last executing test programs: 53.815779461s ago: executing program 4 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000ffff28bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00#\b\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c"], 0xc4}, 0x1, 0x0, 0x0, 0x24004915}, 0x2000) 53.529201924s ago: executing program 4 (id=14): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r7, 0x3) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r6, 0x3) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r11, &(0x7f0000000000), 0x0) 51.0905356s ago: executing program 4 (id=22): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f00000000c0)=0x100000001, 0x4) 50.862636279s ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 50.566551542s ago: executing program 4 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff4a, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x800b, 0xe, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x1, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xd, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.22465874s ago: executing program 4 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0xa, 0x4045c801, 0xa, 0x1, 0x7, 0x400000, 0x0, 0x0, 0x158, 0x7fffd}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 49.585266171s ago: executing program 32 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0xa, 0x4045c801, 0xa, 0x1, 0x7, 0x400000, 0x0, 0x0, 0x158, 0x7fffd}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 28.193872032s ago: executing program 1 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x1, 0x80, 0x7, 0x0, 0x7, 0x1, 0x3, 0xa, 0x0, 0x9, 0x2, 0x3, 0x0, 0x100, 0x3, 0x8c, 0x9, 0x53, 0x40, '\x00', 0x4, 0x80}) 27.534178996s ago: executing program 1 (id=95): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r1, 0xffffffffffffffff, 0x0) 27.125115728s ago: executing program 1 (id=99): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x802) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000002c0)={"5f6cd8378c1f1abb46af52082e2b575577e6164992cb096a9dab1b926d4b04128fdf24b4074b2322156b9effb120e828979933a43b75bbe1f45f322042ef67d7195efde275003500374bbe1cb24631126f24a73875711d20e7a70fe43b2b01d31e36173487ae54df5cfb00475b6fb3f6f372fd7e2b28747ea79588a85cbd1bb7dc892008242bc3525e8318137aee5152a1eb3da3ca8df79de2f8d3ec24f8d274882e56da67ab52d985977c2a20eb0d2c4b05e464ca425e033c72a12d3a0e9eee50ce7d0c7f74d270859cba176c80f0f8e8ce50cd4e35d14e106afc0603a29801400d734ffcaf14a750b29bbd1a697c94e9df4d1dff85f3ee99b35a34074e0605e5fa4b5aaa5640786a67ffb92f3ea5c4010c9522c2199f8a6242aa8cd865d5763759f2189f0c37eb12a8940f50a70f99fd3f74641eb87dc567d84bc3a7cf21f85750c5465fe96d1dfc31efb73c8650b0769c064cf6d2c5a27c5ca92da5b50fa888d19869dced0cc22e64ff5e7fc496b1758dccbd840cb5574196b9ac71d4efef752d839267fca3f46db6ebffc713151399b2072951cc9dfeb413c7ae9e8d54273a4778c3921a72b718b718d63e91883026ff4aab48854371fca36b7e138fa7fecf32baf6d6ca639634d373a268870ca9663147f23d4296325333d70a9a8b33b431677f36597aa5ee3cbb4dea124ace75f1d2a5793d8ec2bf054ab805c09fdb71783d5096f2503950604e5b49cdcfcc02d8e1a72603e6e41a007dc300420c1f6db1469fe26321d716740c297e5e46274b4ff5daadc29a453de58a26c5d57ef91f73da3c287f9d2fcf2b8ce4a4ad1b5b6e423573cd1a36b70359d0c209ffbb5cb01c4fd4926c118d0b51ce65d859fc0b868e9f1b2a34e657aa6d4af66ca984d726909942d409a72ecac3df966acd59fc8689a8d2bf0723de98539fd62eee2eeb2f7197957c2a86ccd449722f79f5cfa0c44be180ee34af3a5a5e289b54013f64a6673e34d1599d659f6cfceac7eec7859a70cdb0e51e4b490b2bbd7ccf5f843fe833873a6b1d0094f5b56b4752f8ebded5a06f0b49c3511887e710a872e2e5bf56a347ad0d24906847578274d9f0cecb26775ca11bd9515475c2017b96586bbe1dd156ed279ad55669b6ba952f803305073c0114ed183470e88171132c20f6476859c344d65dd74196f08147402f5113e2fec0f73cae738cc98385c0ecf3b32141698e8f1d245baf226b588af247a4805dbcb27197ab0c9bf04dfb5b3e3e2e7342e080b7ba366bd16a5301594713b91dd46504fe608c866d96a30fa33d3aef5254d74eee31a87441dbc9435713b53fde62cb78e38b4fef284931f3a0d42f04772895e44a5ddc417169be5d871b1897f0d93434fbb9de0ef5a63625a95b9bddb7fbc8f45f18e2c240b6c117bc43e37597d99b3ab08b37bbff49087c1ae5df4d1318"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 26.793784535s ago: executing program 1 (id=100): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 25.542500866s ago: executing program 1 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18da, 0x0, &(0x7f0000000100), 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x5, 0x6}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x7, 0x80000000}}, './file0\x00'}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 25.216413172s ago: executing program 1 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x1, 0x80, 0x7, 0x0, 0x7, 0x1, 0x3, 0xa, 0x0, 0x9, 0x2, 0x3, 0x0, 0x100, 0x3, 0x8c, 0x9, 0x53, 0x40, '\x00', 0x4, 0x80}) 24.530294837s ago: executing program 33 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x1, 0x80, 0x7, 0x0, 0x7, 0x1, 0x3, 0xa, 0x0, 0x9, 0x2, 0x3, 0x0, 0x100, 0x3, 0x8c, 0x9, 0x53, 0x40, '\x00', 0x4, 0x80}) 10.000955856s ago: executing program 6 (id=107): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.943164691s ago: executing program 5 (id=149): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x6f47957f, 0x0, 0x1002}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x1c) 9.320419391s ago: executing program 6 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x5e, 0x0, 0x0, 0x0, 0xfffffffffffffc63}, 0x20080001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x6, 0x10000, {{0x5, 0x4, 0x0, 0x1b, 0x14, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty}}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/zoneinfo\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r7, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r8, r8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 7.756077976s ago: executing program 2 (id=157): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltaction={0x14, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040081) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 7.21058456s ago: executing program 2 (id=158): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.172892593s ago: executing program 5 (id=159): socket$rxrpc(0x21, 0x2, 0x2) ptrace$setregset(0x4205, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 6.111697398s ago: executing program 3 (id=160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) 6.018616886s ago: executing program 5 (id=161): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x802) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.772753976s ago: executing program 5 (id=162): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.34665798s ago: executing program 5 (id=164): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.414865316s ago: executing program 2 (id=166): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3.914267646s ago: executing program 2 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3.749410859s ago: executing program 6 (id=168): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x38f, 0x68, &(0x7f0000000000)) io_submit(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) 3.505849929s ago: executing program 2 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18da, 0x0, &(0x7f0000000100), 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x5, 0x6}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x7, 0x80000000}}, './file0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.284680386s ago: executing program 0 (id=171): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/kexec_crash_size', 0x82802, 0xab) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB="fab40939"], 0x34) 3.152090077s ago: executing program 0 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.875119329s ago: executing program 3 (id=173): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) unshare(0x24060400) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2.60660913s ago: executing program 0 (id=174): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x20000001, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) symlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00') io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.86507973s ago: executing program 3 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x1, 0x80, 0x7, 0x0, 0x7, 0x1, 0x3, 0xa, 0x0, 0x9, 0x2, 0x3, 0x0, 0x100, 0x3, 0x8c, 0x9, 0x53, 0x40, '\x00', 0x4, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.641065828s ago: executing program 5 (id=176): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0) listen(0xffffffffffffffff, 0x3) socket(0x10, 0x3, 0xffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) unshare(0x2a020400) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) listen(r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0xf}, @main=@item_012={0x2, 0x0, 0xc, "e4a6"}, @global=@item_012={0x2, 0x1, 0xb, "7fd7"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x35e}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000004c0)={0x40, 0x16, 0xac, "25d12dbe7647068efea669791e4bee08cfb3a173b4fda10cad5ca30245fbc03779abac7342b5d884fab473f70ccf9809aeed08264b3f8f1c304680667e1fcef5a397f1d7671683dca7b540a64c42cbaa51a98d3f34e0ed335bb2ecfed66095cbbe74935e07fea462f77a7a07164b1acef7224f051ed52af9b0a29ed45f7d3b58d9975ea043c9628c946081f74c674c7b0f006750f195fda99e4fdfb585269d00000000000060f6652e538828"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x1, 0x5, "75b9b565d6"}, 0x0}) 1.529743877s ago: executing program 6 (id=177): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000dd06cece94000000000061000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r6, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x8001, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 1.102320112s ago: executing program 3 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x98, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @random="f744783da2a9"}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6c, 0xa5}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21, 0x68}}, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 941.510865ms ago: executing program 2 (id=179): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 790.702447ms ago: executing program 3 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000230800001400128009"], 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c"], 0xc4}, 0x1, 0x0, 0x0, 0x24004915}, 0x2000) 682.910615ms ago: executing program 0 (id=181): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, 0x40c89}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 538.372777ms ago: executing program 3 (id=182): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c410cf8a000000000001090224000100000000090400000103000000092100000501220500090581030000000002"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x8, 0x5, 0x1, 'queue0\x00', 0x5}) r2 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "7fec6714"}]}}, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r5) fcntl$getown(r3, 