last executing test programs: 8.569241897s ago: executing program 0 (id=50): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000000)) 8.498058639s ago: executing program 0 (id=51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, 0x0, 0x0) writev(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 8.388066517s ago: executing program 1 (id=52): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 8.344137854s ago: executing program 1 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x30, 0x0, &(0x7f0000000480)="0cce0523552df5799e844ca6558f6adffcf24e07e5aafad225a33a8e32337edc3c2fbfc0bc8e4b3186f8a3370b1f55a7"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) close(r9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x1f0, 0x202, 0x225, 0x1f0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x104, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34d) 7.136006736s ago: executing program 2 (id=55): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000004080)={{0x12, 0x1, 0x300, 0x6b, 0x57, 0x18, 0x10, 0xb48, 0x3012, 0x96e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb1, 0x8, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x47, 0x78, 0x42}}]}}]}}, 0x0) 6.93255433s ago: executing program 3 (id=57): r0 = syz_open_dev$media(0x0, 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x8, 0x0, 0x2d2}, &(0x7f0000000040), &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) timer_create(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 6.092164391s ago: executing program 1 (id=58): unshare(0x24020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x29, 0xd, 0x0, 0x0) 5.938637397s ago: executing program 1 (id=59): openat$dsp(0xffffff9c, 0x0, 0x82040, 0x0) syz_usb_connect(0x1, 0x4f, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x8f, 0xea, 0xba, 0x8, 0x4cb, 0x127, 0x3abe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0xac, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0xb6, 0x3, 0x1, 0xed, 0x4e, 0x50, 0x3, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x1a, 0x0, 0x1, [@generic={0x8, 0xb, "8931b298b8bf"}]}}]}}, {{0x9, 0x4, 0xbe, 0x2, 0x1, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x1e, 0x3, 0x3ff, 0xa, 0x2d, 0x4c, [@generic={0x8, 0xb, "8e53636396bc"}]}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.20010204s ago: executing program 3 (id=61): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 5.037037418s ago: executing program 3 (id=62): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) clock_getres(0x9, 0x0) 4.626543636s ago: executing program 0 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) openat$tun(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) 4.60573104s ago: executing program 4 (id=64): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07002dbd7000fdb9df2505000000180001801400020073797a5f74756e0000000000000000001800038014000380100001800a0002006578666174000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x2, &(0x7f0000000040)={0x22, "9ead99f0e6880391a01b247a4cf9866ef8741b1300"}}) r3 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) syz_io_uring_setup(0xa83, &(0x7f0000000080)={0x0, 0x3776, 0x8, 0x2, 0x3d6}, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x25d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) ioctl$SG_BLKTRACESETUP(r3, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x200, 0x2, 0xc, 0xa, 0x0, r4}) 3.962811937s ago: executing program 0 (id=65): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000040)=0x24) 3.737661835s ago: executing program 2 (id=66): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 3.701294701s ago: executing program 2 (id=67): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = syz_io_uring_setup(0x4158, &(0x7f0000000880)={0x0, 0xaf93, 0x1, 0xffffffff, 0x32b}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r0, 0x21, 0x21, 0x1, 0x0, 0x0) 3.344591721s ago: executing program 1 (id=68): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) 3.148143713s ago: executing program 0 (id=69): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x20, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x3, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x9, 0xbe, {0xa, 0x25, 0x25, 0x8, 0x4f, 0xbe1}}}}}}}}]}}, 0x0) 2.80977487s ago: executing program 2 (id=70): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010000004082050c0040000102030109026000030910080904000000010100000a240106000a0002010209040100000102000009040101010102000009050109000405f70d0725"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.643739198s ago: executing program 4 (id=71): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r1, &(0x7f00000002c0)=""/75, 0x4b, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001080), 0x1a1001, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) 2.407876768s ago: executing program 4 (id=72): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) lseek(r0, 0x851, 0x0) 2.305996064s ago: executing program 4 (id=73): r0 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) read(r0, &(0x7f0000000000)=""/76, 0x4c) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000341000/0x4000)=nil, 0x4000}}) 1.348858364s ago: executing program 4 (id=74): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000000)) 1.279784886s ago: executing program 1 (id=75): openat$kvm(0x0, 0x0, 0x0, 0x0) socket$inet6(0x2d, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) 1.174910014s ago: executing program 4 (id=76): syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f010000000000000000000424130505240102080424130009"], 0x0) 1.173581324s ago: executing program 0 (id=77): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000040)={0x20, 0x30, 0x3, "511056"}, 0x0, 0x0, 0x0, 0x0}) 1.065283622s ago: executing program 3 (id=78): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffdfffffffffd, 0x8fa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000700000000800000010000000000", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @none}, 0x0, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000340)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c00000000014060014003500776732000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 595.97206ms ago: executing program 2 (id=79): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 509.447015ms ago: executing program 2 (id=80): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@report={0x5c, 0x20, 0x8, 0x70bd2c, 0x25dfdbfb, {0x6c, {@in6=@mcast2, @in=@loopback, 0x4e21, 0x0, 0x4e20, 0xd6, 0x2, 0x80, 0x160, 0x0, 0x0, 0xee01}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @tfcpad={0x8, 0x16, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x880c1) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f00000020c0)=""/168, &(0x7f0000000000)=0xa8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f00000002c0)={{0x7000, 0x58000, 0x4, 0xe, 0x7, 0x7, 0x7, 0x1, 0x0, 0x80, 0x8, 0x6}, {0x70000, 0xeecfe000, 0xc, 0x81, 0x1, 0xff, 0x5, 0x5, 0x6, 0x2, 0x50, 0x5e}, {0xeeee8000, 0x41000, 0xa, 0x8, 0x1, 0x87, 0x8, 0xc, 0x58, 0x3, 0x2, 0x1a}, {0xeeef0000, 0xeeee0000, 0xb, 0x1, 0xe, 0x40, 0x5, 0x1, 0x8, 0x8, 0x61, 0x2}, {0x0, 0x30000, 0x10, 0x8, 0x4, 0x5, 0x5b, 0x1d, 0x27, 0x71, 0x7, 0xc0}, {0x41000, 0x0, 0xd, 0xd4, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2, 0xff, 0x7f}, {0xeeef2000, 0xffffffff, 0x8, 0x0, 0xa, 0x2, 0x0, 0xb, 0x7, 0xfe, 0x1, 0x4}, {0xdddd1000, 0x18000, 0x4, 0x8, 0x6, 0xd0, 0x4, 0xf7, 0x8, 0x8, 0x9, 0xa}, {0x10000, 0xb}, {0x60000, 0xfff}, 0x80010020, 0x0, 0xc8c8bef205ae9b1c, 0x2, 0x1, 0x4000, 0x5000, 0x0, [0x2, 0x2, 0x9, 0x7]}) listen(r1, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x1, 