ C0] ? __sys_recvmmsg+0x280/0x280 [ 241.348856][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 241.353926][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 241.358979][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 241.363607][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 241.368928][ C0] do_syscall_64+0x4c/0xa0 [ 241.373385][ C0] ? clear_bhb_loop+0x30/0x80 [ 241.378205][ C0] ? clear_bhb_loop+0x30/0x80 [ 241.383007][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.388940][ C0] RIP: 0033:0x7f6d318a7749 [ 241.393387][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.413035][ C0] RSP: 002b:00007f6d2faed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.421483][ C0] RAX: ffffffffffffffda RBX: 00007f6d31afe090 RCX: 00007f6d318a7749 [ 241.429487][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 241.437494][ C0] RBP: 00007f6d3192bf91 R08: 0000000000000000 R09: 0000000000000000 [ 241.445501][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 241.453507][ C0] R13: 00007f6d31afe128 R14: 00007f6d31afe090 R15: 00007ffd2a2a5838 [ 241.461545][ C0] [ 241.464935][ C0] Kernel Offset: disabled [ 241.469275][ C0] Rebooting in 86400 seconds..