last executing test programs: 12.342520852s ago: executing program 0 (id=21): userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) 12.247701785s ago: executing program 0 (id=23): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a100", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x4c) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfffffffc, 0x71, 0x10, 0x5b}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000600)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x2, 0x612, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) poll(&(0x7f0000000100)=[{r1, 0x44c8}], 0x1, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x90, 0x11, 0x148, 0x0, 0x0, 0x184, 0x2a8, 0x2a8, 0x184, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xcc, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0xb}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x40}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 9.908493267s ago: executing program 3 (id=34): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2dc, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xb) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 9.548152856s ago: executing program 0 (id=35): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffd26, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x80800, &(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000000)="0a0dea", 0x3}], 0x2, 0x10, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x290, 0x0, 0xcd}]}) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 9.431956409s ago: executing program 1 (id=36): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x3f3ffc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb) 8.26532295s ago: executing program 1 (id=40): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(0x3) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00'}) close(r2) r4 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4e5}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x20000000) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x400}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) close_range(r6, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x1000, 0x3) open$dir(&(0x7f0000000100)='./file0\x00', 0x149802, 0x0) epoll_create1(0x80000) 7.701968755s ago: executing program 3 (id=44): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 7.392902223s ago: executing program 0 (id=45): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) 6.133814527s ago: executing program 2 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000120001012dbd7000fedbdfec9c9044c1a2c08bb4", @ANYRES32=0x0, @ANYBLOB="1800e58014003100"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0xc30e844a13ffe3f, 0x1e, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff122d, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2e1de18e}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x0, 0x2, 0x0, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xdf48, 0xcb, &(0x7f00000015c0)=""/203, 0x40f00, 0x40, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001700), &(0x7f0000001740)=[{0x3, 0x4, 0x7, 0x4}, {0x4, 0x3, 0x5, 0xb}, {0x2, 0x4, 0xe, 0x7}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)}, 0x1c) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000001980), 0x400, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000019c0)={0xffffffffffffffff, 0xffff, 0x18}, 0xc) r10 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a00), 0x52000, 0x0) recvmsg$can_bcm(r8, &(0x7f0000001e00)={&(0x7f0000001900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/134, 0x86}, {&(0x7f0000001c80)=""/108, 0x6c}, {&(0x7f0000001d00)=""/60, 0x3c}], 0x3, &(0x7f0000001d80)=""/71, 0x47}, 0x40002140) r11 = syz_open_dev$vcsu(&(0x7f0000001a40), 0x6, 0x200002) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587", @ANYRES8], 0x0) r12 = syz_open_dev$loop(&(0x7f0000000040), 0x210, 0x10d000) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000000280)={r13, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xd, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "3207000000061a74df2cfc06e89f3d9e234b30c50997d3bef40976ff7bfe55cd4a4783cd4a524bd3ff1fcaed1e831fa79a0000000000e000", "675237d90800080000000018090000000000000061b7ad3300", [0x3, 0x6]}}) sendfile(r13, r12, 0x0, 0x10000200000200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1e, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@exit, @ldst={0x2, 0x3, 0x6, 0x4, 0x3, 0x50, 0x4}, @btf_id={0x18, 0x29be7f522a44f21e, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0xd1, 0x1, 0x2, 0x1, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x93, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x9, '\x00', r5, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0xb, 0x9, 0xbf1}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000001a80)=[r7, 0x1, 0xffffffffffffffff, r8, r1, r9, r10, r11], &(0x7f0000001ac0)=[{0x3, 0x1, 0x9}, {0x3, 0x3, 0xa, 0xa}, {0x4, 0x3, 0x3, 0x8}], 0x10, 0x9}, 0x94) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfbffbcdc, {0x0, 0x0, 0x0, r15, {0xffff, 0xc}, {0x8}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x98}, 0x8800) getsockopt$IP_VS_SO_GET_SERVICES(r14, 0x0, 0x482, &(0x7f0000001e40)=""/74, &(0x7f0000001ec0)=0x4a) 6.048736729s ago: executing program 1 (id=49): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf8, 0xd1, 0x81, 0x8, 0x2c42, 0x16f8, 0x5d24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x75, 0xfc, 0x0, 0x5, "", [{{0x9, 0x4, 0xa3, 0xa2, 0x0, 0x6, 0xcc, 0xf6, 0xc}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001880)={0x14, 0x0, &(0x7f0000001840)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002600)={0x1c, &(0x7f0000002400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.780805643s ago: executing program 0 (id=50): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x0, 0x5, 0x5, "8b220c0bfe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.213164808s ago: executing program 4 (id=52): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) 4.091251121s ago: executing program 4 (id=53): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0) 3.851422037s ago: executing program 2 (id=54): r0 = msgget(0x2, 0x8) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000140)=""/68) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="082e032aa55fd1b219404098e13d9d700d4cb0b1882db05a54c522fac958d0be9af6c0813f8d2941efafec87f4f730f2767b0731d1338ae5f1bc10780b4480157704f72da9c17bc55ac0512fc2c0051c8d821320196520bffdea360592357a558488a0a90063ed8f5f9c29971effea2ae27e75fe9cfdf2a0262767024b98ccae7aa4870eaf5990374f568e36f1abda4a00f47a6bf0613ffbf7b2df6ae35b34cebad8645993548043199fa824491bf0143e4a356413923b70612d4a4d0b42b485bb79655752c31a0fe586d787b47b4de2ce68c2a7a0510d94f3a2119c92819e7ac42078b9468cfcfc2f2b125ecf82a98354235a1d8eb5afcf4a06dc0f9869831d81926b35273e3bc75284d15e7e334e01511eb63aa2d1bac921145f7a86bfea1a6171f25635702ebbf04a5b20a61acb379843bedb571fa0182e8c99ba49c65588cef427fabcec02588fb2ad5ca62168b4f22f9dd367275eeeef7a6b89d32dc95c09215821b4ca3bc278bc686255504c25654569456684d34f9eb2bee2834dcbd14c9c44d0e5949e3926fe3b40ebe2c1bbf27571ae40b7b5d498c606291a5698853004785b14fec76c376d80101824d4557ab401f32aacd1efc72a00998272072f7c42deeb04fe2a970a919f1ef9e191f297c9ad9e88868f6e4fe3882c31419d2469443605c77b84adc1112cf2a1bc4f199be15cb528f4df7c5bc17c87ea861500629e3819e8029d007ab7c570d82e1c5d9552efd335f89229ceb23e45411da0e4d74b53b250a862e449e85ba9f9aeff1e86ac19830e06da967d71d92a2bf9b65ff628b65604048cdce5b50feab695495a6f35926d32cbd6f48fa756b33d5ab371e2f55a433238da772f2f124dc6719dd7a9bad3e14e65248f889bb732ba260ee71c26c7a8d28fc5c2fe8a3ab2d9b440424c53ce150470798ff6377647856cf738bfeaa31a6fbc7c1095eaf6c8ea1f732608442492c035bec5566d731245937a58de1b5d0256173c308bf1c21e996d9ce9aef1417be8f79f51be7293ebb7c68f0b961fd85df818bedfc5de197ad70c8b9e19e3b0266706777c5fa07c0f4dd58a09f1ff3bf00aa838f91b03e5c6a3da9a544b98024cac2372fe2dc504d1b38cb4d8d7fba94197500777b0a53af2c18e006f4d99f3f3045d3c55875a85ee2a9829c43ffe665f0f0b020ac190cfa9add47d0a835046440cb4d3d7e2c1c4a8533ab3caeddb6abaac6d9329786005d4e78b5b04909930fc15ed02fb8b8eaa990db08bff499b1108527d2015dae3bc5d4c865da72ada011ec873a7f44e974584792f3c0e37744d8a0206c80942a3931c69ee20e9675dbe0a42ceaa6b8a0173c9f5b47c7c476166d95cfcf83781bfcfc86292b9df9e4760c3862966dae34ad4466c643fe986f2c1260f8631c54ffab37ece7881828107cd1914aeed56a6cb0733d07091bca2913ec4252e73aee9dfb19533212b05bdf2f2659ddb9800241c9d6738aa0a16962a83074bd7ba7d8fcde3feb2447e4ba2849932c827be575a38d16c335eb369b3839ebb6e890bfe67b34c26aa79b1c4a69cb38e54ef885ecb3d17b92fc2d5dfa9bc692e46aab44e8fa8329cd67097481ddcaea0b23e9761dcb6a647f287703250e34b80a477d14be4e737a3480dcf11ac631f1f0e2c139e86b40ee75603e653d0e031062355508ca95e81fc19c28aac43c9e27f56d9fa57b19857d0761d6003dfc1a0f1431c46d99b9d4e393a938b25371b42b53e808c80d238f28aee717ad50565f033534bec64641dfcaefaaca78c3c5408c597891627fdc54239ebc5b1416d24223dd591be83409c93f15343969a01c624fffae3f4ca1b5df1f628ad7909201bf4497dd90c24f2e63a36d5d594b808d7a56bffea2879ef23b89bc54250156b7ae2924b8606843674b2a978bffccc4c63a905c1e6056a9ee4c39afb3583a3c3e18dbe378de8a461b004ba94c9162077ac081651b9a8e1139479e5298a496e43c71e45f0bab5470716a968d6f2f6bdcc44d650dee1cd58a569d6623c71d10f1012c22e2b1136d42e565dbbbcd30e69a416253ebaf72c324e6d06d536cd8d7787ae838eede90273b8b66c3e5cd222f09c0fbeb5de4518d16845365ceac693d5c1482394325e9567648f953e104c18a4b00784b9a7fa403bfcaaa176dd36badf0089df0acb5f9258cb90e2ac270baf199e2b2f650b80fd4984b36689a5d0c0ddfb679f80fcf21a768aeb255489e28d175181de7b73e3b3f06ec62ca69b14be1babc9feb5f230b07874a3a2861346c4d21d3893f74039dcac4f3da8821a0a7c9f5e8b28cf343594ef4a5079f6bc273a4195b6462a9ad08d0cc0ff183c659ee0ad4afab354ed0c3638aef6922c29a8d6ebf3ddfae66daf121080d983ddc6895baa406aff45d9e9df340cf28f80dbed3577acc4a1171db36f011246108c7e91b3b7250e446ce86e45bcda800add46ce15ab54354e36cd854bdf2a5ffe5fc6cc0573d3e890622daf90fdb9a0e97f69bad83f38e06832c145fc1c1b7276ec41f69fe985e20da70ff787e9997da6bb3867e3fda8e30936e3c6b743f1236159c9880e8fdb3f1c7382515a98e7d2eda01d31f6f7f93e1cde018873edae7c7614c503b7937d41b432c75f48180e6b74275342a0fa6fb38f953e0858ad3eb6dc8d4cc58731f73f766988ffbc1c49e32ffcc6b0a57d65828a23b22900b04c3c47a2a436305a5c8affc304a7f480f3fb35ed12fa57e884f066b23f1586265c6792576e7abd4165d66f456d743348843283fb9dc355a80dea70c12bde547e19cf8c8bb55f90f9593a82d8a40657d1b21601a55695b22b632e24962691505850546634688f3d5973727b3ff183cd52f6d3c7d451bc89d1b7aa386e43fa0836668f0225f03bcae952fb0f9443f71a2b73782e33c04f6044ffab20c89f3c29d657a053dc88c6df6aac2c72f71fe63970fa5e61bd2beb78aa9e99f5fab99a23c2de1e2fd767b107b7401cd34e3d97efd77c44bb8660dea8689b02fb5c2d079a44c2b0e1525d0d21a0844fbe5bf5d161233e20630498fcde265c26a481e9854940d0af6dd4cc868ea1e505038615cd9f8a9c7290d084324e82db3b0573a7b798634620a2d001d11502b282a558e3ef8efac9feeea69e334cda7af9cdb07f4a2183862db59d061a63b43336b9a5f6c0ce9ece92c648b3f0a126afa0651da9321217d0ca5367433642fc25178311a25dc9ff4fe38090dc3e7b31366d59e9ef04934d2b79b18e5dad66ca3cb7f01158232f1428f610de1326b376adf4122d47b2f92d728305acc47407865243170836e4f80457627e99ab9e7233a0fb633f7c6bc563d0f9bd278a315f4c922efc22aa4998dd63c89d989140f13f98a94e94943ab30b4af331fc7d00c72e4aa8aa0a53b4f134c1686c1aba410bca848e85a222ac145346a0792c8ca78bba66789a27d3431e3013bd508b06c37e87df01e4040f88ba4e06128756d43cc6cbc3906dccd2efd0a6cfbb47f512a1cc85b64218e3603b9dccb1a68b3a6b2664431af06255af3b666a67b5297b4dab98c936be596ccef6711adb15346a7ee34bfdb1af6469c49db2061205b766619b1fc6ed8cc9c22729832566e13bee0a9a7fe107a5b3c75d234d", 