0xfffffffe, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x50) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x11, 0x73, "b61c03844522c9d162ff1896980e99f114669aa638b3e7d41c0de1e00ba789bdb5d89c5f301f0564684d81d12b1398c22cbfba724934ae79fd3b8fe11834da421c4fc8e409bd2fbe4e8e507324519a0d94222fd3083a172c0292bcbfbbc02c301355b4162a522625b8e0f5547a26688ef36422"}}) write(0xffffffffffffffff, &(0x7f00000002c0)="04", 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$l2tp(0x2, 0x2, 0x73) ptrace(0x4207, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 78.203577ms ago: executing program 3 (id=81): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x33524742, 0x280, 0x4ae, 0x3, @stepwise={{0x6, 0x9}, {0x97c2, 0xffffffff}, {0xfffffffd, 0x38}}}) 0s ago: executing program 3 (id=82): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 54.984508][ T4170] cgroup: Unknown subsys name 'net' [ 55.121175][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.594179][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.019062][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.112922][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 58.123598][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.162443][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.214749][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.226510][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.234872][ T4193] device bridge_slave_0 entered promiscuous mode [ 58.258443][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.265983][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.273871][ T4193] device bridge_slave_1 entered promiscuous mode [ 58.325030][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.332381][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.341039][ T4183] device bridge_slave_0 entered promiscuous mode [ 58.348993][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.372204][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.389766][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.397248][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.405048][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.422457][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.429616][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.437960][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.446784][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.474840][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.482218][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.490227][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.504553][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.512101][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.520531][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.528085][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.535143][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.543521][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.580767][ T4193] team0: Port device team_slave_0 added [ 58.588812][ T4193] team0: Port device team_slave_1 added [ 58.599984][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.640604][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.651743][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.662985][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.680978][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.690853][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.698128][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.724319][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.743671][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.779245][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.786433][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.812618][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.838040][ T4185] team0: Port device team_slave_0 added [ 58.847070][ T4184] team0: Port device team_slave_0 added [ 58.853215][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.860604][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.869099][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.882913][ T4183] team0: Port device team_slave_0 added [ 58.890600][ T4185] team0: Port device team_slave_1 added [ 58.898515][ T4184] team0: Port device team_slave_1 added [ 58.909253][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.916628][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.924545][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.939192][ T4183] team0: Port device team_slave_1 added [ 58.992576][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.002381][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.009491][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.035731][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.048336][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.055294][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.082238][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.094442][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.101909][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.134807][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.155046][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.162075][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.188174][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.199697][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.206971][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.233114][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.246051][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.255517][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.262464][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.288468][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.314316][ T4193] device hsr_slave_0 entered promiscuous mode [ 59.321438][ T4193] device hsr_slave_1 entered promiscuous mode [ 59.379614][ T4188] team0: Port device team_slave_0 added [ 59.408838][ T4188] team0: Port device team_slave_1 added [ 59.420988][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.428647][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.435280][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.443159][ T4183] Cannot create hsr debugfs directory [ 59.453003][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.460249][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.467210][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.474784][ T4185] Cannot create hsr debugfs directory [ 59.506689][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.513238][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.520521][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.528428][ T4184] Cannot create hsr debugfs directory [ 59.565689][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.572676][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.598929][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.636733][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.643725][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.670152][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.746720][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 59.746720][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 59.747216][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 59.752949][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 59.778282][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 59.793343][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.800771][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.807387][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.815097][ T4188] Cannot create hsr debugfs directory [ 60.012520][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.023854][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.036808][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.047342][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.089812][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.099249][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.111104][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.120598][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.220958][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.231279][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.250699][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.271239][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.299235][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.330736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.339494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.352307][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.361258][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.383444][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.392108][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.401634][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.424219][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.436596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.446360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.455387][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.463198][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.473348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.489099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.498346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.507349][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.514443][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.553471][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.564038][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.572194][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.580233][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.593882][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.607739][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.618774][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.650881][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.661667][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.671064][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.681159][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.688369][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.696461][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.705202][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.713934][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.722759][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.731547][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.738769][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.747901][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.757299][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.768632][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.796745][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.804814][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.814610][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.823604][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.832806][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.842623][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.851795][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.864240][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.887928][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.920161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.933769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.943017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.967541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.978699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.989530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.000016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.018457][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.029644][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.040538][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.052888][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.063207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.072251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.111344][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.120313][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.130089][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.138964][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.158648][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.170893][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.223396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.234925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.243545][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.250764][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.258880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.268884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.277962][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.285235][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.293732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.301442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.309298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.319297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.328269][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.335344][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.344594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.354635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.381855][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.395463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.404631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.422995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.433651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.444380][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.451507][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.460174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.470238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.478833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.490856][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.527523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.538758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.548482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.558325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.566672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.576307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.584810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.594035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.604367][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.618244][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.630627][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.645044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.654583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.687360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.703065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.712253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.728538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.736460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.744976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.754805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.763501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.772691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.781431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.790872][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.797999][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.806896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.815888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.824405][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.825676][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 