last executing test programs: 10.988005313s ago: executing program 2 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0x9, 0x8, 0x9, '\x00', 0x10000}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0xb0002, 0x0, {[0x7, 0xffffffff, 0x7fff, 0x0, 0x5, 0x9, 0x9, 0x70]}}) 10.835117156s ago: executing program 1 (id=101): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = accept$netrom(r1, 0x0, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000540)="47514eb08c92c02d212cd364c8625534f8b6c0caad48026ee3c7e6f1baca588400d087c7c23b9f6f28e4957de71187f456cb38f9fa555bee065bb5ce645062439e5ca318bc26f8b7a3624302a705d725f2d117065eb2379b77d9d7e6142358a20f0aad0624f36292044969f5be6a55bbb95d93b0a8890dbd7c3a451a125dc82af8", 0x81}, {&(0x7f0000000780)="ed08a8635db57d8386847c132dd9f7e66ec779549f2f96a74cbd79b5a7645c608ed1350a80e008a47e28e81b6ae2f6947ea7c335fd19fa3f67fa95ae0e7f2e20ee63f96313f25e08a2d16f00777a05e192aa008c0b60655835af5d092a5673a510691a44f68f18b4b5e0b2bd", 0x6c}], 0x2) 10.695985809s ago: executing program 2 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 10.396799304s ago: executing program 3 (id=104): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800"]) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 10.338851416s ago: executing program 4 (id=105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 10.055425331s ago: executing program 4 (id=106): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x73}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha3-256-ce\x00'}}, 0x0, &(0x7f0000000480)=""/115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.367782554s ago: executing program 1 (id=107): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000001d000/0x4000)=nil, &(0x7f0000783000/0x2000)=nil, &(0x7f00005ba000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00001d8000/0x3000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.247933536s ago: executing program 4 (id=108): r0 = semget$private(0x0, 0x6, 0x3b1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2604c0f4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000006480)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60de73005d12000800103afffe8000000000000000000000000000bbff020000000000000400000000000001860090780800000000000000"], 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semtimedop(r0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x0, 0xba10, 0x1000}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) 9.115021749s ago: executing program 1 (id=109): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e02025d60270009589f0200020200010905", @ANYBLOB="9e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.795105874s ago: executing program 4 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 7.684460446s ago: executing program 4 (id=113): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202aa8cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="003006"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.329805351s ago: executing program 3 (id=116): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000001940), 0x0) syz_extract_tcp_res(&(0x7f0000000340), 0xffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r5 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@rand_addr=0x64010102, @rand_addr=0x64010102}, 0xc) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 5.656522984s ago: executing program 3 (id=117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x20202, 0xa4) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4c"], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 5.583978585s ago: executing program 1 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x80003, 0x0, {[0x1, 0x8001, 0x8, 0x0, 0x6, 0x7, 0x9, 0x8]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.533165345s ago: executing program 1 (id=121): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x80000000000001c, 0x0, 0x0) 4.220040991s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.219801981s ago: executing program 4 (id=123): socket$igmp(0x2, 0x3, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x10000, 0x1, 0x6e}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.302154958s ago: executing program 1 (id=124): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="91") bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000005000000050000"], 0x50) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x44005) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) 3.073279403s ago: executing program 0 (id=125): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="21b617ac16c532419cc66e260c57178addf1282f81c445419b2409d67d19ea852842d3f1fa84823cd014c4fdc60072ffc3abe110b635419530e49103b82e5b22c876ff2e5a476a3b8ae3210ab9deda84bcbc1e9b7f40c8eaee9d02", 0x5b}, {&(0x7f0000000300)="a8449f6a17a241b2cb5e75a9092d02f90f26003060b8c492b5b0bc502fd26f44cd1f0c6ff81d047cd5b4b1284cbcfffa2f9a480b000401f4785180c70a8e808588eb8e31b63ed6a8e780cc22a1227980c8add782fe2043b38fb36bd8af162ca5b7c57eb848da3c70", 0x68}, {&(0x7f0000001300)="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", 0x335}, {&(0x7f0000000380)="60cd", 0x2}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x800) 2.837984637s ago: executing program 0 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 2.787971548s ago: executing program 2 (id=127): sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000080)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.603648071s ago: executing program 2 (id=128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xa8c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_matchall={{0xd}, {0x268, 0x2, [@TCA_MATCHALL_ACT={0x244, 0x2, [@m_bpf={0xf4, 0x1c, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x3, 0x4, 0x1, 0x9}, {0x242, 0x40, 0x4, 0x72d}, {0x9, 0x7f, 0x4}, {0x0, 0x0, 0x3, 0x4}, {0x4, 0x6, 0x3, 0xe863}, {0x6, 0xda, 0xbb, 0x79}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x1000, 0x7, 0x2, 0x8}}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x4a4, 0x1, 0x2, 0x6}}]}, {0x51, 0x6, "f0e90131deb1da2b1a1d05ca49b389b921408cb44db31f15ad3900c52ed051ba1acf392af40c00e55a930753b2c3e1fb05a0f8418f08aac14ae02ec4701e8262fbadb9a5b943a584698ecf33b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xd4, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xa1, 0x6, "86e580ccb8ffe9a0c77dacc67f32b27d9283876fa2e6831c880522cbe6e61216232b5cb111cd5f5097a9e00275c575eb0799622ca6ff98438ea4ab321b298232737ce1965d450ccc64ec418aaf72b21704fb96d8f851b5276916ff7c04a60c538f26c8c0b8d58c9d0849af9ecc35cac23ce26f3e703b3aa33c962311a3adeb857395088901b07ccf50acad9c55e3b6943b1c70b01ef555a242ecbc216e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_csum={0x78, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x43, 0x54, 0x20000000, 0x10001, 0x79}, 0x3b}}]}, {0x2d, 0x6, "e3b8da1a3d08f806d4032749f5f1ecac7e009f1d5a330d961fcebd3ebf208f1e0fdf48fdb26287fe51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x3}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x7d8, 0x2, [@TCA_U32_SEL={0x534, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2, [{0x6, 0x2, 0x7, 0x2}, {0x43, 0xfffffff7, 0x0, 0x6}, {0xe55, 0x1, 0xe000000, 0xa}, {0x1, 0xcf, 0x0, 0xf}, {0x7f, 0x7, 0x3, 0x1}, {0x8, 0x5, 0x3, 0xfff}, {0x9208, 0x87, 0x1, 0x2}, {0xffff, 0x5924, 0x6, 0x3}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x1, 0x8}, {0x3, 0x3, 0x5, 0xfff}, {0x9, 0xe, 0xfb, 0x9}, {0x8, 0x7, 0x2, 0x8}, {0xfffffffa, 0x10, 0xb, 0x5}, {0xc0a, 0xf, 0x6, 0x1}, {0x400000, 0x7fff, 0x2, 0x1}, {0xae, 0x2a, 0x2, 0x4}, {0x7, 0x4, 0xff, 0x3ff}, {0x6, 0x10001, 0x51, 0xe92}, {0x0, 0x4, 0x3, 0x7fff}, {0x40, 0x2e5, 0x6, 0x5}, {0xd, 0xffff, 0xfffffff7, 0x3}, {0x8, 0x8, 0x8, 0x4}, {0xf4, 0x3, 0x1dd, 0x9}, {0x4, 0x80000000, 0x8000, 0x2}, {0x2, 0x9, 0x776, 0x9}, {0x0, 0x1, 0x6f8, 0xffffffff}, {0x8, 0x7147, 0x9, 0x2}, {0x2, 0x9, 0x1, 0x3}, {0x0, 0x1, 0x2, 0x9}, {0x6, 0x2, 0x7fffffff, 0x9}, {0x6, 0x2, 0x8, 0x8}, {0x7, 0x1, 0x1ff, 0xbd}, {0x7, 0x6, 0x10000, 0x3ff}, {0x400, 0x81, 0xb4c767, 0xe10f}, {0x3, 