last executing test programs: 22.79383023s ago: executing program 2 (id=624): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0xa980, 0x1c8) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4083, 0xff3}], 0x1) 17.361398895s ago: executing program 2 (id=640): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x0, 0x0, &(0x7f00000011c0)="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"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) 16.218363507s ago: executing program 2 (id=643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f47"], 0x0, 0x0, 0x0, 0x0}) 11.617660065s ago: executing program 2 (id=652): socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x64}, {0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xca, 0xa2, 0x4d, 0x20, 0x1604, 0x8007, 0x6467, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x4, 0x100, 0x6, [{{0x9, 0x4, 0x24, 0x4, 0x1, 0x60, 0x1e, 0x28, 0xc, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0x8, 0x6, [@generic={0x9, 0x4, "059ce294a3e8fc"}]}}]}}, {{0x9, 0x4, 0x3, 0x0, 0x0, 0xff, 0xff, 0xff, 0x40}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x5a00, 0xbc03, 0x6, &(0x7f00000000c0)={[0x10000]}, 0x8) 9.028504122s ago: executing program 3 (id=666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r5, 0x6, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 8.778239643s ago: executing program 1 (id=668): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 8.382196611s ago: executing program 0 (id=671): socket$inet(0x2, 0x3, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000fbdbdf25140000001c0007800c0004000800000000edffff0b000300"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 8.267868596s ago: executing program 0 (id=672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$l2tp(0x2, 0x2, 0x73) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x5, 0xffffffff}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 7.916373132s ago: executing program 1 (id=673): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="07f9ff0100088000000000850800", 0xe, 0x10, &(0x7f0000000200)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @local}, 0x14) 7.586340487s ago: executing program 1 (id=675): syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 7.043488721s ago: executing program 4 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0xa980, 0x1c8) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4083, 0xff3}], 0x1) 6.128059043s ago: executing program 1 (id=677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x2000, 0x0, 0x3, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffbffff) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002db571d150510000000000000000000000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008000000000000000000000000000000000000000000000000000000000fffffffffffffffffcff7f0000200000fcffffffffffffff0000000000000000000a0000000000000400000000000000020000000000000800000000000000000100020200"], 0xb8}}, 0x0) r3 = socket(0xb, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x24, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, 0x0, 0x0, 0x200) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019100), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000019380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f00000191c0)={&(0x7f00000190c0), 0xc, &(0x7f0000019180)={&(0x7f00000193c0)={0x24, r10, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x30000814) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a1700ff", @ANYBLOB="1d0002000000000005000000000000000000000096f51a265b1b7235b027a839e30701c215a7a7a7273d2ec7b55105d85b0dfb05c75382cc377d363157ba9972be41207e67d5eed38129df282952263471ee4ced6ea3457d944f7bd84e2974da0a4eb67300195c48f8637a73144ece7677e2b011e7aac4d07af5794fff62e3335de19cf19931c5460c62d908fb0400009aefaa8fbeca1921759902cf9240286bb16e63"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000019400)={0x168, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x32315659, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x2}}) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 6.110894723s ago: executing program 4 (id=678): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.96627771s ago: executing program 2 (id=679): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400", @ANYRES16], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 5.452829403s ago: executing program 3 (id=680): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) 5.350683848s ago: executing program 3 (id=681): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000380)='\xb9\x00\x00\x00*\x87\xc4\xab\xba\x97\xd9n\x1eZ\x12\xf6\x19me\x82\x98|\"\xda\xdb\xe5k`W\xcdFC \xe3\x0e\xfd\xb0%\x13/\x97Ya\xdb\xf49\xb7\x84\xfe\x88\xf0\x0fc\'7\x16\x9d\r\xfak\xef\xd7\x0e\xf0\xf1\xd4\x85\'f\x87\xd9%wh4\xfe\xfe\xcbt\xdb\xf9\xa3\xa1\xf8\x83\xfe\xd8\x967#E\xfeI\x82\x90\x80\xe30\xfeEV\x8a\xe5\x7f\xb3\xe0\x8b$k1\xd2\x05E\xb1\x02\xae0\xb5\x12\xc1-\x14}\xfe\x05s\x03C\xac@.\xfci\xfc\xaad\xe0\xac0K~G\x06,\xe8\xb8\xb7\x80;7\xd0\xad]o\x8e\xee>-\xe1\\v\xdad\x9f\xea\xf8\x01\x93=\x88\xa6\x8e\x1bf\xb6Z\x109\x9c\xce\f;\xbb\x9dS\x94 \xca\xe3\xb6\xd9i%\x87\x80\x90.\x1d\x81Y\xc3\x8b;\x8cJ\x83\xf5:\x18\bQ\xf17', 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pipe(&(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x183) open(&(0x7f0000000340)='./bus\x00', 0x24c27f, 0x20) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 5.178073715s ago: executing program 3 (id=682): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019100)={@map, 0xffffffffffffffff, 0x1c, 0x4}, 0x20) 5.115803058s ago: executing program 3 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setitimer(0x2, 0x0, 0x0) getitimer(0x2, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx={0x18, 0x9}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x90ff, 0xffffffbc, 0x10, 0x20}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) 4.911338128s ago: executing program 4 (id=684): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x101, 0x0, 0xa, 0x8, 0xa1b1, 0xffe0, 0x2cb3f171, {0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x2, 0x85a, 0x621f, 0xa, 0x5}}, &(0x7f00000000c0)=0xb0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x82, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x3, 0x38, 0x7f, 0x8}, {0x2, 0x7, 0x1, 0x5}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x3, 0x5, 0xfffffe0000000001, 0xfa11, 0x7fffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x0) 4.854120961s ago: executing program 0 (id=685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf250700000008000500ac1e000105080100010000000800040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24000040) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x0) unshare(0x20010080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x3fa, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 3.957371841s ago: executing program 1 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.76856522s ago: executing program 1 (id=687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f0000000200)='m', 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r10, 0x80184153, &(0x7f00000005c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x4000) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.726278291s ago: executing program 2 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0xa980, 0x1c8) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4083, 0xff3}], 0x1) 3.678590273s ago: executing program 0 (id=689): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) sigaltstack(0x0, 0x0) sigaltstack(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.472175003s ago: executing program 0 (id=690): ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x14957e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, 0x0) keyctl$revoke(0x3, r5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) 3.388049326s ago: executing program 3 (id=691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r5, 0x6, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2.826862312s ago: executing program 4 (id=692): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) 2.585889153s ago: executing program 4 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xa9d7, 0x800, 0x1, 0x3a7}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x4008081, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 920.857488ms ago: executing program 0 (id=694): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x0, 0x0) 0s ago: executing program 4 (id=695): mkdir(0x0, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="bf85b456cb2946fa5a5dd36d6957a50c5a7e6b26fcdeaf57d4f2ba2b4afbce59c1db99b9c74d32aaac374e1e7ccb17e3a70d5f90a7436f7b9342fb6c3a35a7d879db7b340181cdd46d74ab7a38ed2ca850715c4dd2f70325ad6ac6f2142ec63e0f27ecaa2de4593a21d93eccc5e3a87e3b2e59ef742d5e4524354c22e3e67f79f3a1b3d65427702c56cd4be67e9f742217", 0x91}, {&(0x7f0000000080)="4ab37730071503dc5f4e1217d286b5406a93e7840f609bc0319e7225be32c63aea8cb7ea47", 0x25}, {0x0}, {0x0}], 0x4, &(0x7f00000007c0)}}], 0x1, 0x24040000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. syzkaller login: [ 53.409597][ T4170] cgroup: Unknown subsys name 'net' [ 53.553179][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.979942][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.425807][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 56.460032][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 56.534461][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 56.552141][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 