61.831584][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.843449][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 61.845749][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 61.857362][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 61.863474][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 61.883836][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.894477][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.910011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.924402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.934188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.950066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.963825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.973674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.982813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.993219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.002218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.030837][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.052429][ T4193] device veth0_vlan entered promiscuous mode [ 62.068194][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.079543][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.105816][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.114738][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.130154][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.140412][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.149194][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.158384][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.166399][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.175319][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.184926][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.204312][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.222144][ T4193] device veth1_vlan entered promiscuous mode [ 62.248098][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.266297][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.273823][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.290154][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.311017][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.362904][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.386454][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.414761][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.426083][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.437340][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.453612][ T4183] device veth0_vlan entered promiscuous mode [ 62.477840][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.487946][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.497732][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.506246][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.521168][ T4193] device veth0_macvtap entered promiscuous mode [ 62.536998][ T4183] device veth1_vlan entered promiscuous mode [ 62.557606][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.572442][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.581493][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.597987][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.609378][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.625110][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.640519][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.650497][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.666948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.676542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.684778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.694830][ T4193] device veth1_macvtap entered promiscuous mode [ 62.719178][ T4184] device veth0_vlan entered promiscuous mode [ 62.728703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.737278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.744929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.770915][ T4185] device veth0_vlan entered promiscuous mode [ 62.781450][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.791712][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.800313][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.810855][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.819857][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.828782][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.842363][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.851173][ T4183] device veth0_macvtap entered promiscuous mode [ 62.862992][ T4183] device veth1_macvtap entered promiscuous mode [ 62.873201][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.881348][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.889627][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.899136][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.911065][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.920491][ T4184] device veth1_vlan entered promiscuous mode [ 62.934070][ T4185] device veth1_vlan entered promiscuous mode [ 62.941491][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.950251][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.959505][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.968510][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.978443][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.986071][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.996432][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.005380][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.014458][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.023571][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.039081][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.091499][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.103692][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.118389][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.132921][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.144081][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.156017][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.170389][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.181189][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.191550][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.200595][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213102][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.221586][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.229828][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.239147][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.248393][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.257072][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.275909][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.284322][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.307574][ T4184] device veth0_macvtap entered promiscuous mode [ 63.317944][ T4184] device