0xfffff54f, 0x1, 0x10}, {0x0, 0x5, 0x784}, {0x5, 0x101, 0x7}, {0x7, 0x4, 0x6, 0x4}, {0x36c, 0x8, 0x2, 0x9}, {0x3, 0x80000000, 0x6, 0xffffffff}, {0x7, 0x80, 0x4, 0xe}, {0x3, 0xffffff01, 0x5, 0x7fff}, {0x7, 0x800, 0x0, 0x401}, {0x6, 0x7, 0x4f4, 0x40}, {0x4, 0x7ff, 0xb}, {0x1000, 0xa2, 0x0, 0x9}, {0x0, 0x0, 0x6, 0x7}, {0xa0, 0x8, 0x380, 0x800}, {0x101, 0x40004, 0x80, 0x1000}, {0x1, 0x100, 0x1, 0x10001}, {0x6, 0x7ff, 0x9, 0x1}, {0x0, 0x8, 0x7, 0x6}, {0x1, 0xe, 0x8, 0x80000000}, {0x39, 0x2, 0x5, 0x7}, {0xfffffffd, 0x3, 0x538, 0x3}, {0x7, 0x10001, 0x6, 0xcf}, {0x6, 0xa000000, 0x3, 0x9}, {0x1, 0x19ba, 0x5c23c64b, 0x7}, {0x0, 0x7, 0x5, 0xa}, {0xa, 0x4, 0x841, 0x8000}, {0xf, 0x1, 0xf, 0x4}, {0x4, 0x400, 0x8, 0x5}, {0x6, 0x5537, 0x48, 0x1}, {0x6, 0x6, 0x3, 0x54}, {0x3ff, 0x7, 0x5, 0xfffff9a8}, {0x2000, 0xfffffff0, 0x2, 0x2}, {0x81, 0xfffffff7, 0x29fd, 0x7}, {0x3, 0x6ffd, 0x3, 0x3}, {0x1, 0xfffff8c0, 0x3, 0x7ff}, {0x2, 0x1, 0x3, 0x5}, {0x7, 0x8, 0xd7, 0x80000001}, {0x6, 0x2, 0x1311fca0, 0x6}, {0x7f, 0x6, 0x0, 0x1}, {0x1200000, 0xffffb708, 0x9, 0xb}, {0x14d, 0x2, 0x9, 0x200}, {0x4, 0xfff, 0x7fff, 0x7}, {0x9c, 0x0, 0x37}, {0x2, 0xf, 0x200, 0xd}, {0x7, 0x43f, 0xfffffff7, 0x3}, {0x3, 0x2, 0x7, 0x8}, {0x7, 0x3, 0x9, 0x4cd}]}}, @TCA_U32_ACT={0x2a0, 0x7, [@m_csum={0x100, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0x8, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7a, 0x10000000, 0x5, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0x3, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x4, 0x9, 0xb}, 0x77}}]}, {0x29, 0x6, "fd94c06764f37d74e02e47d2112b5242809e2419a3cf7f21e0a41fd7d83b6df9e9c285b3a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x138, 0x1a, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="dad6d78a2b85"}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x2, 0x2}}}]}, {0xd1, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e013426759c817a1bd718849baa0b9d47756ce75b26f113f5bfe81ebbf0e9402c154843e8d984f48c206498de65a138cb2d060aa964127c922df85b876a47f2b35d8bc8e3e0ce3e453511ffd2a310dcb2eae4282c44146c584cc43344d5f1ea9b4df4c64d84ecff6471260be3505bc473c79bf28b98681cf5a02aa5bc1b6f0262ae027793ba124918980b15c3553c551216ea72564c82e90de44c00d59ee2172f0b1b766f5a2ab4a1acdfb8437a423a10e5be87bc5ef9d696fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x64, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x3a, 0x6, "9528bdfc9d60e78490c2489a54eeb7d4e02a3e269f62d7006763790df25751bbdf32aa85646a039ca3780aa3e4509014382bfde5b07f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xa8c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.512634373s ago: executing program 0 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.379945365s ago: executing program 2 (id=130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.112250411s ago: executing program 2 (id=131): epoll_create1(0x0) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 2.025357042s ago: executing program 0 (id=132): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 1.940012524s ago: executing program 3 (id=133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x7f, 0xfffffffa, 0x2, 0x2}, &(0x7f0000000080)=0x14) 1.854053045s ago: executing program 0 (id=134): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x80000000000001c, 0x0, 0x0) 1.848082815s ago: executing program 3 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x7006000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 0s ago: executing program 3 (id=136): socket$kcm(0x10, 0x2, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000003a00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 65.265929][ T4171] cgroup: Unknown subsys name 'net' [ 65.401725][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.873075][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.312335][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 68.427856][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.522051][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.548265][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.557409][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.586595][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.594313][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.602595][ T4181] device bridge_slave_0 entered promiscuous mode [ 68.615139][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.622282][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.630248][ T4181] device bridge_slave_1 entered promiscuous mode [ 68.658304][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.665583][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.673911][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.686570][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.693733][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.701769][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.768527][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.799438][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.810625][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.834437][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.865628][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.873592][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.881452][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.920347][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.927930][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.936346][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.951212][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.958923][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.966866][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.977697][ T4181] team0: Port device team_slave_0 added [ 68.984183][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.991287][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.999574][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.017852][ T4184] team0: Port device team_slave_0 added [ 69.024179][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.031286][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.039575][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.056235][ T4181] team0: Port device team_slave_1 added [ 69.062443][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.069537][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.077846][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.095182][ T4184] team0: Port device team_slave_1 added [ 69.104138][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.144701][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.156089][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.190532][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.200615][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.207765][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.234433][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.255638][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.262778][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.289202][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.302185][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.326931][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.334158][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.360310][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.384234][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.391230][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.417579][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.430698][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.458767][ T4183] team0: Port device team_slave_0 added [ 69.471894][ T4182] team0: Port device team_slave_0 added [ 69.496233][ T4183] team0: Port device team_slave_1 added [ 69.513554][ T4182] team0: Port device team_slave_1 added [ 69.528617][ T4186] team0: Port device team_slave_0 added [ 69.536943][ T4186] team0: Port device team_slave_1 added [ 