56.584026][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.591391][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.600225][ T4182] device bridge_slave_0 entered promiscuous mode [ 56.622415][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 56.636003][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.643158][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.651170][ T4182] device bridge_slave_1 entered promiscuous mode [ 56.717827][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.731821][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.753521][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.760721][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.769187][ T4184] device bridge_slave_0 entered promiscuous mode [ 56.792051][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.799378][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.807643][ T4184] device bridge_slave_1 entered promiscuous mode [ 56.867639][ T4182] team0: Port device team_slave_0 added [ 56.875637][ T4182] team0: Port device team_slave_1 added [ 56.894783][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.901945][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.910331][ T4196] device bridge_slave_0 entered promiscuous mode [ 56.918057][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.925133][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.933006][ T4181] device bridge_slave_0 entered promiscuous mode [ 56.947361][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.954412][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.965253][ T4188] device bridge_slave_0 entered promiscuous mode [ 56.974430][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.985810][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.995290][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.005707][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.013699][ T4196] device bridge_slave_1 entered promiscuous mode [ 57.020645][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.027956][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.035654][ T4181] device bridge_slave_1 entered promiscuous mode [ 57.050032][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.057093][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.064915][ T4188] device bridge_slave_1 entered promiscuous mode [ 57.100017][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.106978][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.133239][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.153840][ T4184] team0: Port device team_slave_0 added [ 57.174212][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.181344][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.207329][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.226095][ T4184] team0: Port device team_slave_1 added [ 57.233675][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.244438][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.259558][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.270934][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.286400][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.305118][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.358406][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.365497][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.391659][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.404248][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.411370][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.437310][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.451616][ T4196] team0: Port device team_slave_0 added [ 57.471350][ T4181] team0: Port device team_slave_0 added [ 57.480350][ T4188] team0: Port device team_slave_0 added [ 57.487811][ T4181] team0: Port device team_slave_1 added [ 57.497957][ T4196] team0: Port device team_slave_1 added [ 57.511027][ T4188] team0: Port device team_slave_1 added [ 57.520835][ T4182] device hsr_slave_0 entered promiscuous mode [ 57.527803][ T4182] device hsr_slave_1 entered promiscuous mode [ 57.572700][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.585793][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.612285][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.646135][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.653227][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.679421][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.691136][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.698168][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.724095][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.735682][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.743060][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.769373][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.791836][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.798838][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.824907][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.840478][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.847842][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.874516][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.896424][ T4184] device hsr_slave_0 entered promiscuous mode [ 57.903164][ T4184] device hsr_slave_1 entered promiscuous mode [ 57.909906][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.917938][ T4184] Cannot create hsr debugfs directory [ 58.003277][ T4181] device hsr_slave_0 entered promiscuous mode [ 58.010919][ T4181] device hsr_slave_1 entered promiscuous mode [ 58.017657][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.025214][ T4181] Cannot create hsr debugfs directory [ 58.044778][ T4196] device hsr_slave_0 entered promiscuous mode [ 58.051720][ T4196] device hsr_slave_1 entered promiscuous mode [ 58.058605][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.066165][ T4196] Cannot create hsr debugfs directory [ 58.075500][ T4188] device hsr_slave_0 entered promiscuous mode [ 58.082536][ T4188] device hsr_slave_1 entered promiscuous mode [ 58.089579][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.097294][ T4188] Cannot create hsr debugfs directory [ 58.138207][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 58.143972][ T4183] Bluetooth: hci2: command 0x0409 tx timeout [ 58.150523][ T4183] Bluetooth: hci0: command 0x0409 tx timeout [ 58.156554][ T4183] Bluetooth: hci1: command 0x0409 tx timeout [ 58.217524][ T4183] Bluetooth: hci4: command 0x0409 tx timeout [ 58.395659][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.407650][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.416805][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.429882][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.468917][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.478854][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.488427][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.502334][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.547850][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.557473][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.577336][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.586127][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.645470][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.662524][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.693828][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.721227][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.738149][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.746619][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.765283][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.795621][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.811831][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.825588][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.834326][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.866465][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.906903][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.915206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.924293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.934427][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.941694][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.950658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.961435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.970082][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.977157][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.984942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.996478][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.026037][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.055756][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.064327][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.072415][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.080510][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.088699][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.100409][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.111450][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.137076][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.146413][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.155477][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.164494][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.177102][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.186050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.195630