0xa07}], 0x1, 0x0, 0x0, 0x40404c5}, 0xc000004) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.844347048s ago: executing program 4 (id=55): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.722004311s ago: executing program 4 (id=56): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000440)="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", 0xa07}], 0x2, 0x0, 0x0, 0x40404c5}, 0xc000004) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB='@\"\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.264065563s ago: executing program 1 (id=57): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) socket$inet6(0xa, 0x5, 0x0) unshare(0x28040680) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) 3.233523854s ago: executing program 1 (id=58): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x85, &(0x7f00000001c0)="259a53f271a76d2686dd4ca80000", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001}, 0x23) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)=0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4e8001, 0x84) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100008003, 0xfffffe0000000001, 0xfa11, 0x80000000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5279, 0x200, 0x0, 0x0}, {0x5, 0x810, 0x0, 0x0}], 0x2}) 2.143129033s ago: executing program 3 (id=59): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.051759685s ago: executing program 3 (id=60): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.920878688s ago: executing program 0 (id=61): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x8, 0x7, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x1) syz_emit_ethernet(0x52, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000180)=0x7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.196538948s ago: executing program 3 (id=62): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x3f3ffc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb) 1.125757089s ago: executing program 2 (id=63): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) 1.030359332s ago: executing program 2 (id=64): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x6) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)}}], 0x2, 0x40) 987.453794ms ago: executing program 1 (id=65): r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "6e483587c9ef73c14a4cd0b40b9ef9a5f027b4b9c347b8be56a276531a0cdb3f37334480a165ebfa6fff4d3c05e6b50c1b8c31e0eff5a8062c5a49076ff2d453", 0x33}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r0) r1 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x20, r1) keyctl$negate(0xd, r0, 0x7f, r1) r2 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000000000)=0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff8400000088a8000003125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x700, 0x700, 0xea, 0xffff, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x1067, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@local, 0x7}, {@multicast1, 0xc}, {@multicast1, 0x9}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0x5, [{@local, 0x46d6ad4f}]}, @noop, @noop, @lsrr={0x83, 0x11, 0xc1, [@empty]}, @rr={0x7, 0x1b, 0x5c, [@loopback, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}]}}}}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r9, 0x43924, 0x20404}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r12, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r12, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0xfffffffb, 0x4cb, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "5bf16875c074ba"}]}, @timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x4, [{@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@local, 0x2}, {@remote, 0x9}]}, @timestamp={0x44, 0x2c, 0x45, 0x0, 0x8, [0x3, 0x2, 0x3ff, 0x5, 0x0, 0x3, 0x1000, 0x6, 0x7, 0x4]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0xed, 0x7e, 0x4, 0x2, @remote, @private2, 0x20, 0x7, 0x400, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000100), 0xc, &(0x7f0000001240)={&(0x7f0000001300)={0x9a0, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_tx_hash_to_port_mapping}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0xc}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x2, 0xff, 0xfffffd2f}, {0x2, 0x6, 0x8, 0x2}, {0x80, 0xa, 0x9, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xac79, 0x7, 0x4, 0x3}, {0x7fff, 0x9, 0x7, 0x2}, {0xff9f, 0x7, 0xb7, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd8e4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x23c5, 0x9, 0x1}, {0xd2, 0x9, 0xc9, 0x4}, {0x7, 0x7, 0xa, 0x7}, {0x5, 0x7, 0xf, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x24}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r16}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0xe, 0x0, 0x700, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x10, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x10) 675.836662ms ago: executing program 2 (id=66): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b34", 0x13}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad", 0x6a}, {&(0x7f0000000800)="38c434", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x20044014) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}], 0x1}, 0x0) 497.164006ms ago: executing program 2 (id=67): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, r3, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) 411.163229ms ago: executing program 4 (id=68): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) 60.598878ms ago: executing program 3 (id=69): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x3c63, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) 0s ago: executing program 4 (id=70): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ef50dc5ab5906aaf46f1029b2848558ded886de46b762de6645d800239b6fa220c7a38269d13a972303b6667eaf07cc8bcabc1014ace1a1564ed8f7799bb3c6b100b4ced5e33c"], 0xf8) fanotify_init(0x200, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 64.140116][ T4177] cgroup: Unknown subsys name 'net' [ 64.275790][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.734164][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.229689][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.247936][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.308106][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.355027][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 67.396110][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 67.447702][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.455833][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.464764][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.479766][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.486973][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.495069][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.507437][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.515151][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.523920][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.536182][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.543778][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.552674][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.633522][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.643042][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.651299][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.659927][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.670113][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.687776][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.706571][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.724185][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.731575][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.740572][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.761239][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.768360][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.777579][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.808204][ T4190] team0: Port device team_slave_0 added [ 67.822189][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.829703][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.838258][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.845720][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.853209][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.861479][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.871228][ T4190] team0: Port device team_slave_1 added [ 67.877274][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.885080][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.893579][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.903146][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.915998][ T4194] team0: Port device team_slave_0 added [ 67.944558][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.962961][ T4194] team0: Port