69.568794][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.575980][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.612860][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.619962][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.646229][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.665561][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.672699][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.698827][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.713002][ T4181] device hsr_slave_0 entered promiscuous mode [ 69.720163][ T4181] device hsr_slave_1 entered promiscuous mode [ 69.727455][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.735610][ T4181] Cannot create hsr debugfs directory [ 69.749907][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.757059][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783633][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.795377][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.802715][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.828663][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.840488][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.847796][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.874128][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.897841][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.905021][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.931843][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.027008][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.035058][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.042584][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 70.044653][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.049506][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 70.057137][ T4183] Cannot create hsr debugfs directory [ 70.068891][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 70.075070][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 70.081125][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 70.091388][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.098303][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.106192][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.114040][ T4182] Cannot create hsr debugfs directory [ 70.162786][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.169618][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.176767][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.184497][ T4186] Cannot create hsr debugfs directory [ 70.462524][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.479740][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.495470][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.504809][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.549456][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.559079][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.577649][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.590267][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.667470][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.680263][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.691073][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.714796][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.758585][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.797800][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.815117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.825638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.860200][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.870494][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.878023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.888422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.901384][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.925174][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.934885][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.946393][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.957344][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.967026][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.974409][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.985650][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.996029][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.005187][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012322][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.020572][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.029599][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.038233][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.045518][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.054307][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.083699][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.097124][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.107051][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.115712][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.125679][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.135320][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.145007][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.152212][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.182340][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.191207][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.203285][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.215567][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.225347][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.241257][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.253955][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.265137][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.279697][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.289131][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.305831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.338581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.351156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.360642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.369392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.379796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.395987][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402735][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.405431][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.432639][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.441340][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.454132][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.470052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.482134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.513535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.522712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.533717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.544154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.562250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.571148][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.578359][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.589529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.598389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.607742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.637124][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.658956][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.702496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.711183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.720363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.730586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.739346][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.746490][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.755395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.764775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.780751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.790791