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.204426][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.211502][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.234356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.242917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.252567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.261903][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.269017][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.277079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.285918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.295008][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.302096][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.310439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.323693][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.343816][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.354429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.362864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.372257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.381172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.390961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.399749][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.406799][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.414614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.423478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.436128][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.447890][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.474034][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.490288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.504243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.514978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.530616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.539750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.549636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.559616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.569011][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.576095][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.584546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.593595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.602278][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.609394][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.622515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.630684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.639982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.675719][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.684076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.695048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.704658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.713869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.723583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.734535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.743317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.752082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.760727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.769362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.778787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.787426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.795118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.802937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.812449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.822271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.830455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.841721][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.855966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.866051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.875384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.887062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.909215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.918767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.927215][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.934321][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.942188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.951072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.960275][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.967387][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.975527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.983126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.990710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.008765][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.020580][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.038337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.047747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.056240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.068410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.076642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.085255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.094060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.102401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.111162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.120477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.129423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.139257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.150595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.169089][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.184265][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.198985][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.209956][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.220629][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.228151][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 60.234547][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 60.256687][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.262786][ T4243] Bluetooth: hci2: command 0x041b tx timeout [ 60.288834][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.293130][ T4243] Bluetooth: hci3: command 0x041b tx timeout [ 60.304234][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.315969][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.348317][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.356784][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.366806][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 60.408311][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.416998][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.435604][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.444180][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.463353][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.488310][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.526569][ T4184] device veth0_vlan entered promiscuous mode [ 60.565304][ T4184] device veth1_vlan entered promiscuous mode [ 60.613961][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.622947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.632481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.640948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.649669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.657084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.668580][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.695318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.710712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.720149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.729959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.745535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.756457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.785702][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.809597][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.839207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.849364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.857868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.866562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.876844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.885687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.894291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.902310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.911263][ T4196] device veth0_vlan entered promiscuous mode [ 60.936470][ T4184] device veth0_macvtap entered promiscuous mode [ 60.956151][ T4182] device veth0_vlan entered promiscuous mode [ 60.973938][ T4196] device veth1_vlan entered promiscuous mode [ 60.983871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.995457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.006751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.019007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.032320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.040566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.050172][ T4184] device veth1_macvtap entered promiscuous mode [ 61.061243][ T4182] device veth1_vlan entered promiscuous mode [ 61.082000][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.091278][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.099931][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.109763][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.118901][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.140971][ T4188] device