0x9) 257.63533ms ago: executing program 0 (id=183): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x6f47957f, 0x0, 0x1002}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000020000000000400000000", 0x1c) 0s ago: executing program 0 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.32' (ED25519) to the list of known hosts. [ 69.306504][ T4254] cgroup: Unknown subsys name 'net' [ 69.439869][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.928491][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.386419][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392852][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.547075][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.550933][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.556647][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.562656][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.570615][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.584111][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.584111][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.584723][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.592215][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.599132][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.606323][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.612683][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.621374][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.627564][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.634310][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.641462][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.648278][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.654712][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.662107][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.668786][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.675989][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.683144][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.698809][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.737629][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.743812][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.751850][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.759349][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.768350][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.787789][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.799282][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.189818][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 73.278167][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 73.336199][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 73.400602][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 73.449884][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.458149][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.466846][ T4266] device bridge_slave_0 entered promiscuous mode [ 73.503960][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.511104][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.519510][ T4266] device bridge_slave_1 entered promiscuous mode [ 73.527241][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.534591][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.542431][ T4264] device bridge_slave_0 entered promiscuous mode [ 73.550133][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 73.578256][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.585602][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.593906][ T4264] device bridge_slave_1 entered promiscuous mode [ 73.657187][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.664985][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.672900][ T4265] device bridge_slave_0 entered promiscuous mode [ 73.682677][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.694687][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.712077][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.730364][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.737615][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.745630][ T4265] device bridge_slave_1 entered promiscuous mode [ 73.769764][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.779214][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.787042][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.795317][ T4272] device bridge_slave_0 entered promiscuous mode [ 73.845937][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.853089][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.861143][ T4272] device bridge_slave_1 entered promiscuous mode [ 73.878479][ T4266] team0: Port device team_slave_0 added [ 73.886481][ T4266] team0: Port device team_slave_1 added [ 73.902172][ T4264] team0: Port device team_slave_0 added [ 73.918436][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.944427][ T4264] team0: Port device team_slave_1 added [ 73.950317][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.957714][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.966012][ T4271] device bridge_slave_0 entered promiscuous mode [ 73.984160][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.996303][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.021967][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.029264][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.037723][ T4271] device bridge_slave_1 entered promiscuous mode [ 74.053107][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.063682][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.070661][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.096745][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.140699][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.147861][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.174287][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.192413][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.199561][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.225626][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.247636][ T4265] team0: Port device team_slave_0 added [ 74.256133][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.278018][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.285142][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.311468][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.324636][ T4265] team0: Port device team_slave_1 added [ 74.335673][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.347611][ T4272] team0: Port device team_slave_0 added [ 74.389632][ T4272] team0: Port device team_slave_1 added [ 74.422154][ T4271] team0: Port device team_slave_0 added [ 74.444280][ T4266] device hsr_slave_0 entered promiscuous mode [ 74.451334][ T4266] device hsr_slave_1 entered promiscuous mode [ 74.470366][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.477593][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.503678][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.516803][ T4271] team0: Port device team_slave_1 added [ 74.523143][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.530194][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.556185][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.567864][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.575261][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.601791][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.614256][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.621239][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.647242][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.695714][ T4264] device hsr_slave_0 entered promiscuous mode [ 74.702843][ T4264] device hsr_slave_1 entered promiscuous mode [ 74.710063][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.718097][ T4264] Cannot create hsr debugfs directory [ 74.735802][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.742811][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.768973][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.781743][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.788837][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.814992][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.825846][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 74.825863][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 74.832181][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 74.838270][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 74.838403][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 74.915294][ T4265] device hsr_slave_0 entered promiscuous mode [ 74.922049][ T4265] device hsr_slave_1 entered promiscuous mode [ 74.928873][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.936535][ T4265] Cannot create hsr debugfs directory [ 74.988641][ T4272] device hsr_slave_0 entered promiscuous mode [ 74.996361][ T4272] device hsr_slave_1 entered promiscuous mode [ 75.003009][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.010751][ T4272] Cannot create hsr debugfs directory [ 75.095819][ T4271] device hsr_slave_0 entered promiscuous mode [ 75.102607][ T4271] device hsr_slave_1 entered promiscuous mode [ 75.109569][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.117240][ T4271] Cannot create hsr debugfs directory [ 