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.800288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.821678][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.840786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.851420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.860988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.870341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.881089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.890165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.905291][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.921371][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.933866][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.956998][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.964337][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.975093][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.984104][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.993414][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.009690][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.035578][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.073530][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.087469][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.097453][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.119998][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.122126][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 72.130111][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.141681][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 72.149995][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.157820][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 72.160789][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.164477][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 72.171357][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.178042][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 72.223946][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.232997][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.248234][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.257824][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.264981][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.279035][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.287989][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.297124][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.304263][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.313125][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.322246][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.331138][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.340076][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.349495][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.356627][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.364851][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.373647][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.387181][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.396149][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.404537][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.430362][ T4181] device veth0_vlan entered promiscuous mode [ 72.442603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.452280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.463237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.472763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.481428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.490543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.499417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.507739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.517991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.531392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.540938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.556130][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.563981][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.578393][ T4181] device veth1_vlan entered promiscuous mode [ 72.590391][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.608454][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.619380][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.631175][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.646836][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.655903][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.669876][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.679599][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.694907][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.704491][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.714068][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.767486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.779258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.790231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.799372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.843690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.852964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.862492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.871398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.888151][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.914163][ T4181] device veth0_macvtap entered promiscuous mode [ 72.932395][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.941150][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.952402][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.960699][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.970487][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.979247][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.988238][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.999086][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.011402][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.034873][ T4181] device veth1_macvtap entered promiscuous mode [ 73.045143][ T4183] device veth0_vlan entered promiscuous mode [ 73.063915][ T4184] device veth0_vlan entered promiscuous mode [ 73.073476][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.089901][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.098051][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.107911][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.115871][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.138761][ T4183] device veth1_vlan entered promiscuous mode [ 73.150322][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.176238][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.188442][ T4184] device veth1_vlan entered promiscuous mode [ 73.203474][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.213647][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.222783][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.232276][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.265953][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.279157][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.288826][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.298783][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.308798][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.318667][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.328205][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.352528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.362686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.374122][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.383546][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.394263][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.403699][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.433083][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.443596][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.453191][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.460693][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.470822][ T4184] device veth0_macvtap entered promiscuous mode [ 73.481717][ T4183] device veth0_macvtap entered promiscuous mode [ 73.505383][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.516211][ T4184] device veth1_macvtap entered promiscuous mode [ 73.534929][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.550029][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.570485][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.590010][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.599157][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.613592][ T4183] device veth1_macvtap entered promiscuous mode [ 73.627425][ T4182] device veth0_vlan entered promiscuous mode [ 73.693346][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.710884][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.723875][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.737494][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.751404][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.763876][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.773469][ T4182] device veth1_vlan entered promiscuous mode [ 73.783188][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793788][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.804126][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.815559][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.826637][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.838004][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.848068][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.859409][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.870739][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.880918][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.892063][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.902267][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.912873][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.927458][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.935788][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.944698][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.955589][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.965516][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.977078][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.986354][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.001086][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.010321][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.019906][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.052273][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.060292][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.099706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.108700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.120184][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.129317][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.138326][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147367][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.186194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.195449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.204108][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 74.210576][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 74.217782][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 74.232117][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 74.238239][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 74.248871][ T4182] device veth0_macvtap entered promiscuous mode [ 74.261923][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.270327][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.281353][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.319742][ T4182] device veth1_macvtap entered promiscuous mode [ 74.331955][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.363947][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.375735][ T4186] device veth0_vlan entered promiscuous mode [ 74.403972][ T4186] device veth1_vlan entered promiscuous mode [ 74.415246][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.424659][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.434274][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.443158][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.453701][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.462865][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.470750][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.497165][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.502038][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.522193][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.530713][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.538349][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.557226][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.568000][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.584737][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.597237][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.615071][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.629852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.639720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.648799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.649348][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.664304][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.685228][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.695981][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.706742][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.716661][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.727176][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.739752][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.762700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.773582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.782787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.810657][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.820569][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840785][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.856688][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.885858][ T4186] device veth0_macvtap entered promiscuous mode [ 74.905285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.929163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.955841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.972240][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.972293][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.975372][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.977774][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.977823][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.984930][ T4186] device veth1_macvtap entered promiscuous mode [ 74.989071][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.989818][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.045150][ T26] audit: type=1326 audit(1759593912.192:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd21083fec9 code=0x0 [ 