veth0_vlan entered promiscuous mode [ 61.155546][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.165416][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.173858][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.182831][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.192188][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.202134][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.225351][ T4188] device veth1_vlan entered promiscuous mode [ 61.235300][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.243507][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.251613][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.260019][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.268512][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.276961][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.312195][ T4196] device veth0_macvtap entered promiscuous mode [ 61.326089][ T4196] device veth1_macvtap entered promiscuous mode [ 61.336732][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.346463][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.355673][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.365201][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.383320][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.392079][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.401219][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.411780][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.421391][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.431533][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.439686][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.456977][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.467970][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.480444][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.496468][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.511389][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.522612][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.539562][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.548652][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.559135][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.568128][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.581544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.590958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.600271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.609246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.620358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.629006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.637753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.646165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.679686][ T4182] device veth0_macvtap entered promiscuous mode [ 61.700907][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.709814][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.719782][ T4188] device veth0_macvtap entered promiscuous mode [ 61.730871][ T4181] device veth0_vlan entered promiscuous mode [ 61.771928][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.782523][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.793548][ T4188] device veth1_macvtap entered promiscuous mode [ 61.810249][ T4182] device veth1_macvtap entered promiscuous mode [ 61.825508][ T4181] device veth1_vlan entered promiscuous mode [ 61.869588][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.883522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.893763][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.905745][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.916953][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.938531][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.949729][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.958394][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.966863][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.977865][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.990023][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.000065][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.010816][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.021973][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.030819][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.041550][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.051985][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.064342][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.074209][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.084683][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.096150][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.114711][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.129409][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.131724][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.143300][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.146324][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.164065][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.173749][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.185070][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.194145][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.203085][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.212216][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.231997][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.243294][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.253264][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.263868][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.273999][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.284828][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.295893][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.303798][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 62.310932][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 62.317968][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 62.326407][ T467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.331860][ T4181] device veth0_macvtap entered promiscuous mode [ 62.344971][ T467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.350845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.363764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.372843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.380969][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 62.387468][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 62.390474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.402502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.413749][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.422981][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.431965][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440893][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.481825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.488638][ T467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.504554][ T467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.520776][ T4181] device veth1_macvtap entered promiscuous mode [ 62.530770][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.541539][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.553983][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.564652][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.574155][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.642201][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.653653][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.672844][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.685231][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.695525][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.709191][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.719419][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.730370][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.741957][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.751716][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.757743][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.770619][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.782407][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.788759][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.793380][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.810105][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.820667][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.830765][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.841444][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.853237][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.869097][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.879221][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.888651][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.896348][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.905299][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.932862][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.943997][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.953383][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.962362][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.045274][ T467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.066799][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.080587][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.106915][ T4289] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 63.120305][ T467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.120940][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.139317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.145606][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.150881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.175587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.258850][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.266847][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.285653][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.336114][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.392944][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.609794][ T4298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.635075][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 64.643053][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 64.643619][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.650463][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 64.662881][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 64.873955][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 68.043486][ T4330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.883666][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.893079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.902076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.911045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.920010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.928982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.938031][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.031445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.095343][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.104375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.557490][ T4354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.102611][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.109553][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.497360][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.727725][ T4381] netlink: 39 bytes leftover after parsing attributes in process `syz.3.17'. [ 72.767173][ T4379] loop2: detected capacity change from 0 to 7 [ 72.803536][ T4287] Dev loop2: unable to read RDB block 7 [ 72.831543][ T4287] loop2: unable to read partition table [ 72.855985][ T4287] loop2: partition table beyond EOD, truncated [ 72.882369][ T4379] Dev loop2: unable to read RDB block 7 [ 72.897614][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.917371][ T4379] loop2: unable to read partition table [ 72.917827][ T4257] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 72.925498][ T4379] loop2: partition table beyond EOD, truncated [ 72.964015][ T4379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.988416][ T4257] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 73.037265][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.074634][ T4257] usb 1-1: config 0 descriptor?? [ 73.090799][ T3560] Dev loop2: unable to read RDB block 7 [ 73.107353][ T3560] loop2: unable to read partition table [ 73.121404][ T3560] loop2: partition table beyond EOD, truncated [ 73.582751][ T4387] loop3: detected capacity change from 0 to 32768 [ 73.617416][ T4257] usbhid 1-1:0.0: can't add hid device: -71 [ 73.623956][ T4257] usbhid: probe of 1-1:0.0 failed with error -71 [ 73.646332][ T4257] usb 1-1: USB disconnect, device number 2 [ 73.704207][ T4345] loop3: p9 p11 p16 [ 73.746871][ T4387] loop3: p9 p11 p16 [ 74.950203][ T4333] libceph: connect (1)[c::]:6789 error -101 [ 74.956711][ T4333] libceph: mon0 (1)[c::]:6789 connect error [ 75.828394][ T4333] libceph: connect (1)[c::]:6789 error -101 [ 75.834502][ T4333] libceph: mon0 (1)[c::]:6789 connect error [ 75.869667][ T4413] ceph: No mds server is up or the cluster is laggy [ 76.276968][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 76.294322][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 76.444975][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 77.141943][ T4454] netlink: 'syz.4.38': attribute type 83 has an invalid length. [ 77.299906][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 77.313104][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 77.327793][ T4461] udevd[4461]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 79.291536][ T4539] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.022560][ T4542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.342339][ T1111] cfg80211: failed to load regulatory.db [ 81.471088][ T4570] syz.1.77 (4570) used greatest stack depth: 20712 bytes left [ 81.964876][ T4591] ======================================================= [ 81.964876][ T4591] WARNING: The mand mount option has been deprecated and [ 81.964876][ T4591] and is ignored by this kernel. Remove the mand [ 81.964876][ T4591] option from the mount to silence this warning. [ 81.964876][ T4591] ======================================================= [ 82.265128][ T4595] binder: 4592:4595 ioctl c0306201 0 returned -14 [ 82.932101][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 82.955708][ T4602] netem: unknown loss type 0 [ 82.988504][ T4602] netem: change failed [ 84.548925][ T4632] binder: 4624:4632 ioctl c0306201 0 returned -14 [ 85.307759][ T4637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.583876][ T4637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.609314][ T4657] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 85.715387][ T4637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.898998][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 85.970683][ T4637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.704243][ T4668] binder: 4664:4668 ioctl c0306201 0 returned -14 [ 86.924389][ T4637] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.942150][ T4637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.960029][ T4637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.974572][ T4637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.261696][ T4692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.124'. [ 87.770061][ T4696] Zero length message leads to an empty skb [ 88.929400][ T4703] nbd: must specify a size in bytes for the device [ 90.016885][ T4708] 9pnet_virtio: no channels available for device ./file0 [ 91.817395][ T13] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.276050][ T4754] hub 6-0:1.0: USB hub found [ 92.282977][ T4754] hub 6-0:1.0: 1 port detected [ 92.928722][ T13] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 92.950083][ T13] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 92.985947][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.237977][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.377497][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.494498][ T13] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.550580][ T13] usb 5-1: Product: syz [ 93.575063][ T13] usb 5-1: Manufacturer: syz [ 93.603068][ T13] usb 5-1: SerialNumber: syz [ 93.841905][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 93.857596][ T13] usb 5-1: config 0 descriptor?? [ 93.937747][ T13] usb 5-1: can't set config #0, error -71 [ 93.956669][ T13] usb 5-1: USB disconnect, device number 2 [ 95.335653][ T1111] usb 2-1: config 0 has no interfaces? [ 95.557507][ T1111] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.856373][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.398854][ T1111] usb 2-1: Product: syz [ 96.403064][ T1111] usb 2-1: Manufacturer: syz [ 96.443372][ T1111] usb 2-1: SerialNumber: syz [ 96.493224][ T4782] binder: 4781:4782 ioctl 40046205 0 returned -22 [ 96.493289][ T1111] usb 2-1: config 0 descriptor?? [ 96.547484][ T1111] usb 2-1: can't set config #0, error -71 [ 96.568389][ T1111] usb 2-1: USB disconnect, device number 2 [ 101.135468][ T4831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 101.433346][ T26] audit: type=1326 audit(1765143359.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352107749 code=0x7ffc0000 [ 101.608533][ T26] audit: type=1326 audit(1765143359.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fc352107749 code=0x7ffc0000 [ 101.685662][ T26] audit: type=1326 audit(1765143359.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352107749 code=0x7ffc0000 [ 104.125625][ T4876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.186'. [ 104.365769][ T4878] overlayfs: overlapping lowerdir path [ 105.512191][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 106.424921][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.453710][ T4906] kvm [4905]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 107.053291][ T4926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.201'. [ 110.084433][ T4941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.096915][ T4941] UDF-fs: Scanning with blocksize 512 failed [ 110.128149][ T4941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.157387][ T4941] UDF-fs: Scanning with blocksize 1024 failed [ 110.170326][ T4941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.178808][ T4941] UDF-fs: Scanning with blocksize 2048 failed [ 110.217225][ T4941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.225993][ T4941] UDF-fs: Scanning with blocksize 4096 failed [ 110.863908][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.540678][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 112.473093][ T4968] vivid-008: ================= START STATUS ================= [ 112.483354][ T4968] vivid-008: Generate PTS: true [ 112.489049][ T4968] vivid-008: Generate SCR: true [ 112.494046][ T4968] tpg source WxH: 640x360 (Y'CbCr) [ 112.494416][ T4966] 9pnet: Insufficient options for proto=fd [ 112.499208][ T4968] tpg field: 1 [ 112.499238][ T4968] tpg crop: 640x360@0x0 [ 112.512771][ T4968] tpg compose: 640x360@0x0 [ 112.517269][ T4968] tpg colorspace: 8 [ 112.521086][ T4968] tpg transfer function: 0/0 [ 112.526141][ T4968] tpg Y'CbCr encoding: 0/0 [ 112.530917][ T4968] tpg quantization: 0/0 [ 112.535187][ T4968] tpg RGB range: 0/2 [ 112.545594][ T4968] vivid-008: ================== END STATUS ================== [ 113.375741][ T4973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'. [ 114.243361][ T4996] netlink: 'syz.2.224': attribute type 15 has an invalid length. [ 114.487471][ T26] audit: type=1326 audit(1765143372.