75.365685][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.378244][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.387249][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.397910][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.478046][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.488203][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.503285][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.518861][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.568222][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.596185][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.611359][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.640504][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.675038][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.691859][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.702870][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.716294][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.756772][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.783276][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.791222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.801591][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.844512][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.867093][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.876758][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.887842][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.897594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.907340][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.914797][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.926605][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.937874][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.966018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.976047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.984767][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.991961][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.009532][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.049800][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.064998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.074641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.086272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.095175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.124532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.135759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.150175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.160576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.176900][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.204330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.213084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.224192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.231294][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.240182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.249158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.257845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.279223][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.288935][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.300560][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.314457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.323762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.335990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.345933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.355647][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.362757][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.411158][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.419335][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.429949][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.448049][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.457611][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.466684][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.475664][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.490285][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.506927][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.525604][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.532659][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.542579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.552420][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.578556][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.601604][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.609935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.619103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.628182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.637472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.646509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.655526][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.662641][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.670551][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.680119][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.689375][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.696527][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.709314][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.720795][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.733225][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.749028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.757931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.767055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.780679][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.790593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.800870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.811216][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.818437][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.827344][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.836692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.845735][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.852897][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.892260][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.904057][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 76.910141][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 76.915621][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 76.916576][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 76.922163][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 76.932364][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.949239][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.956435][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.985907][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.001277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.010635][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.017818][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.028359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.037998][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.047274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.056488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.103509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.112535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.125069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.135433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.146244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.156221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.165924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.175691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.184441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.195474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.204658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.215425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.226510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.252523][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.289888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.298628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.309993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.319153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.328216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.341864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.349740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.362616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.371486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.386984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.398919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.407987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.416831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.425334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.433902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.449907][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.461452][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.480365][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.492266][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.506582][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.523794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.532384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.542002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.558800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.568074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.576017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.597145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.607528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.639518][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.705061][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.734032][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.774179][ T4266] device veth0_vlan entered promiscuous mode [ 77.782031][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.800378][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.817269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.846543][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.880726][ T4265] device veth0_vlan entered promiscuous mode [ 77.914072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.944859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.971217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.979625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.004746][ T4266] device veth1_vlan entered promiscuous mode [ 78.022282][ T4265] device veth1_vlan entered promiscuous mode [ 78.066767][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.088855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.106123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.124617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.134905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.142685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.193888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.215508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.234202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.280142][ T4265] device veth0_macvtap entered promiscuous mode [ 78.292706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.302389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.311456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.320708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.330134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.340309][ T4266] device veth0_macvtap entered promiscuous mode [ 78.358523][ T4265] device veth1_macvtap entered promiscuous mode [ 78.376755][ T4266] device veth1_macvtap entered promiscuous mode [ 78.396858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.404952][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.431838][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.442605][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.452398][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.461256][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.470306][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.479519][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.487720][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.496888][ T4264] device veth0_vlan entered promiscuous mode [ 