veth1_macvtap entered promiscuous mode [ 63.336167][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.344335][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.354061][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.363077][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.404255][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.417498][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.430618][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.440601][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.449102][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.457308][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.466584][ T4185] device veth0_macvtap entered promiscuous mode [ 63.479958][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.491148][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.501250][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.513675][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.525205][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.544437][ T4188] device veth0_vlan entered promiscuous mode [ 63.554838][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.563471][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.572068][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.584802][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.597410][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.607508][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.607549][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.608790][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.640838][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.650207][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.660752][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669844][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.688571][ T4185] device veth1_macvtap entered promiscuous mode [ 63.706186][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.715198][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.728930][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.742803][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.749522][ T4188] device veth1_vlan entered promiscuous mode [ 63.783235][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.799529][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.810535][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.820803][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.831536][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.843770][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.854856][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.867646][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.898923][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.909996][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.918850][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 63.924889][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 63.933950][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.946391][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 63.951166][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.952491][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 63.962382][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.969221][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 63.984307][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.996877][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.007644][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.019153][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.038138][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.043887][ T4188] device veth0_macvtap entered promiscuous mode [ 64.059014][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.071605][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.085073][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.096142][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.103915][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.114081][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.125196][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.136763][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.146471][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.155179][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.164319][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184012][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.185097][ T4188] device veth1_macvtap entered promiscuous mode [ 64.209791][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.249434][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.262973][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.273266][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.283991][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.293894][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.304778][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.322406][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.333199][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.344461][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.352489][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.360907][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.372134][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.381014][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.413210][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.424226][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.434478][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.446866][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.456997][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.469282][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.479550][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.490288][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.502395][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.527196][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.536219][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.572340][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.586700][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.595579][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.615532][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637762][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.658006][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.723769][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.732678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.750391][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.761034][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.764847][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.803918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.818016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.871114][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.888420][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.896196][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.904025][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.933448][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.944996][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.015611][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.023475][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.078882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.130310][ T4276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.158025][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.181770][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.199010][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.323634][ T4284] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.535204][ T4294] loop1: detected capacity change from 0 to 2048 [ 65.593409][ T4294] loop1: p4 < > [ 65.650844][ T4294] EXT4-fs (loop1p4): unable to read superblock [ 65.932454][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 65.986374][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 65.996319][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 66.002480][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 66.032534][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 66.041460][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 66.265861][ T4306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 66.786059][ T4316] device syzkaller0 entered promiscuous mode [ 67.273951][ T4338] syz.3.30 uses obsolete (PF_INET,SOCK_PACKET) [ 67.312026][ T4342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.645688][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.656935][ T26] audit: type=1800 audit(1776293422.145:2): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25" name="file1" dev="fuse" ino=3 res=0 errno=0 [ 67.746960][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.015824][ T21] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 68.036270][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.087650][ T21] usb 2-1: config 0 descriptor?? [ 68.146732][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.185671][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.335788][ T21] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 68.345583][ T21] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 68.396552][ T4229] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 68.409040][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.425367][ T4229] usb 4-1: Product: syz [ 68.435638][ T4229] usb 4-1: Manufacturer: syz [ 68.448925][ T4229] usb 4-1: SerialNumber: syz [ 68.456216][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 68.572621][ T21] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 68.592563][ T21] [drm] Initialized udl on minor 2 [ 68.735764][ T4232] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 68.748296][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.765897][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 68.774878][ T4232] usb 1-1: Product: syz [ 68.786320][ T21] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 68.791460][ T4232] usb 1-1: Manufacturer: syz [ 68.828668][ T4232] usb 1-1: SerialNumber: syz [ 68.857330][ T4232] usb 1-1: config 0 descriptor?? [ 68.916209][ T21] usb 2-1: USB disconnect, device number 2 [ 68.939714][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 68.969300][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 68.985097][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 69.115868][ T4232] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 69.199091][ T4228] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.725853][ T4228] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 69.735701][ T4232] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 69.751252][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.769887][ T4232] usb 1-1: USB disconnect, device number 2 [ 69.790484][ T4228] usb 3-1: Product: syz [ 69.794813][ T4228] usb 3-1: Manufacturer: syz [ 69.823513][ T4228] usb 3-1: SerialNumber: syz [ 69.843300][ T4228] usb 3-1: config 0 descriptor?? [ 69.856203][ T4229] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 69.889426][ T4228] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 69.919602][ T4379] netlink: 'syz.4.44': attribute type 10 has an invalid length. [ 69.941189][ T4229] usb 4-1: USB disconnect, device number 2 [ 70.298337][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.595737][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.945365][ T4423] process 'syz.1.53' launched './file1' with NULL argv: empty string added [ 70.995756][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 71.168657][ T4228] gspca_stk1135: reg_w 0xd err -71 [ 71.176187][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.205651][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.210893][ T4228] gspca_stk1135: Sensor write failed [ 71.255552][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.286190][ T4228] gspca_stk1135: Sensor write failed [ 71.293909][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.309953][ T4228] gspca_stk1135: Sensor read failed [ 71.345642][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.362818][ T4228] gspca_stk1135: Sensor read failed [ 71.386121][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.392953][ T4228] gspca_stk1135: Detected sensor type unknown (0x0) [ 71.410927][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.417538][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.457954][ T23] usb 5-1: Product: syz [ 71.458390][ T4228] gspca_stk1135: Sensor read failed [ 71.494189][ T23] usb 5-1: Manufacturer: syz [ 71.514482][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.529410][ T23] usb 5-1: SerialNumber: syz [ 71.533162][ T4228] gspca_stk1135: Sensor read failed [ 71.550046][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.562396][ T4228] gspca_stk1135: Sensor write failed [ 71.573336][ T4228] gspca_stk1135: serial bus timeout: status=0x00 [ 71.589084][ T4228] gspca_stk1135: Sensor write failed [ 71.599556][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.606454][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.618392][ T23] usb 5-1: config 0 descriptor?? [ 71.632448][ T4228] stk1135: probe of 3-1:0.0 failed with error -71 [ 71.689177][ T4388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.735956][ T4228] usb 3-1: USB disconnect, device number 2 [ 71.796703][ T23] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 71.945673][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.365644][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.401755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.572771][ T4172] usb 5-1: USB disconnect, device number 2 [ 72.615618][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 72.735808][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 72.915805][ T23] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 72.940665][ T23] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.004650][ T23] usb 3-1: Product: syz [ 73.045824][ T23] usb 3-1: Manufacturer: syz [ 73.068879][ T23] usb 3-1: SerialNumber: syz [ 73.099049][ T23] usb 3-1: config 0 descriptor?? [ 73.135870][ T4434] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.156401][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 73.165416][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 73.495791][ T21] usb 3-1: USB disconnect, device number 3 [ 73.605588][ T4228] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 73.855607][ T21] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 74.028409][ T4451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.61'. [ 74.055774][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.165952][ T4228] usb 2-1: config 172 has an invalid interface number: 182 but max is 1 [ 74.185979][ T4228] usb 2-1: config 172 has an invalid interface number: 190 but max is 1 [ 74.296076][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 74.327915][ T4228] usb 2-1: config 172 has no interface number 0 [ 74.359531][ T4228] usb 2-1: config 172 has no interface number 1 [ 74.399745][ T4228] usb 2-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 74.445669][ T4228] usb 2-1: config 172 interface 190 altsetting 2 