75.056175][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.056199][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056209][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.056223][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056235][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.056248][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056259][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.056273][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.057757][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.093297][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.094043][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.105034][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.105057][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.105068][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.105082][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.105093][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.105107][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.105117][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.105129][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.106475][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.114129][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.114194][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.114220][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.114246][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.132302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.212947][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.212999][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.225018][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.281095][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.281150][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.283464][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.525069][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.525288][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.113348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.249133][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.249228][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.250645][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.272768][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 76.272814][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 76.280970][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.281067][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 76.281121][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 77.211553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 77.313991][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 77.314206][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.316876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 77.319509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.321518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.321816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.322085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.322873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 77.325269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 80.574108][ T4349] delete_channel: no stack [ 80.579919][ T4349] delete_channel: no stack [ 81.342819][ T4342] sctp: failed to load transform for md5: -2 [ 82.809751][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.313083][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 85.675960][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.521962][ T21] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 86.645465][ T4404] netlink: 156 bytes leftover after parsing attributes in process `syz.4.28'. [ 86.648754][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.657271][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 86.741820][ T21] usb 3-1: config 0 descriptor?? [ 86.755872][ T1335] cfg80211: failed to load regulatory.db [ 86.945194][ T21] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 87.015868][ T4414] kAFS: unable to lookup cell '\/' [ 87.911647][ T21] gspca_cpia1: usb_control_msg 01, error -71 [ 87.919550][ T21] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 87.983083][ T21] usb 3-1: USB disconnect, device number 2 [ 88.171612][ T4260] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.241647][ T4244] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.441653][ T4260] usb 4-1: Using ep0 maxpacket: 16 [ 88.564776][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 88.698110][ T4244] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 88.710735][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.738376][ T4244] usb 1-1: config 0 descriptor?? [ 88.783463][ T4260] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.818522][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.822605][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 88.828664][ T4260] usb 4-1: Product: syz [ 88.841895][ T4260] usb 4-1: Manufacturer: syz [ 88.846637][ T4260] usb 4-1: SerialNumber: syz [ 88.870168][ T4260] usb 4-1: config 0 descriptor?? [ 88.942839][ T4443] netlink: 316 bytes leftover after parsing attributes in process `syz.1.40'. [ 89.266113][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.551564][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 89.712631][ T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.755976][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.847092][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.878055][ T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.936522][ T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.963147][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.998354][ T26] audit: type=1326 audit(1759593927.142:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.024299][ T26] audit: type=1326 audit(1759593927.142:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.047360][ T26] audit: type=1326 audit(1759593927.142:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.080532][ T26] audit: type=1326 audit(1759593927.142:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.103478][ T26] audit: type=1326 audit(1759593927.142:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.130481][ T26] audit: type=1326 audit(1759593927.142:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.156165][ T26] audit: type=1326 audit(1759593927.142:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.178380][ T26] audit: type=1326 audit(1759593927.142:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.208881][ T4244] pegasus 1-1:0.0: can't reset MAC [ 90.217803][ T4244] pegasus: probe of 1-1:0.0 failed with error -5 [ 90.218787][ T26] audit: type=1326 audit(1759593927.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.240169][ T4244] usb 1-1: USB disconnect, device number 2 [ 90.254765][ T21] usb 3-1: GET_CAPABILITIES returned 0 [ 90.260307][ T21] usbtmc 3-1:16.0: can't read capabilities [ 90.281831][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.307201][ T26] audit: type=1326 audit(1759593927.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dffcb4ec9 code=0x7ffc0000 [ 90.471668][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.482212][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.491321][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.500586][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.509663][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.519186][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.528286][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.537488][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.546594][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.555663][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.564756][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.574091][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.583536][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.592755][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.601931][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 90.611013][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 90.628346][ T1335] usb 3-1: USB disconnect, device number 3 [ 90.691696][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 90.709650][ T4244] usb 4-1: USB disconnect, device number 2 [ 90.811773][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.822301][ T4236] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.833675][ T4236] usb 2-1: config 0 has no interface number 0 [ 90.836339][ T4466] netlink: 'syz.0.48': attribute type 27 has an invalid length. [ 90.840206][ T4236] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.849151][ T4466] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 90.868572][ T4466] netlink: 