78.507997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.516824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.525270][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.537394][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.548754][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.560801][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.568976][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.579476][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.591803][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.605220][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.615003][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625413][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.634741][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.650793][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.659482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.682947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.696110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.706806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.716853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.728162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.742431][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.766334][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775966][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787715][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.796629][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.838009][ T4264] device veth1_vlan entered promiscuous mode [ 78.902907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.919753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.934483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.943584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.985215][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 78.991789][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 78.991815][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 79.006029][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 79.009449][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 79.021209][ T4271] device veth0_vlan entered promiscuous mode [ 79.070618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.099578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.108553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.124373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.159438][ T4271] device veth1_vlan entered promiscuous mode [ 79.173199][ T4264] device veth0_macvtap entered promiscuous mode [ 79.191608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.201398][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.202586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.217559][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.219300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.236024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.244482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.280157][ T4264] device veth1_macvtap entered promiscuous mode [ 79.311030][ T4271] device veth0_macvtap entered promiscuous mode [ 79.335648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.349538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.359123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.368709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.404209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.415315][ T4271] device veth1_macvtap entered promiscuous mode [ 79.431406][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.450617][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.488320][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.492533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.501109][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.516469][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.531524][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.542261][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.555410][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.566881][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.576523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.585409][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.594628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.611723][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.623387][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.639268][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.650971][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.661243][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.671848][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.690303][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.699808][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.711667][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.720304][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.731218][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.740157][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.752003][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.765268][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.792430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.801329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.811597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.820732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.834684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.843601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.852349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.870543][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.882456][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.892704][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.903496][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.914276][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.925001][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.937466][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.951943][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971088][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.980205][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.989353][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.030859][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.046975][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.059754][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.087800][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.099100][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.108575][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.123051][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136669][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146683][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.173404][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.201786][ T4272] device veth0_vlan entered promiscuous mode [ 80.267863][ T4272] device veth1_vlan entered promiscuous mode [ 80.364488][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.383957][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.482190][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.504233][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.558205][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.566618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.584113][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.592595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.612693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.644518][ T4272] device veth0_macvtap entered promiscuous mode [ 80.717727][ T4272] device veth1_macvtap entered promiscuous mode [ 80.729631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.740555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.756511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.785180][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.807857][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.820803][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.832085][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.840575][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.851650][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.866552][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.907691][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.927431][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.946871][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.970817][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.992324][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.011049][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.040294][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.064899][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 81.064943][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 81.071237][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 81.077071][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 81.077106][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 81.135511][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.140775][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.184018][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.207812][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.219591][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.240111][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.270433][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.306444][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.325914][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.353456][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.390861][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.411290][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.429396][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.439991][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.480185][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.509390][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.539278][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.559212][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.770763][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.965760][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.989388][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.062693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.146500][ T4399] fuse: root generation should be zero [ 82.206414][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.230402][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.257137][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.453500][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.674475][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 82.692160][ T4267] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.773957][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.796436][ T4267] usb 