device team_slave_1 added [ 68.003276][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.013498][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.021205][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.048026][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.062334][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.074587][ T4197] team0: Port device team_slave_0 added [ 68.090722][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.100805][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.107800][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.134826][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.148494][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.159679][ T4197] team0: Port device team_slave_1 added [ 68.166053][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.173170][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.200198][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.244605][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.252172][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.278251][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.299473][ T4195] team0: Port device team_slave_0 added [ 68.331310][ T4196] team0: Port device team_slave_0 added [ 68.339062][ T4195] team0: Port device team_slave_1 added [ 68.362813][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.370837][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.393697][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.400811][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.427341][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.441325][ T4196] team0: Port device team_slave_1 added [ 68.472454][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.479733][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.506499][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.529986][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.538405][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.564925][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.580964][ T4194] device hsr_slave_0 entered promiscuous mode [ 68.588172][ T4194] device hsr_slave_1 entered promiscuous mode [ 68.595414][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.603779][ T4194] Cannot create hsr debugfs directory [ 68.624572][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.631975][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.660719][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.677630][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.685107][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.711780][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.749351][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.756393][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.782992][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.830193][ T2304] Bluetooth: hci0: command 0x0409 tx timeout [ 68.842474][ T4197] device hsr_slave_0 entered promiscuous mode [ 68.849650][ T4197] device hsr_slave_1 entered promiscuous mode [ 68.856864][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.865497][ T4197] Cannot create hsr debugfs directory [ 68.909449][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 68.910725][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.917133][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 68.922346][ T4200] Bluetooth: hci3: command 0x0409 tx timeout [ 68.936134][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.942857][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 68.950242][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.957955][ T4195] Cannot create hsr debugfs directory [ 68.972111][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.980072][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.986945][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.995212][ T4196] Cannot create hsr debugfs directory [ 69.318050][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.331770][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.341432][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.356208][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.376500][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.397434][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.423453][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.436347][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.494789][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.504534][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.515191][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.541155][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.623364][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.655250][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.665294][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.691030][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.708391][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.717300][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.758515][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.772673][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.783009][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.793677][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.806458][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.816576][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.825959][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.840978][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.855344][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.867579][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.883650][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.893852][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.904175][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.911538][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.924489][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.968099][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.977453][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.987040][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.994202][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.003580][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.013474][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.023006][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.032290][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.041248][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.048579][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.057169][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.066370][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.075506][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.082806][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.091795][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.103271][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.133358][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.143392][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.153380][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.167811][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.177276][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.187238][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.196848][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.206356][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.216858][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.237521][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.261291][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.272382][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.282589][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.291847][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.301353][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.310293][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.323851][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.336784][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.353211][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.365164][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.378152][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.389856][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.398630][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.408707][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.457819][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.466636][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.476840][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.513345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.544969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.555239][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.562588][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.583596][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.604681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.613092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.628712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.640918][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.648308][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.678974][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.715309][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.726922][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.743732][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.757953][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.771879][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.803588][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.814418][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.824499][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.835433][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.845790][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.856718][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.865960][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.874456][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.882717][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.892167][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.901870][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.909102][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.917078][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.925488][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 