144 bytes leftover after parsing attributes in process `syz.0.48'. [ 91.182352][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.208757][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.218954][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.242161][ T4236] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 91.294607][ T21] usb 5-1: config 0 descriptor?? [ 91.301817][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.310576][ T4236] usb 2-1: Product: syz [ 91.315171][ T4236] usb 2-1: Manufacturer: syz [ 91.319936][ T4236] usb 2-1: SerialNumber: syz [ 91.399095][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 91.437566][ T4236] usb 2-1: config 0 descriptor?? [ 91.504373][ T4236] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 91.581318][ T4236] em28xx 2-1:0.132: Video interface 132 found: [ 91.594622][ T4474] syz.3.53 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.772030][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.811840][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.852090][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.021615][ T4260] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.091910][ T4236] em28xx 2-1:0.132: chip ID is em2800 [ 92.236650][ T21] pwc: recv_control_msg error -71 req 04 val 1300 [ 92.262715][ T21] pwc: recv_control_msg error -71 req 04 val 1400 [ 92.369720][ T21] pwc: recv_control_msg error -71 req 02 val 2000 [ 92.422403][ T21] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.445110][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.491443][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.531963][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.567809][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.582156][ T4236] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 92.817458][ T4236] em28xx 2-1:0.132: board has no eeprom [ 92.833170][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.852036][ T4260] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 92.869456][ T4260] usb 1-1: config 1 has no interface number 0 [ 92.884064][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.931835][ T4236] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 93.049542][ T4260] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 93.060459][ T4236] em28xx 2-1:0.132: analog set to bulk mode. [ 93.066745][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.077362][ T4236] usb 2-1: USB disconnect, device number 2 [ 93.084658][ T4260] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 93.095631][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.174900][ T4236] em28xx 2-1:0.132: Disconnecting em28xx [ 93.190864][ T4260] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.205335][ T21] pwc: Registered as video103. [ 93.224492][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 93.234115][ T4260] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.277040][ T21] usb 5-1: USB disconnect, device number 2 [ 93.309596][ T23] em28xx 2-1:0.132: Registering V4L2 extension [ 93.542588][ T4260] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 93.657150][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.889756][ T4260] usb 1-1: Product: syz [ 94.407722][ T4503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 94.414569][ T4503] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.442716][ T4260] usb 1-1: Manufacturer: syz [ 94.447611][ T4260] usb 1-1: SerialNumber: syz [ 94.465237][ T4503] vhci_hcd vhci_hcd.0: Device attached [ 94.471950][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.479346][ T4505] vhci_hcd: connection closed [ 94.484103][ T4468] vhci_hcd: stop threads [ 94.512783][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.273429][ T4468] vhci_hcd: release socket [ 95.340383][ T23] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 95.351921][ T23] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 95.359266][ T23] em28xx 2-1:0.132: No AC97 audio processor [ 95.365901][ T4468] vhci_hcd: disconnect device [ 95.370614][ T23] usb 2-1: Decoder not found [ 95.375505][ T23] em28xx 2-1:0.132: failed to create media graph [ 95.382673][ T23] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 95.391694][ T4260] usb 1-1: can't set config #1, error -71 [ 95.411618][ T21] usb 38-1: enqueue for inactive port 0 [ 95.422518][ T4260] usb 1-1: USB disconnect, device number 3 [ 95.443226][ T23] em28xx 2-1:0.132: Remote control support is not available for this card. [ 95.486210][ T4236] em28xx 2-1:0.132: Closing input extension [ 95.542437][ T4236] em28xx 2-1:0.132: Freeing device [ 96.529144][ T4255] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.702557][ T21] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 96.711052][ T21] usb usb38-port1: attempt power cycle [ 97.061794][ T21] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 97.317478][ T4255] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 97.331508][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.442209][ T21] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 97.448020][ T4255] usb 4-1: config 0 descriptor?? [ 97.450743][ T21] usb usb38-port1: unable to enumerate USB device [ 98.583383][ T4584] capability: warning: `syz.0.83' uses 32-bit capabilities (legacy support in use) [ 98.625470][ T4255] pegasus: probe of 4-1:0.0 failed with error -71 [ 98.651997][ T1335] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.690567][ T4255] usb 4-1: USB disconnect, device number 3 [ 99.801852][ T4596] [U] 8C*s2>T8x:hFa6_)U f o5>mH.XO03KG*T½F?@DÛ\^]T)<7]5Pn;̵4^UKq]km+ DNG"V2IJ֍-¨V(> [ 99.820136][ T4596] [U] hVv<W7i?Z9 #ohŐ*Q-68M'ֲs/w̮AQX'-;eyB̕E Ki"oU`?U [ 99.841459][ T4596] [U] HxhTi=? [ 99.845718][ T4596] [U] yoG7O [ 99.848948][ T4596] [U] SY) [ 99.941710][ T1335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.975220][ T1335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.018173][ T1335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.067035][ T1335] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.118275][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.154964][ T4596] [U] 8 [ 100.169122][ T1335] usb 5-1: config 0 descriptor?? [ 100.181118][ T4596] [U] ,2g8d~OKUlS8/ xGZge@{Ug_ [ 100.243602][ T4596] [U] "BqI}I [ 100.247672][ T4596] [U] Ӗvʽz,6 [ 100.252323][ T4596] [U] oB6V& [ 100.256132][ T4596] [U] ']›bHc+d jk@Es [``4<nq,;Zd]Q [ 100.264574][ T4596] [U] gNTJfw]҈*$b [ 100.270407][ T4596] [U] FY8}[0{K-I57}HzYz(m-:-l*q{Kz< z!ךI|WU+̚LA<eC_^|.3Qf\7G>(hcιQ{M] ELJbŲiTEGBA#;m:ijYC5:8-#K洎CPK$ KL;WgԮd5f~+kyAUx [ 100.313409][ T4596] [U] fgED}#őeJqyĈ.U&\Y 2!4 -nV8Kpvd(Gw{ԯ4V [ݫ1^/{ʝ'bAxX@KU#R'Uu/Bd zP [ 100.361728][ T4596] [U] r!f1ElP5f[yqiM25xK`q$Dɵ+UNJ| xF>$ ÷>Vʇ*מȂ!+zv eC}]K [ 100.384846][ T4609] loop2: detected capacity change from 0 to 7 [ 100.385502][ T4596] [U] ?"