4-1: Product: syz [ 82.800946][ T4267] usb 4-1: Manufacturer: syz [ 82.843376][ T4267] usb 4-1: SerialNumber: syz [ 82.886230][ T4267] r8152-cfgselector 4-1: config 0 descriptor?? [ 83.163100][ T4416] tipc: Started in network mode [ 83.184733][ T4416] tipc: Node identity 92755b993d73, cluster identity 4711 [ 83.208719][ T4416] tipc: Enabled bearer , priority 0 [ 83.273790][ T4421] device syzkaller0 entered promiscuous mode [ 83.288589][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 83.331552][ T4267] r8152-cfgselector 4-1: Unknown version 0x0000 [ 83.348319][ T4267] r8152-cfgselector 4-1: bad CDC descriptors [ 83.369958][ T4416] tipc: Resetting bearer [ 83.397039][ T4267] r8152-cfgselector 4-1: Unknown version 0x0000 [ 83.461020][ T4267] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 83.511191][ T4415] tipc: Resetting bearer [ 83.579742][ T4427] Zero length message leads to an empty skb [ 83.587231][ T4415] tipc: Disabling bearer [ 84.265414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.514714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 84.573575][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.773527][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 84.794064][ T14] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 84.835866][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.860190][ T14] usb 4-1: Product: syz [ 84.884931][ T14] usb 4-1: Manufacturer: syz [ 84.891787][ T14] usb 4-1: SerialNumber: syz [ 84.957564][ T14] r8152-cfgselector 4-1: config 0 descriptor?? [ 85.227483][ T14] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.261440][ T14] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.308787][ T14] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 86.143061][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 86.147463][ T4467] sctp: [Deprecated]: syz.3.23 (pid 4467) Use of int in max_burst socket option. [ 86.147463][ T4467] Use struct sctp_assoc_value instead [ 86.746507][ T126] cfg80211: failed to load regulatory.db [ 86.890884][ T4345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.244877][ T4345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.521628][ T4345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.739951][ T4345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.053631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.639509][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.649151][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.653659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.664753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.673052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.682443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.690748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 88.708031][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.717140][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.725043][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.732443][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.843623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.916968][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 90.287155][ T4503] chnl_net:caif_netlink_parms(): no params data found [ 90.444765][ T4531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 90.451516][ T4531] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.504212][ T4531] vhci_hcd vhci_hcd.0: Device attached [ 90.693488][ T2170] vhci_hcd: vhci_device speed not set [ 90.763429][ T2170] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 90.823620][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 90.970293][ T4345] device hsr_slave_0 left promiscuous mode [ 91.010511][ T4345] device hsr_slave_1 left promiscuous mode [ 91.030999][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.052116][ T4551] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 91.068173][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.143555][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.233165][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.332167][ T4345] device bridge_slave_1 left promiscuous mode [ 91.386543][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.482132][ T4345] device bridge_slave_0 left promiscuous mode [ 91.517140][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.557674][ T4536] vhci_hcd: connection reset by peer [ 91.578601][ T32] vhci_hcd: stop threads [ 91.583239][ T32] vhci_hcd: release socket [ 91.618701][ T32] vhci_hcd: disconnect device [ 91.692283][ T4561] mmap: syz.2.44 (4561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.714427][ T4345] device veth1_macvtap left promiscuous mode [ 91.735294][ T4345] device veth0_macvtap left promiscuous mode [ 91.750162][ T4345] device veth1_vlan left promiscuous mode [ 91.762543][ T4345] device veth0_vlan left promiscuous mode [ 91.773425][ T4267] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.953464][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 91.963810][ T4267] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.007047][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.022981][ T4267] usb 4-1: Product: syz [ 92.092881][ T4267] usb 4-1: Manufacturer: syz [ 92.108851][ T4267] usb 4-1: SerialNumber: syz [ 92.140541][ T4267] r8152-cfgselector 4-1: config 0 descriptor?? [ 92.834829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.903604][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 93.906568][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 93.969610][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 94.044845][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.180026][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.983593][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 95.636655][ T4345] bond0 (unregistering): Released all slaves [ 95.749315][ T4543] tipc: Started in network mode [ 95.763424][ T4543] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 95.778172][ T4543] tipc: Enabled bearer , priority 10 [ 95.863626][ T2170] vhci_hcd: vhci_device speed not set [ 95.914450][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.921774][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.943697][ T4267] r8152-cfgselector 4-1: Unknown version 0x0000 [ 95.964173][ T4503] device bridge_slave_0 entered promiscuous mode [ 95.970854][ T4267] r8152-cfgselector 4-1: bad CDC descriptors [ 96.073061][ T4267] r8152-cfgselector 4-1: Unknown version 0x0000 [ 96.114825][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.132295][ T4267] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 96.172987][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.215056][ T4503] device bridge_slave_1 entered promiscuous mode [ 96.319798][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.371382][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.531065][ T4503] team0: Port device team_slave_0 added [ 96.555011][ T4503] team0: Port device team_slave_1 added [ 96.717966][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.776087][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.894467][ T2170] tipc: Node number set to 43690 [ 96.909807][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.969877][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.013576][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.064453][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 97.171655][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.469022][ T4503] device hsr_slave_0 entered promiscuous mode [ 97.504524][ T4503] device hsr_slave_1 entered promiscuous mode [ 97.561655][ T4503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.581884][ T4503] Cannot create hsr debugfs directory [ 98.451921][ T4503] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.497807][ T4503] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.551437][ T4503] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.591736][ T4503] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.800365][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.841534][ T4645] fuse: Unknown parameter 'grou00000000000000000000' [ 98.972208][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.015836][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 99.023573][ T4267] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.059308][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.082130][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.093720][ T4267] usb 3-1: config 0 has no interface number 0 [ 99.108023][ T4267] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 99.125230][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.185041][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.198048][ T4267] usb 3-1: config 0 interface 1 has no altsetting 0 [ 99.207730][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.222120][ T4267] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 99.232770][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.239946][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.247987][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.267597][ T4267] usb 3-1: Product: syz [ 99.276884][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.289764][ T4267] usb 3-1: Manufacturer: syz [ 99.306850][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.331539][ T4267] usb 3-1: SerialNumber: syz [ 99.356344][ T4267] usb 3-1: config 0 descriptor?? [ 99.365440][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.387370][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.394606][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.427490][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.457424][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.482460][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.522303][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.558452][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.590417][ T4267] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 99.621350][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.639953][ T4267] cx231xx 3-1:0.1: Failed to read PCB config [ 99.670390][ T4267] cx231xx: probe of 3-1:0.1 failed with error -71 [ 99.680900][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.732533][ T4267] usb 3-1: USB disconnect, device number 2 [ 99.740832][ T4503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.782180][ T4503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.855094][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.877157][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.911641][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.947968][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.982293][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.174300][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.383560][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 100.394313][ T4267] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.453938][ T4267] usb 3-1: config 0 has no interface number 0 [ 100.460075][ T4267] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 100.547743][ T4267] usb 3-1: config 0 interface 1 has no altsetting 0 [ 100.580282][ T4267] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 100.610771][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.649675][ T4267] usb 3-1: Product: syz [ 100.690265][ T4267] usb 3-1: Manufacturer: syz [ 100.729743][ T4267] usb 3-1: SerialNumber: syz [ 100.741907][ T4267] usb 3-1: config 0 descriptor?? [ 100.998059][ T4267] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 101.027154][ T4267] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 101.040593][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.058712][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.109942][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.183830][ T4267] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 101.204555][ T4267] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 101.266745][ T4267] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 101.324726][ T4267] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 101.382141][ T4267] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 101.420752][ T4267] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -71 [ 101.464329][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 101.516152][ T4267] i2c i2c-2: Added multiplexed i2c bus 4 [ 101.545297][ T4267] i2c i2c-2: Added multiplexed i2c bus 5 [ 101.564418][ T4267] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 101.592410][ T4267] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 101.668480][ T4267] cx231xx: probe of 3-1:0.1 failed with error -71 [ 101.709097][ T4267] usb 3-1: USB disconnect, device number 3 [ 102.362307][ T4708] fuse: Unknown parameter 'group_i00000000000000000000' [ 102.760638][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.785070][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.850292][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.902494][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.927082][ T4503] device veth0_vlan entered promiscuous mode [ 102.939099][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.953464][ T4267] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.961437][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.982788][ T4503] device veth1_vlan entered promiscuous mode [ 103.141101][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.160558][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.187326][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.199408][ T4267] usb 3-1: config 0 has no interfaces? [ 103.255548][ T4267] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.279779][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.294765][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.331120][ T4267] usb 3-1: Product: syz [ 103.343438][ T4267] usb 3-1: Manufacturer: syz [ 103.370825][ T4267] usb 3-1: SerialNumber: syz [ 103.386547][ T4503] device veth0_macvtap entered promiscuous mode [ 103.456845][ T4267] usb 3-1: config 0 descriptor?? [ 103.468876][ T4503] device veth1_macvtap entered promiscuous mode [ 103.632185][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.692972][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.738906][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.773225][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.920409][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.005890][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.082163][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.133695][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.184107][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.240716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.255486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.312714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.378612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.457095][ T4267] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.520597][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 104.533552][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.563098][ T4267] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.587510][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.638577][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.698752][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.742790][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.835614][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.901037][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.937805][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.970830][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.013639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.040313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.074985][ T4503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.099148][ T4503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.112721][ T4503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.169922][ T4503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.466181][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.502449][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.571710][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.585491][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.607019][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.643280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.363626][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.586207][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 106.598097][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.626682][ T126] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.675903][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.704755][ T126] usb 1-1: Product: syz [ 106.747055][ T126] usb 1-1: Manufacturer: syz [ 106.791496][ T126] usb 1-1: SerialNumber: syz [ 106.821439][ T126] usb 1-1: config 0 descriptor?? [ 106.844940][ T2170] usb 3-1: USB disconnect, device number 4 [ 106.880321][ T126] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.913470][ T126] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 107.451452][ T126] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.697490][ T4789] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.271673][ T126] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 108.297587][ T126] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 108.338781][ T126] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 108.463440][ T126] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.477170][ T126] em28xx 1-1:0.0: dvb set to bulk mode. [ 108.543766][ T126] usb 1-1: USB disconnect, device number 2 [ 108.574566][ T126] em28xx 1-1:0.0: Disconnecting em28xx [ 108.604000][ T2170] em28xx 1-1:0.0: Binding DVB extension [ 108.925061][ T2170] em28xx 1-1:0.0: Registering input extension [ 108.956102][ T126] em28xx 1-1:0.0: Closing input extension [ 109.054440][ T126] em28xx 1-1:0.0: Freeing device [ 110.013436][ T4343] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.213499][ T4343] usb 3-1: Using ep0 maxpacket: 16 [ 110.220719][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.270928][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.365011][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.469248][ T4343] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.533438][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.570208][ T4343] usb 3-1: config 0 descriptor?? [ 110.985027][ T4343] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 110.995774][ T4343] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 111.029432][ T4343] microsoft 0003:045E:07DA.0002: unbalanced delimiter at end of report description [ 111.061679][ T4343] microsoft 0003:045E:07DA.0002: parse failed [ 111.092684][ T4343] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 111.185728][ T4343] usb 3-1: USB disconnect, device number 5 [ 111.500799][ T4264] tipc: Resetting bearer [ 111.600747][ T4264] tipc: Disabling bearer [ 111.850130][ T4345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.035090][ T4345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.184938][ T4273] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 112.194851][ T4273] Bluetooth: hci3: Injecting HCI hardware error event [ 112.203006][ T4281] Bluetooth: hci3: hardware error 0x00 [ 112.230081][ T4345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.451532][ T4345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.880447][ T4345] tipc: Left network mode [ 113.213470][ T4395] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.423563][ T4395] usb 3-1: Using ep0 maxpacket: 16 [ 113.430362][ T4395] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.492290][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.522915][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.588110][ T4395] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.595684][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.606985][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.634548][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.644167][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.651765][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.659602][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.740746][ T4395] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.812239][ T4395] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.828814][ T4395] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.846993][ T4395] usb 3-1: Manufacturer: syz [ 113.905818][ T4395] usb 3-1: config 0 descriptor?? [ 114.270757][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 114.363422][ T4395] rc_core: IR keymap rc-hauppauge not found [ 114.369405][ T4395] Registered IR keymap rc-empty [ 114.385184][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.423577][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.474883][ T4395] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 114.503927][ T4395] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 114.539290][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.573544][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.623542][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.653573][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.703530][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.747055][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.793616][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.833800][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.895756][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.933551][ T4395] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.989182][ T4395] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.029112][ T4395] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.120530][ T4395] usb 3-1: USB disconnect, device number 6 [ 115.199247][ T4891] chnl_net:caif_netlink_parms(): no params data found [ 115.362202][ T4345] device hsr_slave_0 left promiscuous mode [ 115.382764][ T4345] device hsr_slave_1 left promiscuous mode [ 115.463752][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.540597][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.606184][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.643448][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.673807][ T4345] device bridge_slave_1 left promiscuous mode [ 115.680352][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.703559][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 115.811937][ T4345] device bridge_slave_0 left promiscuous mode [ 115.839800][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.999822][ T4345] device veth1_macvtap left promiscuous mode [ 116.060756][ T4345] device veth0_macvtap left promiscuous mode [ 116.092873][ T4345] device veth1_vlan left promiscuous mode [ 116.123612][ T4345] device veth0_vlan left promiscuous mode [ 116.163436][ T2170] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.193865][ T4940] kvm: pic: non byte write [ 116.235058][ T4941] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 116.366516][ T2170] usb 1-1: Using ep0 maxpacket: 16 [ 116.381263][ T2170] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 116.409315][ T4940] kvm: pic: non byte write [ 116.429262][ T2170] usb 1-1: config 0 has no interface number 0 [ 116.442869][ T2170] usb 1-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 116.481867][ T2170] usb 1-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 116.522152][ T2170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.562780][ T2170] usb 1-1: config 0 descriptor?? [ 116.572064][ T4927] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.759455][ T4455] udevd[4455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.291451][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 117.328961][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 117.364416][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.401959][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.759467][ T4345] bond0 (unregistering): Released all slaves [ 117.783719][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 117.850968][ T4926] device team_slave_0 entered promiscuous mode [ 117.857502][ T4926] device team_slave_1 entered promiscuous mode [ 117.902241][ T4267] usb 1-1: USB disconnect, device number 3 [ 118.108391][ T4954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.122'. [ 118.134676][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.143719][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.152066][ T4891] device bridge_slave_0 entered promiscuous mode [ 118.197334][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.222504][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.244293][ T4891] device bridge_slave_1 entered promiscuous mode [ 118.347608][ T4891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.376708][ T4891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.423486][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 118.486543][ T4891] team0: Port device team_slave_0 added [ 118.530410][ T4891] team0: Port device team_slave_1 added [ 118.727476][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.758781][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.930660][ T4891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.013634][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.075952][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.242974][ T4891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.416394][ T4891] device hsr_slave_0 entered promiscuous mode [ 119.438467][ T4891] device hsr_slave_1 entered promiscuous mode [ 119.463163][ T4891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.485526][ T4891] Cannot create hsr debugfs directory [ 119.782548][ T4891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.811887][ T4891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 119.841316][ T4891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.858836][ T4891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.863538][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 120.121605][ T4891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.193004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.218904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.255531][ T4891] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.319692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.354736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.430133][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.437273][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.512315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.576894][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.631654][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.685398][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.692679][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.777584][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.820387][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.881250][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.932293][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.998896][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.045970][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.102930][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.157209][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.216945][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.270408][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.318498][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.380571][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.448776][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'. [ 121.752862][ T5021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 121.953970][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 122.240542][ T5036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 122.247094][ T5036] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.291245][ T5036] vhci_hcd vhci_hcd.0: Device attached [ 122.553561][ T4322] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 122.869408][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.885842][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.925824][ T4891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.199320][ T5037] vhci_hcd: connection reset by peer [ 123.218853][ T4350] vhci_hcd: stop threads [ 123.223170][ T4350] vhci_hcd: release socket [ 123.360841][ T5054] kvm: pic: non byte write [ 123.375660][ T4350] vhci_hcd: disconnect device [ 123.530831][ T26] audit: type=1326 audit(1754293875.986:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32f38eb69 code=0x0 [ 124.621793][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.654972][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.721101][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.769889][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.805425][ T4891] device veth0_vlan entered promiscuous mode [ 124.823769][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.848952][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.913205][ T4891] device veth1_vlan entered promiscuous mode [ 124.990245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.004486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.025216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.054877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.083119][ T4891] device veth0_macvtap entered promiscuous mode [ 125.124967][ T4891] device veth1_macvtap entered promiscuous mode [ 125.273519][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.312242][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.341389][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.416305][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.447638][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.473091][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.529281][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.540926][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.580677][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.591768][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.609198][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.620804][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.636729][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.656764][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.673209][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.699091][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.717393][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.732804][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.749801][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.762520][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.776801][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.801322][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.859224][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.876731][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.906873][ T4891] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.924275][ T4891] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.933225][ T4891] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.949764][ T4891] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.210977][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 126.412937][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.443252][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.506676][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.558773][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.602084][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.712899][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.213838][ T5117] netlink: 168 bytes leftover after parsing attributes in process `syz.3.150'. [ 127.227156][ T5114] input: syz0 as /devices/virtual/input/input7 [ 127.704035][ T4322] vhci_hcd: vhci_device speed not set [ 128.040495][ T5131] random: crng reseeded on system resumption [ 128.432615][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'. [ 131.737450][ T5197] kvm: pic: non byte write [ 132.093429][ T2170] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.210976][ T5205] fuse: Bad value for 'user_id' [ 132.293432][ T2170] usb 6-1: Using ep0 maxpacket: 32 [ 132.302046][ T2170] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.350958][ T2170] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.428520][ T2170] usb 6-1: config 0 has no interface number 0 [ 132.480395][ T2170] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.568321][ T2170] usb 6-1: config 0 interface 1 has no