70.933484][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.943088][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.950409][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.958313][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.969652][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.985685][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.993689][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 71.011473][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.024333][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.031176][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 71.037917][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 71.044106][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.045692][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.060516][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.066080][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 71.072888][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.085855][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.094878][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.103115][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.123631][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.134967][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.148166][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.169658][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.186151][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.195312][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.212413][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.224976][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.232258][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.247442][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.281795][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.297856][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.307539][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.320493][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.329979][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.337089][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.345628][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.354838][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.364919][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.374850][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.384851][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.400237][ T4190] device veth0_vlan entered promiscuous mode [ 71.430538][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.441229][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.459800][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.468819][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.478931][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.485952][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.499987][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.509446][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.552272][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.563149][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.580471][ T4190] device veth1_vlan entered promiscuous mode [ 71.597253][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.606794][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.618368][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.627784][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.637036][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.646600][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.655813][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.664895][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.674962][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.685099][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.694628][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.703681][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.713312][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.721620][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.732676][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.741072][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.752504][ T4194] device veth0_vlan entered promiscuous mode [ 71.764876][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.776274][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.810471][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.818239][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.828034][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.840224][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.856335][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.868954][ T4194] device veth1_vlan entered promiscuous mode [ 71.935765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.950398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.973478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.988853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.000078][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.009706][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.024210][ T4194] device veth0_macvtap entered promiscuous mode [ 72.034180][ T4190] device veth0_macvtap entered promiscuous mode [ 72.059759][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.074350][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.085318][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.107699][ T4194] device veth1_macvtap entered promiscuous mode [ 72.118279][ T4190] device veth1_macvtap entered promiscuous mode [ 72.133313][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.143144][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.152067][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.161533][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.171486][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.192242][ T4195] device veth0_vlan entered promiscuous mode [ 72.228087][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.238015][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.250297][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.275902][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.290873][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.303914][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.316086][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.329570][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.338630][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.348707][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.357415][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.366400][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.376380][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.389916][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.398585][ T4195] device veth1_vlan entered promiscuous mode [ 72.417731][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.431083][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.445281][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.455156][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.477549][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.486869][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.496204][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.509046][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.526118][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535794][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.545950][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.571315][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.580423][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.591074][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.600173][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.629991][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.638275][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.653694][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.666612][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.682947][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.795451][ T4195] device veth0_macvtap entered promiscuous mode [ 72.828397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.838502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.847845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.858168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.868396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.878784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.888226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.898007][ T4196] device veth0_vlan entered promiscuous mode [ 72.940262][ T4195] device veth1_macvtap entered promiscuous mode [ 72.982831][ T4196] device veth1_vlan entered promiscuous mode [ 72.989407][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 73.056948][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.065363][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.078363][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.089022][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.097271][ T2304] Bluetooth: hci3: command 0x040f tx timeout [ 73.109282][ T2304] Bluetooth: hci1: command 0x040f tx timeout [ 73.115557][ T2304] Bluetooth: hci2: command 0x040f tx timeout [ 73.119395][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.124257][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.141998][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.153811][ T2304] Bluetooth: hci4: command 0x040f tx timeout [ 