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 114.846258][ T26] audit: type=1326 audit(1765143372.850:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 114.937100][ T26] audit: type=1326 audit(1765143372.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 114.964513][ T26] audit: type=1326 audit(1765143372.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 114.992154][ T26] audit: type=1326 audit(1765143372.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 115.016774][ T26] audit: type=1326 audit(1765143372.860:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 115.042804][ T26] audit: type=1326 audit(1765143372.860:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 115.133443][ T26] audit: type=1326 audit(1765143372.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 115.387315][ T4324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.470369][ T26] audit: type=1326 audit(1765143372.860:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 115.871415][ T26] audit: type=1326 audit(1765143372.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7fc00000 [ 116.334947][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 116.567291][ T4324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 116.757554][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 116.767434][ T4324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 116.777411][ T4324] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 116.786820][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.798807][ T4324] usb 3-1: config 0 descriptor?? [ 117.591174][ T4324] hdpvr 3-1:0.0: unexpected answer of status request, len 39 [ 117.607670][ T5025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 117.710010][ T4324] hdpvr 3-1:0.0: device init failed [ 117.789788][ T4324] hdpvr: probe of 3-1:0.0 failed with error -12 [ 117.890851][ T21] usb 3-1: USB disconnect, device number 2 [ 118.383408][ T5045] netlink: 'syz.3.239': attribute type 3 has an invalid length. [ 118.422732][ T5045] netlink: 'syz.3.239': attribute type 3 has an invalid length. [ 119.294785][ T5054] syz.4.242[5054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.294887][ T5054] syz.4.242[5054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.385161][ T5054] syz.4.242 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.608910][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.246'. [ 121.473085][ T5074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 121.732800][ T5076] kvm [5075]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2f00000000 [ 121.820500][ T5076] kvm [5075]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9e00000000 [ 121.849430][ T5076] kvm [5075]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x9e00007a00 [ 121.924406][ T5090] misc userio: No port type given on /dev/userio [ 123.227510][ T5106] tmpfs: Unknown parameter 'usrquota' [ 125.127197][ C0] sched: RT throttling activated [ 125.452871][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.662309][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 125.988177][ T5134] netlink: 300 bytes leftover after parsing attributes in process `syz.2.267'. [ 126.003153][ T5134] netlink: 300 bytes leftover after parsing attributes in process `syz.2.267'. [ 126.227445][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 126.375654][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.394908][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.411385][ T1325] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 126.422260][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.570678][ T1325] usb 4-1: config 0 descriptor?? [ 127.355090][ T1325] sony 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 127.374023][ T1325] sony 0003:054C:0BA0.0001: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 127.391408][ T1325] sony 0003:054C:0BA0.0001: failed to claim input [ 127.418093][ T7] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 127.431240][ T7] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 127.445116][ T5161] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.462854][ T7] usb 2-1: config 150 has no interface number 0 [ 127.484329][ T7] usb 2-1: config 150 interface 204 has no altsetting 0 [ 127.643153][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 127.643177][ T26] audit: type=1326 audit(1765143386.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz.4.277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03926d0749 code=0x0 [ 127.717509][ T7] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 127.729847][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.748440][ T7] usb 2-1: Product: syz [ 127.757093][ T7] usb 2-1: Manufacturer: syz [ 127.762010][ T7] usb 2-1: SerialNumber: syz [ 128.074052][ T7] xr_serial 2-1:150.204: skipping garbage [ 128.088837][ T7] xr_serial 2-1:150.204: xr_serial converter detected [ 128.137395][ T7] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 128.155374][ T7] xr_serial: probe of ttyUSB0 failed with error -71 [ 128.192039][ T7] usb 2-1: USB disconnect, device number 3 [ 128.233667][ T7] xr_serial 2-1:150.204: device disconnected [ 128.308509][ T5172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 129.223002][ T1325] usb 4-1: USB disconnect, device number 2 [ 129.433434][ T5176] can: request_module (can-proto-5) failed. [ 131.130604][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.382035][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 131.567623][ T1325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.297761][ T1325] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 132.306894][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.366772][ T1325] usb 3-1: Product: syz [ 132.377477][ T1325] usb 3-1: Manufacturer: syz [ 132.387004][ T1325] usb 3-1: SerialNumber: syz [ 132.400607][ T1325] usb 3-1: config 0 descriptor?? [ 132.458213][ T1325] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 132.540171][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.546532][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.558786][ T1111] usb 3-1: USB disconnect, device number 3 [ 132.587316][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.704872][ T26] audit: type=1326 audit(1765143391.100:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80320f4749 code=0x0 [ 132.977482][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.015439][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.041016][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.207618][ T7] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 133.227777][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.247687][ T7] usb 2-1: Product: syz [ 133.256194][ T7] usb 2-1: Manufacturer: syz [ 133.266330][ T7] usb 2-1: SerialNumber: syz [ 133.282300][ T7] usb 2-1: config 0 descriptor?? [ 133.534311][ T7] usb 2-1: USB disconnect, device number 4 [ 133.587362][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.848461][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 133.967867][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.985043][ T1325] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 133.994213][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.004341][ T1325] usb 5-1: config 0 descriptor?? [ 134.052380][ T1325] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 136.477403][ T3545] bcm5974 5-1:0.0: could not read from device [ 136.538058][ T1325] bcm5974 5-1:0.0: could not read from device [ 136.577488][ T3545] bcm5974 5-1:0.0: could not read from device [ 136.597360][ T1325] input: failed to attach handler mousedev to device input6, error: -5 [ 136.847509][ T3545] bcm5974 5-1:0.0: could not read from device [ 137.602488][ T1325] usb 5-1: USB disconnect, device number 3 [ 137.633398][ T3545] bcm5974 5-1:0.0: could not read from device [ 137.765725][ T5332] binder: 5331:5332 ioctl 80089418 2000000000c0 returned -22 [ 137.805654][ T5332] binder: 5331:5332 ioctl 81f8943c 2000000003c0 returned -22 [ 137.829278][ T5332] binder: 5331:5332 ioctl c0c89425 2000000005c0 returned -22 [ 137.883057][ T5341] capability: warning: `syz.4.337' uses 32-bit capabilities (legacy support in use) [ 139.861529][ T5348] program syz.1.