#txai [ 100.400936][ T4596] [U] [XMB2{Yzm:ë$ܮQDZ;#6l`BB>b S:8U7A1X [ 100.411981][ T4609] loop2: [ 100.415233][ T4609] loop2: partition table partially beyond EOD, truncated [ 100.424961][ T4596] [U] ܧdI [ 100.428467][ T4596] [U] 4o;zvy 9k{&CC~F+2'2/#p [ 100.472585][ T4596] [U] ~FnA{u@v41tFmޭp [ 100.478478][ T4596] [U] QZQ)s+ [ 100.486016][ T4596] [U] һs:LO [ 100.492454][ T4596] [U] ^B]!b7ǦOQbgq'n [ 100.577378][ T4596] [U] E۲xF>5wPOg6,๘9G"5f\-S1$s{Ή%\p8:(]##mt9q0ֻ10lfw[˭x'uc{J[-:]_/UvL ^`T6=k)b1l6H [ 100.662920][ T4596] [U] ~m, priority 0 [ 102.880742][ T4659] device syzkaller0 entered promiscuous mode [ 102.961385][ T4651] tipc: Resetting bearer [ 103.005774][ T4649] tipc: Resetting bearer [ 103.112361][ T4649] tipc: Disabling bearer [ 103.137487][ T4237] usb 5-1: USB disconnect, device number 3 [ 105.173774][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 105.186936][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 105.791536][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.991998][ T21] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 107.000735][ T21] usb 2-1: config 0 has no interface number 0 [ 107.006942][ T4260] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.055911][ T4715] tipc: Started in network mode [ 107.071881][ T4715] tipc: Node identity f665a2b602d3, cluster identity 4711 [ 107.086052][ T21] usb 2-1: config 0 interface 110 altsetting 2 has an invalid endpoint with address 0x9E, skipping [ 107.101809][ T4715] tipc: Enabled bearer , priority 0 [ 107.122054][ T21] usb 2-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.161663][ T21] usb 2-1: config 0 interface 110 has no altsetting 0 [ 107.182383][ T4716] device syzkaller0 entered promiscuous mode [ 107.286070][ T4715] tipc: Resetting bearer [ 107.332018][ T21] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 107.341230][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.432138][ T4260] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 107.452080][ T4714] tipc: Resetting bearer [ 107.456796][ T4260] usb 5-1: config 0 has no interface number 0 [ 107.465787][ T4260] usb 5-1: config 0 interface 41 has no altsetting 0 [ 107.477837][ T4714] tipc: Disabling bearer [ 107.479804][ T21] usb 2-1: Product: syz [ 107.488253][ T21] usb 2-1: Manufacturer: syz [ 107.520658][ T21] usb 2-1: SerialNumber: syz [ 107.803845][ T21] usb 2-1: config 0 descriptor?? [ 107.893226][ T4260] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 107.911580][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.919889][ T4260] usb 5-1: Product: syz [ 107.929427][ T4260] usb 5-1: Manufacturer: syz [ 107.934760][ T4260] usb 5-1: SerialNumber: syz [ 107.941568][ T4260] usb 5-1: config 0 descriptor?? [ 107.961632][ T21] usb 2-1: can't set config #0, error -71 [ 107.984033][ T21] usb 2-1: USB disconnect, device number 3 [ 108.268738][ T4733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 109.333187][ T4260] CoreChips: probe of 5-1:0.41 failed with error -71 [ 110.166821][ T4260] usb 5-1: USB disconnect, device number 4 [ 110.621615][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.861562][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 111.031767][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.057835][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.116615][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.137106][ T4764] tipc: Enabled bearer , priority 0 [ 111.182815][ T23] usb 2-1: config 0 descriptor?? [ 111.186063][ T4764] device syzkaller0 entered promiscuous mode [ 111.240275][ T4766] binder: 4765:4766 unknown command 0 [ 111.280240][ T4766] binder: 4765:4766 ioctl c0306201 200000000080 returned -22 [ 111.307430][ T4764] tipc: Resetting bearer [ 111.307700][ T4768] binder: 4765:4768 ioctl c0306201 2000000003c0 returned -14 [ 111.351852][ T4763] tipc: Resetting bearer [ 111.414008][ T4763] tipc: Disabling bearer [ 111.679706][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.711526][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.747935][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.791831][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 111.819642][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 112.002209][ T23] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 112.522351][ T4750] udc-core: couldn't find an available UDC or it's busy [ 112.529365][ T4750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.901554][ C1] usb 2-1: input irq status -75 received [ 113.684634][ T4784] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 113.696471][ T4784] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 113.704910][ T4784] CPU: 0 PID: 4784 Comm: syz.1.124 Not tainted syzkaller #0 [ 113.712211][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.722278][ T4784] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 113.727510][ T4784] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f9 d3 66 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 d9 d3 66 fa 4c 8b 33 4d 8d ae 70 [ 113.747240][ T4784] RSP: 0018:ffffc900037bf950 EFLAGS: 00010246 [ 113.753325][ T4784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 113.761425][ T4784] RDX: ffffc9000d3a9000 RSI: 00000000000004df RDI: 00000000000004e0 [ 113.769470][ T4784] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10049d6cd3 [ 113.777487][ T4784] R10: ffffed10049d6cd3 R11: 1ffff110049d6cd2 R12: dffffc0000000000 [ 113.785697][ T4784] R13: 1ffff110049d6c2b R14: dffffc0000000000 R15: ffffc900037bfbe0 [ 113.794074][ T4784] FS: 00007f1bf0e7e6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 113.803029][ T4784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.809744][ T4784] CR2: 00007fc4658168b4 CR3: 00000000179a6000 CR4: 00000000003506f0 [ 113.817845][ T4784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.825827][ T4784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.833816][ T4784] Call Trace: [ 113.837112][ T4784] [ 113.840054][ T4784] ? mcp_gpio_get+0x260/0x260 [ 113.844841][ T4784] __i2c_transfer+0x864/0x2060 [ 113.849747][ T4784] ? rwsem_down_read_slowpath+0x990/0x990 [ 113.855495][ T4784] ? i2c_cmd+0x110/0x110 [ 113.859750][ T4784] i2c_transfer+0x24c/0x390 [ 113.864264][ T4784] ? __i2c_transfer+0x2060/0x2060 [ 113.869336][ T4784] ? __might_fault+0xb7/0x110 [ 113.874050][ T4784] i2c_transfer_buffer_flags+0x102/0x190 [ 113.879984][ T4784] ? i2c_transfer+0x390/0x390 [ 113.884684][ T4784] ? __might_fault+0xb3/0x110 [ 113.889381][ T4784] ? _copy_from_user+0x111/0x170 [ 113.894333][ T4784] i2cdev_write+0x87/0x120 [ 113.898766][ T4784] do_iter_write+0x3e4/0x7b0 [ 113.903377][ T4784] do_pwritev+0x204/0x340 [ 113.907725][ T4784] ? do_preadv+0x330/0x330 [ 113.912341][ T4784] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 113.918388][ T4784] ? lock_chain_count+0x20/0x20 [ 113.923253][ T4784] ? vtime_user_exit+0x2dc/0x400 [ 113.928204][ T4784] ? lockdep_hardirqs_on+0x94/0x140 [ 113.933442][ T4784] do_syscall_64+0x4c/0xa0 [ 113.937970][ T4784] ? clear_bhb_loop+0x30/0x80 [ 113.942659][ T4784] ? clear_bhb_loop+0x30/0x80 [ 113.947562][ T4784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.953495][ T4784] RIP: 0033:0x7f1bf2c37ec9 [ 113.958421][ T4784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.978350][ T4784] RSP: 002b:00007f1bf0e7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 113.986811][ T4784] RAX: ffffffffffffffda RBX: 00007f1bf2e8f090 RCX: 00007f1bf2c37ec9 [ 113.994909][ T4784] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000007 [ 114.003363][ T4784] RBP: 00007f1bf2cbaf91 R08: 00000000000000b2 R09: 0000000000000000 [ 114.011533][ T4784] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 114.019720][ T4784] R13: 00007f1bf2e8f128 R14: 00007f1bf2e8f090 R15: 00007ffed83c22b8 [ 114.027721][ T4784] [ 114.030769][ T4784] Modules linked in: [ 114.160114][ T4784] ---[ end trace 5cbfe6928adc4ff4 ]--- [ 114.166753][ T4784] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 114.178317][ T4784] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f9 d3 66 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 d9 d3 66 fa 4c 8b 33 4d 8d ae 70 [ 114.198689][ T4784] RSP: 0018:ffffc900037bf950 EFLAGS: 00010246 [ 114.206106][ T4784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 114.279009][ T4784] RDX: ffffc9000d3a9000 RSI: 00000000000004df RDI: 00000000000004e0 [ 114.290866][ T4784] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10049d6cd3 [ 114.302384][ T4784] R10: ffffed10049d6cd3 R11: 1ffff110049d6cd2 R12: dffffc0000000000 [ 114.311016][ T4784] R13: 1ffff110049d6c2b R14: dffffc0000000000 R15: ffffc900037bfbe0 [ 114.323603][ T4784] FS: 00007f1bf0e7e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 114.335925][ T4784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.345268][ T4784] CR2: 000000110c438ff0 CR3: 00000000179a6000 CR4: 00000000003506e0 [ 114.355829][ T4784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.596325][ T4784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.605451][ T4784] Kernel panic - not syncing: Fatal exception [ 114.611949][ T4784] Kernel Offset: disabled [ 114.616320][ T4784] Rebooting in 86400 seconds..