73.160265][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.173269][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.200014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.208310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.217462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.226591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.235834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.244737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.255527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.265822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.275766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.291724][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.304239][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.315638][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.327410][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.340152][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.365684][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.378717][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.388089][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.398651][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.407830][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.416797][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.426844][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.435690][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.446794][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.456060][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.465358][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.475109][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.502564][ T4197] device veth0_vlan entered promiscuous mode [ 73.515843][ T4196] device veth0_macvtap entered promiscuous mode [ 73.528585][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.537811][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.560073][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.567964][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.585934][ T4196] device veth1_macvtap entered promiscuous mode [ 73.599026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.607621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.631331][ T4197] device veth1_vlan entered promiscuous mode [ 73.744504][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.757449][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.768777][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.780410][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.792149][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.803151][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.815866][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.839770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.848614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.857084][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.871202][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.934126][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.965931][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.977018][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.988713][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.999851][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.011144][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.023081][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.053453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.062479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.072479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.095705][ T4197] device veth0_macvtap entered promiscuous mode [ 74.113071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.128513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.141517][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155817][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.165461][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.180082][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.197916][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.205239][ T4197] device veth1_macvtap entered promiscuous mode [ 74.206192][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.224264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.233782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.242448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.307442][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.322555][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.335351][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.346007][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.358676][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.371250][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.382304][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.395990][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.406872][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.423044][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.436369][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.449407][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.460585][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.471907][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.482432][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.493251][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.503986][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.515755][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.527604][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.544608][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.565413][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.575347][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.585763][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.641445][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.662164][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677325][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.686874][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.725710][ T4280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.743890][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.777721][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.844823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.891579][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.922733][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.950586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.969585][ T4268] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.991548][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.000890][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.008347][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.026277][ T4268] usb 4-1: Product: syz [ 75.032026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.056332][ T4268] usb 4-1: Manufacturer: syz [ 75.066672][ T4268] usb 4-1: SerialNumber: syz [ 75.096181][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.139068][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.176539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.187130][ T2304] Bluetooth: hci0: command 0x0419 tx timeout [ 75.196635][ T2304] Bluetooth: hci2: command 0x0419 tx timeout [ 75.213710][ T2304] Bluetooth: hci1: command 0x0419 tx timeout [ 75.220844][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 75.229994][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 75.339383][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.403639][ T4292] netlink: 'syz.2.3': attribute type 20 has an invalid length. [ 75.414227][ T4292] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.425453][ T4292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.433355][ T4292] IPv6: NLM_F_CREATE should be set when creating new route [ 75.589346][ T2304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.609670][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 75.618137][ T1111] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 75.849748][ T2304] usb 2-1: Using ep0 maxpacket: 16 [ 75.875849][ T4233] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.887226][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.908237][ T4233] usb 1-1: Product: syz [ 75.917292][ T4233] usb 1-1: Manufacturer: syz [ 75.926529][ T4233] usb 1-1: SerialNumber: syz [ 75.943113][ T4233] usb 1-1: config 0 descriptor?? [ 75.969910][ T2304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.990693][ T2304] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 76.000280][ T1111] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.022875][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.035294][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.050635][ T1111] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 76.068635][ T2304] usb 2-1: config 0 descriptor?? [ 76.079472][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.102270][ T1111] usb 5-1: config 0 descriptor?? [ 76.199542][ T4233] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 76.539780][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 76.556202][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 76.569852][ T4268] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 76.580511][ T4268] lan78xx: probe of 4-1:1.0 failed with error -71 [ 76.588006][ T2304] logitech 0003:046D:C20E.0001: rdesc size test failed for formula gp [ 76.606571][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.616197][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.622709][ T4268] usb 4-1: USB disconnect, device number 2 [ 76.643012][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.652456][ T1111] usbhid 5-1:0.0: can't add hid device: -71 [ 76.659365][ T1111] usbhid: probe of 5-1:0.0 failed with error -71 [ 76.676698][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.702476][ T1111] usb 5-1: USB disconnect, device number 2 [ 