has an invalid endpoint with address 0x1E, skipping [ 74.469028][ T4228] usb 2-1: config 172 interface 182 has no altsetting 0 [ 74.475882][ T21] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 74.477469][ T4228] usb 2-1: config 172 interface 190 has no altsetting 0 [ 74.485170][ T21] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 74.485195][ T21] usb 3-1: Product: syz [ 74.485210][ T21] usb 3-1: Manufacturer: syz [ 74.485226][ T21] usb 3-1: SerialNumber: syz [ 74.552443][ T21] usb 3-1: config 0 descriptor?? [ 74.585973][ T4434] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.609624][ T21] hub 3-1:0.0: bad descriptor, ignoring hub [ 74.625990][ T21] hub: probe of 3-1:0.0 failed with error -5 [ 74.654719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.745536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.787191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.796345][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.805516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.814634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.823616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.832807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.849200][ T4228] usb 2-1: string descriptor 0 read error: -22 [ 74.855594][ T4172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.871835][ T4228] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 74.889412][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.914926][ T4228] usb 2-1: Interface #182 referenced by multiple IADs [ 74.945942][ T21] usb 3-1: USB disconnect, device number 4 [ 75.135665][ T4172] usb 5-1: Using ep0 maxpacket: 32 [ 75.226732][ T21] usb 2-1: USB disconnect, device number 3 [ 75.269501][ T4172] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 75.290617][ T4172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.610955][ T4172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 75.630141][ T4172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.686201][ T4172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 75.700093][ T4172] usb 5-1: media controller created [ 75.751465][ T4172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.857452][ T4172] az6027: usb out operation failed. (-71) [ 75.888342][ T4172] az6027: usb out operation failed. (-71) [ 75.907084][ T4172] stb0899_attach: Driver disabled by Kconfig [ 75.921509][ T4172] az6027: no front-end attached [ 75.921509][ T4172] [ 75.975774][ T4172] az6027: usb out operation failed. (-71) [ 75.988774][ T4172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 76.035061][ T4172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 76.059048][ T4172] dvb-usb: schedule remote query interval to 400 msecs. [ 76.076675][ T4172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 76.090019][ T4172] usb 5-1: USB disconnect, device number 3 [ 76.195616][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.208604][ T4172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 76.275599][ T4229] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 76.455604][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 76.581079][ T21] usb 2-1: config 0 has no interfaces? [ 76.635750][ T4229] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.666006][ T4229] usb 1-1: config 1 has no interface number 0 [ 76.672241][ T4229] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 76.675573][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.703751][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 76.745235][ T4481] binder: 4480:4481 ioctl 4018620d 0 returned -22 [ 76.762047][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 76.771322][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 76.792319][ T4481] binder: 4480:4481 ioctl c0306201 0 returned -14 [ 76.793130][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.831802][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 76.853989][ T21] usb 2-1: Product: syz [ 76.858379][ T21] usb 2-1: Manufacturer: syz [ 76.864102][ T21] usb 2-1: SerialNumber: syz [ 76.894504][ T21] usb 2-1: config 0 descriptor?? [ 77.015754][ T4229] usb 1-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 77.035161][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.045273][ T4229] usb 1-1: Product: syz [ 77.055389][ T4229] usb 1-1: Manufacturer: syz [ 77.065545][ T4229] usb 1-1: SerialNumber: syz [ 77.109064][ T4232] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 77.123266][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.146610][ T4232] usb 3-1: config 0 descriptor?? [ 77.206977][ T4232] cp210x 3-1:0.0: cp210x converter detected [ 77.263425][ T4471] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 77.295760][ T4234] usb 2-1: USB disconnect, device number 4 [ 77.435792][ T4229] usb 1-1: 1:0 : does not exist [ 77.440945][ T4229] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 77.482593][ T4229] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 77.495909][ T4229] usb 1-1: USB disconnect, device number 4 [ 77.626407][ T4476] udc-core: couldn't find an available UDC or it's busy [ 77.633676][ T4476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.672001][ T4232] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 77.724563][ T4232] usb 3-1: cp210x converter now attached to ttyUSB0 [ 77.746533][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.922084][ T4232] usb 3-1: USB disconnect, device number 5 [ 77.960496][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 78.005690][ T4232] cp210x 3-1:0.0: device disconnected [ 78.285613][ T4234] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 78.293406][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.325660][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.545840][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 78.666066][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.676331][ T4229] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.697835][ T4229] usb 1-1: config 0 has no interface number 0 [ 78.707616][ T4234] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 78.722307][ T4229] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 78.749273][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 78.774419][ T4229] usb 1-1: config 0 interface 1 has no altsetting 0 [ 78.875833][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.892643][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.911884][ T4234] usb 5-1: SerialNumber: syz [ 78.955781][ T4229] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 78.956153][ T4228] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 78.974581][ T4172] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 78.984809][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.003670][ T4228] usb 2-1: Product: syz [ 79.005985][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.008308][ T4228] usb 2-1: Manufacturer: syz [ 79.021611][ T4228] usb 2-1: SerialNumber: syz [ 79.023426][ T4229] usb 1-1: Product: syz [ 79.030970][ T4229] usb 1-1: Manufacturer: syz [ 79.040743][ T4229] usb 1-1: SerialNumber: syz [ 79.052152][ T4229] usb 1-1: config 0 descriptor?? [ 79.119782][ T146] ================================================================== [ 79.128113][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 79.135937][ T146] Read of size 1 at addr ffff88807aed3407 by task kworker/u5:0/146 [ 79.143919][ T146] [ 79.146241][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 79.153788][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.163857][ T146] Workqueue: hci3 hci_rx_work [ 79.168629][ T146] Call Trace: [ 79.171921][ T146] [ 79.174858][ T146] dump_stack_lvl+0x188/0x250 [ 79.179545][ T146] ? show_regs_print_info+0x20/0x20 [ 79.184781][ T146] ? load_image+0x400/0x400 [ 79.189476][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 79.195037][ T146] ? mutex_lock_io_nested+0x60/0x60 [ 79.200332][ T146] print_address_description+0x60/0x2d0 [ 79.205883][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 79.211007][ T146] kasan_report+0xdf/0x130 [ 79.215436][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 79.220562][ T146] hci_le_meta_evt+0x133f/0x3c90 [ 79.225518][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 79.231624][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.237442][ T146] ? mark_lock+0x94/0x320 [ 79.241774][ T146] ? mutex_unlock+0x10/0x10 [ 79.246282][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.252367][ T146] ? lock_chain_count+0x20/0x20 [ 79.257235][ T146] ? __rwlock_init+0x140/0x140 [ 79.262367][ T146] hci_event_packet+0xe48/0x1370 [ 79.267309][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 79.272524][ T146] ? rcu_lock_release+0x20/0x20 [ 79.277380][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 79.282646][ T146] hci_rx_work+0x255/0xa10 [ 79.287087][ T146] process_one_work+0x85f/0x1010 [ 79.292045][ T146] ? worker_detach_from_pool+0x240/0x240 [ 79.297717][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 79.303011][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.308045][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.313687][ T146] ? wq_worker_running+0x97/0x170 [ 79.318715][ T146] worker_thread+0xaa6/0x1290 [ 79.323419][ T146] kthread+0x436/0x520 [ 79.327493][ T146] ? rcu_lock_release+0x20/0x20 [ 79.332349][ T146] ? kthread_blkcg+0xd0/0xd0 [ 79.336942][ T146] ret_from_fork+0x1f/0x30 [ 79.341376][ T146] [ 79.344403][ T146] [ 79.346730][ T146] Allocated by task 4507: [ 79.351064][ T146] __kasan_kmalloc+0xb5/0xf0 [ 79.355678][ T146] __alloc_skb+0x22c/0x750 [ 79.360101][ T146] vhci_write+0xbc/0x450 [ 79.364350][ T146] vfs_write+0x745/0xd60 [ 79.368687][ T146] ksys_write+0x152/0x260 [ 79.373016][ T146] do_syscall_64+0x4c/0xa0 [ 79.377510][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.383405][ T146] [ 79.385731][ T146] The buggy address belongs to the object at ffff88807aed3000 [ 79.385731][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 79.399848][ T146] The buggy address is located 7 bytes to the right of [ 79.399848][ T146] 1024-byte region [ffff88807aed3000, ffff88807aed3400) [ 79.413571][ T146] The buggy address belongs to the page: [ 79.419198][ T146] page:ffffea0001ebb400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7aed0 [ 79.429347][ T146] head:ffffea0001ebb400 order:3 compound_mapcount:0 compound_pincount:0 [ 79.437669][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.445660][ T146] raw: 00fff00000010200 ffffea00007a8400 0000000200000002 ffff888016c41dc0 [ 79.454251][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 79.463030][ T146] page dumped because: kasan: bad access detected [ 79.469447][ T146] page_owner tracks the page as allocated [ 79.475158][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3548, ts 59005704162, free_ts 58967843198 [ 79.494429][ T146] get_page_from_freelist+0x1bbd/0x1ca0 [ 79.500079][ T146] __alloc_pages+0x1ee/0x480 [ 79.504670][ T146] new_slab+0xc0/0x4b0 [ 79.508748][ T146] ___slab_alloc+0x80a/0xdd0 [ 79.513422][ T146] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 79.518791][ T146] syslog_print+0x114/0x8f0 [ 79.523294][ T146] do_syslog+0x83f/0x930 [ 79.527539][ T146] __x64_sys_syslog+0x78/0x90 [ 79.532211][ T146] do_syscall_64+0x4c/0xa0 [ 79.536631][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.542530][ T146] page last free stack trace: [ 79.547199][ T146] free_unref_page_prepare+0x637/0x6c0 [ 79.552664][ T146] free_unref_page+0x8f/0x2a0 [ 79.557438][ T146] __unfreeze_partials+0x1a5/0x200 [ 79.562548][ T146] put_cpu_partial+0x12d/0x190 [ 79.567319][ T146] qlist_free_all+0x35/0x90 [ 79.571843][ T146] kasan_quarantine_reduce+0x150/0x160 [ 79.577310][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 79.582412][ T146] slab_post_alloc_hook+0x4c/0x380 [ 79.587540][ T146] __kmalloc_track_caller+0x125/0x330 [ 79.593180][ T146] kvasprintf+0xe3/0x1a0 [ 79.597450][ T146] kobject_set_name_vargs+0x5d/0x110 [ 79.602749][ T146] kobject_init_and_add+0xeb/0x190 [ 79.607951][ T146] netdev_queue_update_kobjects+0x19c/0x3e0 [ 79.613859][ T146] netdev_register_kobject+0x273/0x320 [ 79.619357][ T146] register_netdevice+0x1042/0x1710 [ 79.624560][ T146] veth_newlink+0x6bc/0xe30 [ 79.629065][ T146] [ 79.631391][ T146] Memory state around the buggy address: [ 79.637020][ T146] ffff88807aed3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.645083][ T146] ffff88807aed3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.653145][ T146] >ffff88807aed3400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.661208][ T146] ^ [ 79.665276][ T146] ffff88807aed3480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.673336][ T146] ffff88807aed3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.681482][ T146] ================================================================== [ 79.689721][ T146] Disabling lock debugging due to kernel taint [ 79.700741][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.708080][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 79.717056][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.727134][ T146] Workqueue: hci3 hci_rx_work [ 79.731848][ T146] Call Trace: [ 79.735141][ T146] [ 79.738263][ T146] dump_stack_lvl+0x188/0x250 [ 79.742970][ T146] ? show_regs_print_info+0x20/0x20 [ 79.746156][ T4172] usb 3-1: Using ep0 maxpacket: 8 [ 79.748188][ T146] ? load_image+0x400/0x400 [ 79.748214][ T146] panic+0x2e5/0x810 [ 79.748235][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 79.766277][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 79.772287][ T146] ? _raw_spin_unlock+0x40/0x40 [ 79.777147][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 79.782262][ T146] check_panic_on_warn+0x80/0xa0 [ 79.787202][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 79.792341][ T146] end_report+0x6d/0xf0 [ 79.796499][ T146] kasan_report+0x102/0x130 [ 79.801265][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 79.806386][ T146] hci_le_meta_evt+0x133f/0x3c90 [ 79.811328][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 79.817394][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.823034][ T146] ? mark_lock+0x94/0x320 [ 79.827363][ T146] ? mutex_unlock+0x10/0x10 [ 79.831880][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.837867][ T146] ? lock_chain_count+0x20/0x20 [ 79.842722][ T146] ? __rwlock_init+0x140/0x140 [ 79.847490][ T146] hci_event_packet+0xe48/0x1370 [ 79.852429][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 79.857630][ T146] ? rcu_lock_release+0x20/0x20 [ 79.862837][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 79.868043][ T146] hci_rx_work+0x255/0xa10 [ 79.872467][ T146] process_one_work+0x85f/0x1010 [ 79.877408][ T146] ? worker_detach_from_pool+0x240/0x240 [ 79.883041][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 79.888327][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.893353][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.898987][ T146] ? wq_worker_running+0x97/0x170 [ 79.904013][ T146] worker_thread+0xaa6/0x1290 [ 79.908717][ T146] kthread+0x436/0x520 [ 79.912786][ T146] ? rcu_lock_release+0x20/0x20 [ 79.917633][ T146] ? kthread_blkcg+0xd0/0xd0 [ 79.922314][ T146] ret_from_fork+0x1f/0x30 [ 79.926785][ T146] [ 79.930337][ T146] Kernel Offset: disabled [ 79.934674][ T146] Rebooting in 86400 seconds..