altsetting 0 [ 132.603005][ T2170] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 132.648537][ T2170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.694936][ T2170] usb 6-1: Product: syz [ 132.714113][ T2170] usb 6-1: Manufacturer: syz [ 132.734776][ T2170] usb 6-1: SerialNumber: syz [ 132.776982][ T2170] usb 6-1: config 0 descriptor?? [ 132.828620][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835188][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028776][ T2170] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 133.074207][ T2170] cx231xx 6-1:0.1: Not found matching IAD interface [ 133.131181][ T2170] usb 6-1: USB disconnect, device number 2 [ 133.656349][ T2170] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.843483][ T2170] usb 6-1: Using ep0 maxpacket: 32 [ 133.852746][ T2170] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.889568][ T2170] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.968255][ T2170] usb 6-1: config 0 has no interface number 0 [ 134.007005][ T2170] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.080345][ T2170] usb 6-1: config 0 interface 1 has no altsetting 0 [ 134.119224][ T2170] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 134.158196][ T2170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.180491][ T2170] usb 6-1: Product: syz [ 134.194934][ T2170] usb 6-1: Manufacturer: syz [ 134.220748][ T2170] usb 6-1: SerialNumber: syz [ 134.228524][ T5238] fuse: Bad value for 'group_id' [ 134.269173][ T2170] usb 6-1: config 0 descriptor?? [ 134.700202][ T2170] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 134.733058][ T2170] cx231xx 6-1:0.1: Not found matching IAD interface [ 134.785195][ T2170] usb 6-1: USB disconnect, device number 3 [ 135.376472][ T5255] kvm: pic: non byte write [ 136.224428][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 136.440317][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 136.473624][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.673623][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 136.682212][ T14] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 136.712417][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.733556][ T2170] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 136.773430][ T14] usb 3-1: Product: syz [ 136.796109][ T14] usb 3-1: Manufacturer: syz [ 136.823573][ T14] usb 3-1: SerialNumber: syz [ 136.850219][ T14] usb 3-1: config 0 descriptor?? [ 136.937419][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.958429][ T14] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 136.961251][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.993557][ T2170] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 137.018290][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.048529][ T2170] usb 4-1: config 0 descriptor?? [ 137.291724][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.345799][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.847826][ T2170] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 137.908971][ T2170] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 137.936119][ T2170] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 137.947900][ T2170] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 137.956358][ T2170] CPU: 1 PID: 2170 Comm: kworker/1:3 Not tainted 6.1.147-syzkaller #0 [ 137.964546][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.974626][ T2170] Workqueue: usb_hub_wq hub_event [ 137.979723][ T2170] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 137.985407][ T2170] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 41 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 42 2d fa 48 8d 84 24 80 00 00 00 [ 138.005092][ T2170] RSP: 0018:ffffc90005e667c0 EFLAGS: 00010202 [ 138.011193][ T2170] RAX: 0000000000000015 RBX: ffff8880203d5030 RCX: dffffc0000000000 [ 138.019231][ T2170] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888028229669 [ 138.027243][ T2170] RBP: ffffc90005e66970 R08: 0000000000000001 R09: ffff88802822962e [ 138.035249][ T2170] R10: ffffed10050452cd R11: 1ffff110050452c5 R12: 1ffff1100407aa06 [ 138.043253][ T2170] R13: dffffc0000000000 R14: 1ffff1100407aa05 R15: 00000000000000a8 [ 138.051238][ T2170] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 138.060171][ T2170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.066752][ T2170] CR2: 0000200000389030 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 138.074814][ T2170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.082817][ T2170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.090812][ T2170] Call Trace: [ 138.094096][ T2170] [ 138.097023][ T2170] ? rcu_is_watching+0x11/0xa0 [ 138.101802][ T2170] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 138.107361][ T2170] ? mutex_lock_nested+0x10/0x10 [ 138.112307][ T2170] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 138.117893][ T2170] add_early_randomness+0x7a/0x150 [ 138.123017][ T2170] hwrng_register+0x398/0x440 [ 138.127701][ T2170] devm_hwrng_register+0x43/0xb0 [ 138.132641][ T2170] u2fzero_probe+0x355/0x470 [ 138.137239][ T2170] ? twinhan_input_mapping+0x2210/0x2210 [ 138.142882][ T2170] hid_device_probe+0x25c/0x350 [ 138.147741][ T2170] ? hid_uevent+0x340/0x340 [ 138.152254][ T2170] really_probe+0x2aa/0xc70 [ 138.156790][ T2170] ? pm_runtime_barrier+0x147/0x1c0 [ 138.161991][ T2170] __driver_probe_device+0x18c/0x330 [ 138.167308][ T2170] driver_probe_device+0x4f/0x420 [ 138.172343][ T2170] __device_attach_driver+0x2c6/0x510 [ 138.177743][ T2170] ? coredump_store+0x90/0x90 [ 138.182444][ T2170] bus_for_each_drv+0x175/0x200 [ 138.187302][ T2170] ? _raw_spin_unlock+0x40/0x40 [ 138.192156][ T2170] ? subsys_find_device_by_id+0x350/0x350 [ 138.197892][ T2170] __device_attach+0x29b/0x460 [ 138.202658][ T2170] ? device_attach+0x20/0x20 [ 138.207278][ T2170] ? __kmem_cache_free+0xb6/0x1f0 [ 138.212296][ T2170] ? kobject_uevent_env+0x35f/0x8a0 [ 138.217495][ T2170] bus_probe_device+0xbc/0x1e0 [ 138.222269][ T2170] ? device_add+0x97c/0xfb0 [ 138.226777][ T2170] device_add+0xa00/0xfb0 [ 138.231136][ T2170] hid_add_device+0x389/0x530 [ 138.235823][ T2170] usbhid_probe+0xc09/0xfe0 [ 138.240345][ T2170] usb_probe_interface+0x5a0/0xaf0 [ 138.245465][ T2170] ? usb_register_driver+0x3d0/0x3d0 [ 138.250782][ T2170] really_probe+0x2aa/0xc70 [ 138.255304][ T2170] ? pm_runtime_barrier+0x147/0x1c0 [ 138.260507][ T2170] __driver_probe_device+0x18c/0x330 [ 138.265797][ T2170] driver_probe_device+0x4f/0x420 [ 138.270820][ T2170] __device_attach_driver+0x2c6/0x510 [ 138.276201][ T2170] ? coredump_store+0x90/0x90 [ 138.280881][ T2170] bus_for_each_drv+0x175/0x200 [ 138.285733][ T2170] ? _raw_spin_unlock+0x40/0x40 [ 138.290600][ T2170] ? subsys_find_device_by_id+0x350/0x350 [ 138.296323][ T2170] __device_attach+0x29b/0x460 [ 138.301104][ T2170] ? device_attach+0x20/0x20 [ 138.305695][ T2170] ? kobject_uevent_env+0x35f/0x8a0 [ 138.310890][ T2170] bus_probe_device+0xbc/0x1e0 [ 138.315655][ T2170] ? device_add+0x97c/0xfb0 [ 138.320153][ T2170] device_add+0xa00/0xfb0 [ 138.324494][ T2170] usb_set_configuration+0x1991/0x1fd0 [ 138.329978][ T2170] usb_generic_driver_probe+0x89/0x150 [ 138.335448][ T2170] usb_probe_device+0x139/0x270 [ 138.340309][ T2170] ? usb_register_device_driver+0x230/0x230 [ 138.346222][ T2170] really_probe+0x2aa/0xc70 [ 138.350732][ T2170] ? pm_runtime_barrier+0x147/0x1c0 [ 138.355941][ T2170] __driver_probe_device+0x18c/0x330 [ 138.361234][ T2170] driver_probe_device+0x4f/0x420 [ 138.366268][ T2170] __device_attach_driver+0x2c6/0x510 [ 138.371643][ T2170] ? coredump_store+0x90/0x90 [ 138.376327][ T2170] bus_for_each_drv+0x175/0x200 [ 138.381187][ T2170] ? _raw_spin_unlock+0x40/0x40 [ 138.386042][ T2170] ? subsys_find_device_by_id+0x350/0x350 [ 138.391764][ T2170] __device_attach+0x29b/0x460 [ 138.396534][ T2170] ? device_attach+0x20/0x20 [ 138.401128][ T2170] ? __kmem_cache_free+0xb6/0x1f0 [ 138.406156][ T2170] ? kobject_uevent_env+0x35f/0x8a0 [ 138.411805][ T2170] bus_probe_device+0xbc/0x1e0 [ 138.416580][ T2170] ? device_add+0x97c/0xfb0 [ 138.421092][ T2170] device_add+0xa00/0xfb0 [ 138.425428][ T2170] usb_new_device+0xd4d/0x1620 [ 138.430196][ T2170] ? lock_chain_count+0x20/0x20 [ 138.435052][ T2170] ? usb_disconnect+0x8a0/0x8a0 [ 138.439936][ T2170] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.445138][ T2170] ? lockdep_hardirqs_on+0x94/0x140 [ 138.450337][ T2170] hub_event+0x2d5e/0x54e0 [ 138.454795][ T2170] ? hub_post_resume+0x120/0x120 [ 138.459742][ T2170] ? read_lock_is_recursive+0x10/0x10 [ 138.465118][ T2170] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.471013][ T2170] ? _raw_spin_unlock+0x40/0x40 [ 138.475885][ T2170] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.481089][ T2170] ? process_one_work+0x7a1/0x1160 [ 138.486287][ T2170] process_one_work+0x898/0x1160 [ 138.491230][ T2170] ? worker_detach_from_pool+0x240/0x240 [ 138.496865][ T2170] ? _raw_spin_lock_irq+0xab/0xe0 [ 138.501891][ T2170] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 138.507264][ T2170] ? kthread_data+0x4b/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.511786][ T2170] worker_thread+0xaa2/0x1250 [ 138.516470][ T2170] ? __kthread_parkme+0x162/0x1c0 [ 138.521500][ T2170] kthread+0x29d/0x330 [ 138.525573][ T2170] ? worker_clr_flags+0x1a0/0x1a0 [ 138.530601][ T2170] ? kthread_blkcg+0xd0/0xd0 [ 138.535198][ T2170] ret_from_fork+0x1f/0x30 [ 138.539623][ T2170] [ 138.542670][ T2170] Modules linked in: [ 138.556377][ T14] ssu100: probe of 3-1:0.0 failed with error -110 [ 138.577775][ T14] usb 3-1: USB disconnect, device number 7 [ 138.963142][ T2170] ---[ end trace 0000000000000000 ]--- [ 138.968822][ T2170] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 138.976355][ T2170] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 41 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 42 2d fa 48 8d 84 24 80 00 00 00 [ 138.996292][ T2170] RSP: 0018:ffffc90005e667c0 EFLAGS: 00010202 [ 139.002403][ T2170] RAX: 0000000000000015 RBX: ffff8880203d5030 RCX: dffffc0000000000 [ 139.010927][ T2170] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888028229669 [ 139.020288][ T2170] RBP: ffffc90005e66970 R08: 0000000000000001 R09: ffff88802822962e [ 139.028544][ T2170] R10: ffffed10050452cd R11: 1ffff110050452c5 R12: 1ffff1100407aa06 [ 139.040425][ T2170] R13: dffffc0000000000 R14: 1ffff1100407aa05 R15: 00000000000000a8 [ 139.049814][ T2170] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 139.060776][ T2170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.068482][ T2170] CR2: 0000200000404030 CR3: 000000002ec28000 CR4: 00000000003506e0 [ 139.078561][ T2170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.087112][ T2170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.097145][ T2170] Kernel panic - not syncing: Fatal exception [ 139.103595][ T2170] Kernel Offset: disabled [ 139.107924][ T2170] Rebooting in 86400 seconds..