76.712899][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.723429][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.736366][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.745666][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.761819][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.777157][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.787664][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.798385][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.806937][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.814951][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.822358][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.830311][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.837735][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.845115][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.852465][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.861267][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.868634][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.876752][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.884625][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.892257][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.899779][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.907327][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.917496][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.925010][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.933343][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.940879][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.948633][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.956944][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.964675][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.972261][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.980248][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.987551][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 76.996427][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 77.003762][ T2304] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 77.017277][ T2304] logitech 0003:046D:C20E.0001: hidraw0: USB HID v0.0a Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 77.036239][ T2304] usb 2-1: USB disconnect, device number 2 [ 77.140120][ T4297] fido_id[4297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 77.214606][ T4301] netlink: 4368 bytes leftover after parsing attributes in process `syz.4.8'. [ 77.469769][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.549936][ T2304] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.630148][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 77.710700][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 77.789994][ T2304] usb 5-1: Using ep0 maxpacket: 16 [ 77.829500][ T4234] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 77.838507][ T4234] usb 4-1: config 0 has no interface number 0 [ 77.846080][ T4234] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.856518][ T4234] usb 4-1: config 0 interface 89 has no altsetting 0 [ 77.867974][ T4233] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 77.880063][ T4233] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 77.888227][ T4233] usb 1-1: media controller created [ 77.897227][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.914056][ T4233] dvb_usb_rtl28xxu 1-1:0.0: unknown tuner MT2266 [ 77.921132][ T2304] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.933127][ T2304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.940157][ T2304] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.950523][ T2304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.968243][ T2304] usb 5-1: config 0 descriptor?? [ 78.049445][ T4234] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 78.059037][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.075837][ T4234] usb 4-1: Product: syz [ 78.080234][ T4234] usb 4-1: Manufacturer: syz [ 78.085764][ T4234] usb 4-1: SerialNumber: syz [ 78.099398][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.108766][ T4234] usb 4-1: config 0 descriptor?? [ 78.116802][ T4283] capability: warning: `syz.0.6' uses 32-bit capabilities (legacy support in use) [ 78.163199][ T4234] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 78.170004][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 78.180945][ T4234] em28xx 4-1:0.89: Video interface 89 found: [ 78.195360][ T4233] usb 1-1: USB disconnect, device number 2 [ 78.329509][ T7] usb 2-1: config 136 has an invalid interface number: 30 but max is 0 [ 78.338023][ T7] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 78.359822][ T7] usb 2-1: config 136 has no interface number 0 [ 78.366189][ T7] usb 2-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 78.383705][ T7] usb 2-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.410323][ T4308] loop2: detected capacity change from 0 to 8192 [ 78.453960][ T2304] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 78.460286][ T4308] ======================================================= [ 78.460286][ T4308] WARNING: The mand mount option has been deprecated and [ 78.460286][ T4308] and is ignored by this kernel. Remove the mand [ 78.460286][ T4308] option from the mount to silence this warning. [ 78.460286][ T4308] ======================================================= [ 78.538344][ T4308] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 78.548342][ T4308] REISERFS (device loop2): using ordered data mode [ 78.555467][ T4308] reiserfs: using flush barriers [ 78.565082][ T4308] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.581595][ T7] usb 2-1: New USB device found, idVendor=0499, idProduct=f00e, bcdDevice=f0.f3 [ 78.591753][ T4308] REISERFS (device loop2): checking transaction log (loop2) [ 78.600063][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.608610][ T7] usb 2-1: Product: syz [ 78.613006][ T7] usb 2-1: Manufacturer: syz [ 78.617644][ T7] usb 2-1: SerialNumber: syz [ 78.623611][ T4308] REISERFS (device loop2): Using r5 hash to sort names [ 78.637195][ T4308] REISERFS (device loop2): using 3.5.x disk format [ 78.649738][ T4308] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 78.877573][ T4234] em28xx 4-1:0.89: unknown em28xx chip ID (64) [ 78.901013][ T4233] usb 5-1: USB disconnect, device number 3 [ 78.918126][ T4305] tun0: tun_chr_ioctl cmd 1074025681 [ 79.044481][ T4305] Zero length message leads to an empty skb [ 79.066008][ T4305] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.073327][ T4305] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.093021][ T4305] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.093767][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.099890][ T4305] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.169538][ T4305] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.176147][ T4305] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.197619][ T4305] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.204282][ T4305] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.599927][ T4318] x_tables: duplicate underflow at hook 4 [ 79.769851][ T4234] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 79.778966][ T4234] em28xx 4-1:0.89: board has no eeprom [ 79.914823][ T4234] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 79.929387][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.945298][ T4234] em28xx 4-1:0.89: analog set to bulk mode. [ 79.979306][ T1111] em28xx 4-1:0.89: Registering V4L2 extension [ 80.011039][ T4234] usb 4-1: USB disconnect, device number 3 [ 80.020128][ T4234] em28xx 4-1:0.89: Disconnecting em28xx [ 80.058381][ T1111] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 80.077199][ T1111] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 80.086104][ T1111] em28xx 4-1:0.89: No AC97 audio processor [ 80.104051][ T1111] usb 4-1: Decoder not found [ 80.115680][ T1111] em28xx 4-1:0.89: failed to create media graph [ 80.125830][ T1111] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 80.153159][ T1111] em28xx 4-1:0.89: Registering snapshot button... [ 80.182925][ T1111] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 80.204378][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 80.216150][ T1111] em28xx 4-1:0.89: Remote control support is not available for this card. [ 80.234336][ T4234] em28xx 4-1:0.89: Closing input extension [ 80.252565][ T4234] em28xx 4-1:0.89: Deregistering snapshot button [ 80.289738][ T7] usb 2-1: USB disconnect, device number 3 [ 80.324383][ T4234] em28xx 4-1:0.89: Freeing device [ 80.339673][ T4236] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.369228][ T4236] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.383274][ T4236] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.392858][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.555255][ T4341] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 80.620762][ T4341] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 80.629981][ T4341] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 80.659708][ T4341] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 80.684213][ T4341] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 80.698486][ T4341] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 80.723268][ T4341] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 80.741382][ T4341] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 80.749758][ T2304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.774152][ T4341] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 80.791072][ T4341] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 80.882833][ T4236] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 80.958806][ T4276] udevd[4276]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.999361][ T2304] usb 1-1: Using ep0 maxpacket: 8 [ 81.056700][ T4347] loop4: detected capacity change from 0 to 8192 [ 81.089788][ T4318] i2c i2c-1: unsupported multi-msg i2c transaction [ 81.127913][ T4236] usb 3-1: USB disconnect, device number 2 [ 81.159454][ T2304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.231603][ T4347] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 81.250138][ T2304] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 81.277840][ T2304] usb 1-1: config 0 has no interface number 0 [ 81.284819][ T4347] REISERFS (device loop4): using ordered data mode [ 81.304346][ T4347] reiserfs: using flush barriers [ 81.327259][ T4347] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.328880][ T2304] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 81.363630][ T4347] REISERFS (device loop4): checking transaction log (loop4) [ 81.408916][ T4347] REISERFS (device loop4): Using r5 hash to sort names [ 81.417331][ T4347] REISERFS (device loop4): using 3.5.x disk format [ 81.425450][ T4347] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 81.605900][ T2304] usb 1-1: config 0 interface 122 altsetting 187 has an invalid endpoint with address 0x95, skipping [ 81.638840][ T2304] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 91 [ 81.690807][ T2304] usb 1-1: config 0 interface 122 has no altsetting 0 [ 81.879492][ T2304] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 81.899036][ T2304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.929986][ T2304] usb 1-1: Product: syz [ 81.939520][ T2304] usb 1-1: Manufacturer: syz [ 81.944186][ T2304] usb 1-1: SerialNumber: syz [ 81.973762][ T2304] usb 1-1: config 0 descriptor?? [ 81.989673][ T4339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.013319][ T4339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.088845][ T4339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.410612][ T4339] program syz.0.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.530653][ T2304] pl2303 1-1:0.122: required endpoints missing [ 82.547910][ T2304] usb 1-1: USB disconnect, device number 3 [ 82.630541][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 82.665265][ T4389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.704374][ T4388] autofs4:pid:4388:autofs_fill_super: called with bogus options [ 82.744938][ T4391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.33'. [ 83.159559][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.580484][ T4398] loop1: detected capacity change from 0 to 8192 [ 83.593535][ T7] usb 4-1: config 0 has no interfaces? [ 83.646644][ T4400] device ipip0 entered promiscuous mode [ 83.730180][ T4398] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 83.749542][ T4398] REISERFS (device loop1): using ordered data mode [ 83.756084][ T4398] reiserfs: using flush barriers [ 83.780095][ T7] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 83.787300][ T4398] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.806977][ T4398] REISERFS (device loop1): checking transaction log (loop1) [ 83.817314][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.827314][ T4398] REISERFS (device loop1): Using r5 hash to sort names [ 83.837706][ T4398] REISERFS (device loop1): using 3.5.x disk format [ 83.851994][ T4398] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 83.882692][ T7] usb 4-1: Product: syz [ 83.886932][ T7] usb 4-1: Manufacturer: syz [ 83.920134][ T7] usb 4-1: SerialNumber: syz [ 83.948000][ T7] usb 4-1: config 0 descriptor?? [ 84.029167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.062656][ T4405] x_tables: duplicate underflow at hook 4 [ 84.463714][ T4200] usb 4-1: USB disconnect, device number 4 [ 84.604661][ T4408] net_ratelimit: 1992 callbacks suppressed [ 84.604678][ T4408] sctp: failed to load transform for md5: -2 [ 84.787823][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.863581][ T2304] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.039292][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 85.159459][ T4234] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.178304][ T4234] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.205203][ T4234] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.244112][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.254383][ T2304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.273935][ T2304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.399483][ T2304] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.409101][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.417206][ T2304] usb 2-1: SerialNumber: syz [ 85.609251][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.782540][ T4234] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 85.980624][ T1111] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 85.992305][ T4405] i2c i2c-1: unsupported multi-msg i2c transaction [ 85.999220][ T1111] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 86.010501][ T4234] usb 3-1: USB disconnect, device number 3 [ 86.159511][ T1111] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 86.213483][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.318718][ T1111] usb 1-1: Product: syz [ 86.329314][ T1111] usb 1-1: Manufacturer: syz [ 86.334274][ T1111] usb 1-1: SerialNumber: syz [ 86.355517][ T1111] usb 1-1: config 0 descriptor?? [ 86.402358][ T1111] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 86.593440][ T2304] usb 2-1: 0:2 : does not exist [ 86.665598][ T2304] usb 2-1: USB disconnect, device number 4 [ 86.697027][ T4444] netlink: 'syz.2.48': attribute type 49 has an invalid length. [ 86.718247][ T4276] udevd[4276]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.766559][ T4444] netlink: 'syz.2.48': attribute type 49 has an invalid length. [ 86.845017][ T13] cfg80211: failed to load regulatory.db [ 87.035454][ T4236] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 87.129282][ T2304] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.292822][ T1111] usb 1-1: USB disconnect, device number 4 [ 87.379287][ T2304] usb 2-1: Using ep0 maxpacket: 8 [ 87.476109][ T4236] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 87.504845][ T4236] usb 3-1: config 0 has no interface number 0 [ 87.525198][ T4236] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 87.539484][ T2304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.587970][ T4236] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 87.619242][ T4236] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 87.629968][ T2304] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 87.649879][ T2304] usb 2-1: config 117 has no interface number 0 [ 87.656230][ T2304] usb 2-1: config 117 interface 163 has no altsetting 0 [ 87.659566][ T4236] usb 3-1: config 0 interface 11 has no altsetting 0 [ 87.708228][ T4236] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 87.738872][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.795325][ T4236] usb 3-1: config 0 descriptor?? [ 87.840344][ T4446] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.857942][ T2304] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 87.869454][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.877505][ T2304] usb 2-1: Product: syz [ 87.882293][ T2304] usb 2-1: Manufacturer: syz [ 87.886946][ T2304] usb 2-1: SerialNumber: syz [ 87.901178][ T4236] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 87.937872][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 87.983174][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 88.001886][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 88.022174][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 88.059546][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 88.067683][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 88.098175][ T4236] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 88.112827][ T4444] loop8: detected capacity change from 0 to 7 [ 88.141252][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 88.151110][ T4444] Dev loop8: unable to read RDB block 7 [ 88.151441][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 88.176189][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 88.183629][ T4444] loop8: unable to read partition table [ 88.196961][ T4444] loop8: partition table beyond EOD, truncated [ 88.227593][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 88.245418][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 88.257157][ T4236] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 88.273768][ T4236] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 88.278490][ T4444] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 88.439327][ T4200] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.562298][ T4236] usb 3-1: USB disconnect, device number 4 [ 88.588636][ T4236] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 88.699367][ T4200] usb 1-1: Using ep0 maxpacket: 8 [ 88.706348][ T4236] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 88.736985][ T4236] keyspan 3-1:0.11: device disconnected [ 88.841646][ T4200] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.878385][ T4200] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 88.894685][ T4200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.913300][ T4200] usb 1-1: config 0 descriptor?? [ 88.923629][ T7] usb 2-1: USB disconnect, device number 5 [ 88.938916][ T7] f81534a_ctrl 2-1:117.163: failed to set register 0x116: -19 [ 88.947166][ T7] f81534a_ctrl 2-1:117.163: failed to enable ports: -19 [ 88.961606][ T4200] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 89.269318][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.279220][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.519386][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 89.532786][ T4478] x_tables: duplicate underflow at hook 4 [ 89.539305][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 89.649331][ T1111] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.669218][ T1111] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.669659][ T4236] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.696642][ T4236] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.809368][ T1111] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.818588][ T1111] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 89.829414][ T1111] usb 5-1: Product: syz [ 89.833682][ T1111] usb 5-1: Manufacturer: syz [ 89.859479][ T4236] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.868614][ T4236] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 89.877328][ T4250] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.892836][ T4236] usb 3-1: Product: syz [ 89.897201][ T4236] usb 3-1: Manufacturer: syz [ 89.902448][ T1111] hub 5-1:4.0: USB hub found [ 89.958351][ T4236] hub 3-1:4.0: USB hub found [ 90.119361][ T1111] hub 5-1:4.0: 2 ports detected [ 90.166692][ T4236] hub 3-1:4.0: 2 ports detected [ 90.171953][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 90.259464][ T4200] gspca_vc032x: reg_w err -71 [ 90.264384][ T4200] vc032x: probe of 1-1:0.0 failed with error -71 [ 90.283701][ T4200] usb 1-1: USB disconnect, device number 5 [ 90.310753][ T4250] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.333112][ T4250] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.353793][ T4250] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.371054][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.880557][ T4250] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 91.076859][ T4236] usb 3-1: USB disconnect, device number 5 [ 91.085663][ T4478] i2c i2c-1: unsupported multi-msg i2c transaction [ 91.136950][ T1111] usb 2-1: USB disconnect, device number 6 [ 91.549387][ T23] hub 5-1:4.0: activate --> -90 [ 91.661961][ T4489] loop3: detected capacity change from 0 to 8192 [ 91.751410][ T2304] usb 5-1: USB disconnect, device number 4 [ 91.769614][ T23] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 91.833671][ T4489] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 91.859273][ T4489] REISERFS (device loop3): using ordered data mode [ 91.865854][ T4489] reiserfs: using flush barriers [ 91.880408][ T4489] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.899734][ T4489] REISERFS (device loop3): checking transaction log (loop3) [ 91.968039][ T4489] REISERFS (device loop3): Using r5 hash to sort names [ 91.990844][ T4489] REISERFS (device loop3): using 3.5.x disk format [ 92.003372][ T4489] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.016019][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 92.321282][ T4498] device macvlan0 entered promiscuous mode [ 92.388632][ T4498] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 92.729502][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 92.751635][ T4193] Bluetooth: hci3: Unknown advertising packet type: 0xe3d5 [ 92.751869][ T4193] ================================================================== [ 92.767884][ T4193] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 92.775760][ T4193] Read of size 1 at addr ffff88807e7a0402 by task kworker/u5:2/4193 [ 92.783775][ T4193] [ 92.786156][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 92.793912][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.804094][ T4193] Workqueue: hci3 hci_rx_work [ 92.808842][ T4193] Call Trace: [ 92.812154][ T4193] [ 92.815098][ T4193] dump_stack_lvl+0x188/0x250 [ 92.819891][ T4193] ? show_regs_print_info+0x20/0x20 [ 92.825105][ T4193] ? load_image+0x400/0x400 [ 92.829739][ T4193] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 92.835413][ T4193] print_address_description+0x60/0x2d0 [ 92.841154][ T4193] ? hci_le_meta_evt+0x1324/0x3c90 [ 92.846378][ T4193] kasan_report+0xdf/0x130 [ 92.851061][ T4193] ? hci_le_meta_evt+0x1324/0x3c90 [ 92.856233][ T4193] hci_le_meta_evt+0x1324/0x3c90 [ 92.861483][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 92.868041][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 92.873813][ T4193] ? mark_lock+0x94/0x320 [ 92.878160][ T4193] ? mutex_unlock+0x10/0x10 [ 92.882696][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 92.888728][ T4193] ? lock_chain_count+0x20/0x20 [ 92.893844][ T4193] ? __rwlock_init+0x140/0x140 [ 92.898638][ T4193] hci_event_packet+0xe48/0x1370 [ 92.903606][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 92.908828][ T4193] ? rcu_lock_release+0x20/0x20 [ 92.913717][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 92.918937][ T4193] hci_rx_work+0x255/0xa10 [ 92.923385][ T4193] process_one_work+0x85f/0x1010 [ 92.928354][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 92.933999][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 92.939361][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.944526][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 92.950121][ T4193] ? wq_worker_running+0x97/0x170 [ 92.955184][ T4193] worker_thread+0xaa6/0x1290 [ 92.959987][ T4193] kthread+0x436/0x520 [ 92.964177][ T4193] ? rcu_lock_release+0x20/0x20 [ 92.969042][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 92.973754][ T4193] ret_from_fork+0x1f/0x30 [ 92.978313][ T4193] [ 92.981348][ T4193] [ 92.983688][ T4193] Allocated by task 4510: [ 92.988122][ T4193] __kasan_kmalloc+0xb5/0xf0 [ 92.992768][ T4193] __alloc_skb+0x22c/0x750 [ 92.997435][ T4193] vhci_write+0xbc/0x450 [ 93.001817][ T4193] vfs_write+0x745/0xd60 [ 93.006087][ T4193] ksys_write+0x152/0x260 [ 93.010666][ T4193] do_syscall_64+0x4c/0xa0 [ 93.015238][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.021160][ T4193] [ 93.023496][ T4193] The buggy address belongs to the object at ffff88807e7a0000 [ 93.023496][ T4193] which belongs to the cache kmalloc-1k of size 1024 [ 93.037873][ T4193] The buggy address is located 2 bytes to the right of [ 93.037873][ T4193] 1024-byte region [ffff88807e7a0000, ffff88807e7a0400) [ 93.051789][ T4193] The buggy address belongs to the page: [ 93.057452][ T4193] page:ffffea0001f9e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e7a0 [ 93.067881][ T4193] head:ffffea0001f9e800 order:3 compound_mapcount:0 compound_pincount:0 [ 93.076415][ T4193] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.084604][ T4193] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 93.093479][ T4193] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 93.102070][ T4193] page dumped because: kasan: bad access detected [ 93.108506][ T4193] page_owner tracks the page as allocated [ 93.114247][ T4193] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 144, ts 76651783938, free_ts 76440530133 [ 93.132774][ T4193] get_page_from_freelist+0x1bbd/0x1ca0 [ 93.138344][ T4193] __alloc_pages+0x1ee/0x480 [ 93.142956][ T4193] new_slab+0xc0/0x4b0 [ 93.147162][ T4193] ___slab_alloc+0x80a/0xdd0 [ 93.151768][ T4193] __kmalloc+0x1cd/0x330 [ 93.156027][ T4193] ieee802_11_parse_elems_crc+0xb3/0x10b0 [ 93.161856][ T4193] ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 93.168152][ T4193] ieee80211_iface_work+0x70e/0xc60 [ 93.173513][ T4193] cfg80211_wiphy_work+0x221/0x260 [ 93.178645][ T4193] process_one_work+0x85f/0x1010 [ 93.184260][ T4193] worker_thread+0xaa6/0x1290 [ 93.189203][ T4193] kthread+0x436/0x520 [ 93.193413][ T4193] ret_from_fork+0x1f/0x30 [ 93.197963][ T4193] page last free stack trace: [ 93.202650][ T4193] free_unref_page_prepare+0x637/0x6c0 [ 93.208128][ T4193] free_unref_page+0x8f/0x2a0 [ 93.212815][ T4193] __unfreeze_partials+0x1a5/0x200 [ 93.217930][ T4193] put_cpu_partial+0x12d/0x190 [ 93.223060][ T4193] qlist_free_all+0x35/0x90 [ 93.227586][ T4193] kasan_quarantine_reduce+0x150/0x160 [ 93.233055][ T4193] __kasan_slab_alloc+0x2f/0xd0 [ 93.237930][ T4193] slab_post_alloc_hook+0x4c/0x380 [ 93.243071][ T4193] __kmalloc+0x127/0x330 [ 93.247334][ T4193] tomoyo_realpath_from_path+0x118/0x610 [ 93.252977][ T4193] tomoyo_path_number_perm+0x242/0x660 [ 93.258457][ T4193] security_file_ioctl+0x6c/0xa0 [ 93.263530][ T4193] __se_sys_ioctl+0x48/0x170 [ 93.268226][ T4193] do_syscall_64+0x4c/0xa0 [ 93.272685][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.278594][ T4193] [ 93.280928][ T4193] Memory state around the buggy address: [ 93.286564][ T4193] ffff88807e7a0300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.294955][ T4193] ffff88807e7a0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.303165][ T4193] >ffff88807e7a0400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.311232][ T4193] ^ [ 93.315319][ T4193] ffff88807e7a0480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.323729][ T4193] ffff88807e7a0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.332150][ T4193] ================================================================== [ 93.341452][ T4193] Disabling lock debugging due to kernel taint [ 93.347820][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.357351][ T4193] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.364654][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 93.373623][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.383938][ T4193] Workqueue: hci3 hci_rx_work [ 93.388671][ T4193] Call Trace: [ 93.392002][ T4193] [ 93.394953][ T4193] dump_stack_lvl+0x188/0x250 [ 93.399653][ T4193] ? show_regs_print_info+0x20/0x20 [ 93.404993][ T4193] ? load_image+0x400/0x400 [ 93.409852][ T4193] panic+0x2e5/0x810 [ 93.413775][ T4193] ? bpf_jit_dump+0xd0/0xd0 [ 93.418382][ T4193] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 93.424387][ T4193] ? _raw_spin_unlock+0x40/0x40 [ 93.429269][ T4193] ? hci_le_meta_evt+0x1324/0x3c90 [ 93.434509][ T4193] check_panic_on_warn+0x80/0xa0 [ 93.439676][ T4193] ? hci_le_meta_evt+0x1324/0x3c90 [ 93.444915][ T4193] end_report+0x6d/0xf0 [ 93.449097][ T4193] kasan_report+0x102/0x130 [ 93.453856][ T4193] ? hci_le_meta_evt+0x1324/0x3c90 [ 93.458995][ T4193] hci_le_meta_evt+0x1324/0x3c90 [ 93.463951][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 93.470242][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 93.476103][ T4193] ? mark_lock+0x94/0x320 [ 93.480575][ T4193] ? mutex_unlock+0x10/0x10 [ 93.485231][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 93.491341][ T4193] ? lock_chain_count+0x20/0x20 [ 93.496336][ T4193] ? __rwlock_init+0x140/0x140 [ 93.501403][ T4193] hci_event_packet+0xe48/0x1370 [ 93.507005][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 93.512772][ T4193] ? rcu_lock_release+0x20/0x20 [ 93.518485][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 93.523886][ T4193] hci_rx_work+0x255/0xa10 [ 93.528323][ T4193] process_one_work+0x85f/0x1010 [ 93.533306][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 93.539070][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 93.544590][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.549671][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.555412][ T4193] ? wq_worker_running+0x97/0x170 [ 93.560457][ T4193] worker_thread+0xaa6/0x1290 [ 93.565183][ T4193] kthread+0x436/0x520 [ 93.569264][ T4193] ? rcu_lock_release+0x20/0x20 [ 93.574322][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 93.579086][ T4193] ret_from_fork+0x1f/0x30 [ 93.583616][ T4193] [ 93.586910][ T4193] Kernel Offset: disabled [ 93.591258][ T4193] Rebooting in 86400 seconds..