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.779940][ T5399] netlink: 'syz.3.357': attribute type 15 has an invalid length. [ 144.665727][ T5404] 9pnet_virtio: no channels available for device ./file0/file0/.. [ 145.381592][ T5410] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.108067][ T5460] serio: Serial port ptm0 [ 154.347364][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 154.917870][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.992916][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.218065][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 155.249160][ T5543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.303142][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.379457][ T7] usb 2-1: config 0 descriptor?? [ 155.453610][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 155.479710][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 155.696039][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 155.829896][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.940268][ T7] usb 2-1: media controller created [ 156.030333][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.374610][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 156.464505][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 156.693842][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 156.950921][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 157.060176][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 157.257698][ T4294] dvb-usb: bulk message failed: -22 (1/0) [ 157.324073][ T7] usb 2-1: USB disconnect, device number 5 [ 157.379006][ T4294] dvb-usb: error while querying for an remote control event. [ 157.939415][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 158.437476][ T4294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.747459][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 158.877726][ T4294] usb 3-1: config 0 has no interfaces? [ 158.883833][ T4294] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 158.996566][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.130267][ T4294] usb 3-1: config 0 descriptor?? [ 160.846209][ T4193] Bluetooth: hci4: link tx timeout [ 160.854008][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.147332][ T4193] Bluetooth: hci4: link tx timeout [ 161.152491][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.182395][ T4294] usb 3-1: USB disconnect, device number 4 [ 162.714754][ T5598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.947371][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 163.913851][ T5617] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 164.577431][ T4256] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.857822][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 165.117617][ T4256] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 165.609272][ T5643] loop9: detected capacity change from 0 to 7 [ 165.813142][ T5643] Dev loop9: unable to read RDB block 7 [ 165.844085][ T5643] loop9: unable to read partition table [ 165.877510][ T5643] loop9: partition table beyond EOD, truncated [ 165.909615][ T5643] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.037885][ T4256] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.047299][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.055320][ T4256] usb 2-1: Product: syz [ 166.072475][ T4193] Bluetooth: min 12 > max 0 [ 166.097501][ T4256] usb 2-1: Manufacturer: syz [ 166.124308][ T4256] usb 2-1: SerialNumber: syz [ 166.292223][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.302739][ T4256] usb 2-1: config 0 descriptor?? [ 166.617434][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 166.747476][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.759048][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.770548][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 166.783638][ T13] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 166.792817][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.803903][ T13] usb 3-1: config 0 descriptor?? [ 167.322874][ T13] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 167.558729][ T13] usb 3-1: USB disconnect, device number 5 [ 167.626346][ T7] usb 2-1: USB disconnect, device number 6 [ 167.707573][ T5679] fido_id[5679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 167.730213][ T5688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.454'. [ 168.302833][ T13] Bluetooth: hci2: command 0x2021 tx timeout [ 168.421892][ T5689] overlayfs: failed to resolve './file0': -2 [ 169.475343][ T4256] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 170.272047][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.807409][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 171.933110][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 171.979587][ T26] audit: type=1326 audit(1765143430.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.017386][ T4256] usb 5-1: device descriptor read/all, error -71 [ 172.025924][ T4193] Bluetooth: hci4: link tx timeout [ 172.031266][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.047050][ T4193] Bluetooth: hci4: link tx timeout [ 172.052626][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.061259][ T4193] Bluetooth: hci4: link tx timeout [ 172.066390][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.075386][ T4193] Bluetooth: hci4: link tx timeout [ 172.080880][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.089124][ T4193] Bluetooth: hci4: link tx timeout [ 172.094253][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.102299][ T4193] Bluetooth: hci4: link tx timeout [ 172.107461][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.109380][ T26] audit: type=1326 audit(1765143430.380:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.115141][ T4193] Bluetooth: hci4: link tx timeout [ 172.144154][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.163357][ T4193] Bluetooth: hci4: link tx timeout [ 172.168621][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.176279][ T4193] Bluetooth: hci4: link tx timeout [ 172.181659][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.189834][ T26] audit: type=1326 audit(1765143430.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.212227][ T26] audit: type=1326 audit(1765143430.400:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.237428][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 172.246490][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.258755][ T26] audit: type=1326 audit(1765143430.400:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.281278][ T13] usb 2-1: Product: syz [ 172.285805][ T13] usb 2-1: Manufacturer: syz [ 172.290559][ T13] usb 2-1: SerialNumber: syz [ 172.298474][ T13] usb 2-1: config 0 descriptor?? [ 172.366610][ T26] audit: type=1326 audit(1765143430.400:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.590131][ T26] audit: type=1326 audit(1765143430.400:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.612661][ T26] audit: type=1326 audit(1765143430.400:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.647700][ T26] audit: type=1326 audit(1765143430.400:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 172.768369][ T26] audit: type=1326 audit(1765143430.400:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc066fd7749 code=0x7ffc0000 [ 173.137915][ T4294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.677769][ T4294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.900610][ T4294] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 173.990930][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.046820][ T5771] batman_adv: batadv0: Adding interface: dummy0 [ 174.077333][ T5771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.087054][ T13] usb 2-1: USB disconnect, device number 7 [ 174.116190][ T4294] usb 1-1: config 0 descriptor?? [ 174.188039][ T5771] batman_adv: batadv0: Interface activated: dummy0 [ 174.199816][ T4294] pwc: Askey VC010 type 2 USB webcam detected. [ 174.334814][ T5779] batadv0: mtu less than device minimum [ 177.152938][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.165955][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.178600][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.191304][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.204000][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.216649][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.229489][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.242523][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.255187][ T5779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.807264][ T4193] Bluetooth: hci4: link tx timeout [ 177.812590][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.829119][ T4294] pwc: recv_control_msg error -71 req 02 val 2b00 [ 177.838062][ T4193] Bluetooth: hci4: link tx timeout [ 177.843259][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.852093][ T4193] Bluetooth: hci4: link tx timeout [ 177.857287][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.864274][ T4294] pwc: recv_control_msg error -71 req 02 val 2700 [ 177.907557][ T4294] pwc: recv_control_msg error -71 req 02 val 2c00 [ 177.959053][ T4294] pwc: recv_control_msg error -71 req 04 val 1000 [ 178.173579][ T4294] pwc: recv_control_msg error -71 req 04 val 1300 [ 178.197311][ T4294] pwc: recv_control_msg error -71 req 04 val 1400 [ 178.223529][ T4294] pwc: recv_control_msg error -71 req 02 val 2000 [ 178.267093][ T5801] binder: 5799:5801 ioctl 40046205 0 returned -22 [ 178.287383][ T4294] pwc: recv_control_msg error -71 req 02 val 2100 [ 178.317589][ T4294] pwc: recv_control_msg error -71 req 04 val 1500 [ 178.358676][ T4294] pwc: recv_control_msg error -71 req 02 val 2500 [ 178.407531][ T4294] pwc: recv_control_msg error -71 req 02 val 2400 [ 178.437380][ T4294] pwc: recv_control_msg error -71 req 02 val 2600 [ 178.547821][ T4294] pwc: recv_control_msg error -71 req 02 val 2900 [ 178.626330][ T4294] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.173236][ T4294] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.217261][ T4294] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.236981][ T4294] pwc: Registered as video103. [ 180.262733][ T4294] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 180.293336][ T5815] tipc: Started in network mode [ 180.337345][ T4256] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.337423][ T4294] usb 1-1: USB disconnect, device number 3 [ 180.351996][ T5815] tipc: Node identity , cluster identity 4711 [ 180.407606][ T5815] tipc: Failed to obtain node identity [ 180.413153][ T5815] tipc: Enabling of bearer rejected, failed to enable media [ 180.587378][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 180.697449][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 180.697472][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 180.704326][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 180.709710][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.753615][ T5823] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.781773][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 180.867626][ T4256] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.912532][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.932991][ T4256] usb 2-1: Product: syz [ 180.959283][ T4256] usb 2-1: Manufacturer: syz [ 180.967949][ T4256] usb 2-1: SerialNumber: syz [ 180.986600][ T4256] usb 2-1: config 0 descriptor?? [ 181.149700][ T4256] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.176902][ T4256] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 184.563667][ T4292] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 184.577605][ T4292] Bluetooth: hci1: Injecting HCI hardware error event [ 184.617687][ T4189] Bluetooth: hci1: hardware error 0x00 [ 184.687346][ T4256] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 184.847098][ T5847] net_ratelimit: 10 callbacks suppressed [ 184.847115][ T5847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 185.537481][ T4256] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.546208][ T4256] em28xx 2-1:0.0: board has no eeprom [ 185.717436][ T4256] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.755944][ T4256] em28xx 2-1:0.0: dvb set to bulk mode. [ 185.786499][ T4256] usb 2-1: USB disconnect, device number 8 [ 185.817788][ T4256] em28xx 2-1:0.0: Disconnecting em28xx [ 185.825231][ T4292] em28xx 2-1:0.0: Binding DVB extension [ 185.980383][ T4292] em28xx 2-1:0.0: Registering input extension [ 186.019669][ T4256] em28xx 2-1:0.0: Closing input extension [ 186.104675][ T4256] em28xx 2-1:0.0: Freeing device [ 187.707482][ T4256] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.027480][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 188.217456][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.587357][ T4256] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.596457][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.628281][ T4256] usb 5-1: Product: syz [ 188.659979][ T4256] usb 5-1: Manufacturer: syz [ 188.788186][ T4256] usb 5-1: SerialNumber: syz [ 189.052984][ T4256] usb 5-1: config 0 descriptor?? [ 189.869810][ T4256] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.923086][ T4256] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 190.932287][ T4256] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 193.318427][ T4256] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.371230][ T4256] em28xx 5-1:0.0: board has no eeprom [ 194.522707][ T4256] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.538146][ T5938] netlink: 5 bytes leftover after parsing attributes in process `syz.2.540'. [ 194.552359][ T4256] em28xx 5-1:0.0: dvb set to bulk mode. [ 194.582714][ T4256] usb 5-1: USB disconnect, device number 6 [ 194.768233][ T4256] em28xx 5-1:0.0: Disconnecting em28xx [ 194.775613][ T4243] em28xx 5-1:0.0: Binding DVB extension [ 194.867880][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.874369][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.098171][ T4243] em28xx 5-1:0.0: Registering input extension [ 197.368793][ T5961] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.560087][ T4256] em28xx 5-1:0.0: Closing input extension [ 197.571459][ T4256] em28xx 5-1:0.0: Freeing device [ 197.647260][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 197.741206][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.797392][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.017342][ T5961] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 198.033865][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.042621][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 198.089105][ T5961] usb 3-1: Product: syz [ 198.093408][ T5961] usb 3-1: Manufacturer: syz [ 198.098654][ T5961] usb 3-1: SerialNumber: syz [ 198.178636][ T5961] usb 3-1: config 0 descriptor?? [ 198.237486][ T4236] usb 2-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.300926][ T5961] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.310792][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.318054][ T4236] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 198.327368][ T5961] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 198.333722][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.355201][ T4236] usb 2-1: config 0 descriptor?? [ 200.407067][ T5961] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 200.497934][ T4236] usbhid 2-1:0.0: can't add hid device: -71 [ 200.510394][ T4236] usbhid: probe of 2-1:0.0 failed with error -71 [ 200.554036][ T4236] usb 2-1: USB disconnect, device number 9 [ 200.787802][ T5961] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 201.305785][ T5961] em28xx 3-1:0.0: board has no eeprom [ 201.418917][ T5961] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 201.427429][ T5961] em28xx 3-1:0.0: dvb set to bulk mode. [ 201.483150][ T5961] usb 3-1: USB disconnect, device number 6 [ 201.493387][ T7] em28xx 3-1:0.0: Binding DVB extension [ 201.569320][ T5961] em28xx 3-1:0.0: Disconnecting em28xx [ 201.610894][ T7] em28xx 3-1:0.0: Registering input extension [ 201.622462][ T5961] em28xx 3-1:0.0: Closing input extension [ 201.657785][ T5961] em28xx 3-1:0.0: Freeing device [ 202.937808][ T4256] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.594901][ T5961] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 204.317353][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 204.447374][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.697831][ T5961] usb 3-1: device descriptor read/all, error -71 [ 205.336005][ T4256] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.373753][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.458401][ T4256] usb 2-1: Product: syz [ 205.693537][ T4256] usb 2-1: Manufacturer: syz [ 206.338357][ T6093] infiniband syz2: set down [ 206.343359][ T6093] infiniband syz2: added ipvlan0 [ 207.078358][ T6093] infiniband syz2: Couldn't open port 1 [ 207.115519][ T6093] RDS/IB: syz2: added [ 207.149232][ T4256] usb 2-1: config 0 descriptor?? [ 207.162595][ T6093] smc: adding ib device syz2 with port count 1 [ 207.171384][ T6093] smc: ib device syz2 port 1 has pnetid [ 208.097311][ T4256] usb 2-1: can't set config #0, error -71 [ 208.124449][ T4256] usb 2-1: USB disconnect, device number 10 [ 208.149912][ T4461] udevd[4461]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 210.486792][ T6109] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.817346][ T4294] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.867351][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.237559][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.266121][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.393215][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 211.417456][ T21] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 211.450766][ T21] usb 2-1: Manufacturer: syz [ 211.486377][ T21] usb 2-1: config 0 descriptor?? [ 212.791805][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.807652][ T4294] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 212.809913][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.835198][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.846152][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.851001][ T4294] usb 3-1: Product: syz [ 212.867391][ T6133] netlink: 120 bytes leftover after parsing attributes in process `syz.0.597'. [ 212.867898][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.888439][ T4294] usb 3-1: Manufacturer: syz [ 212.890492][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.893083][ T4294] usb 3-1: SerialNumber: syz [ 212.907326][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.914313][ T21] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 212.926522][ T21] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 212.932785][ T4294] usb 3-1: config 0 descriptor?? [ 213.221421][ T4294] usb 3-1: USB disconnect, device number 9 [ 213.537257][ T4243] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.807297][ T4243] usb 5-1: Using ep0 maxpacket: 16 [ 213.953001][ T21] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 213.960748][ T21] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 213.973380][ T21] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -5 [ 214.096286][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.017502][ T4243] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.039030][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.103294][ T6155] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 216.116914][ T4243] usb 5-1: Product: syz [ 216.135271][ T4243] usb 5-1: Manufacturer: syz [ 216.162554][ T4243] usb 5-1: SerialNumber: syz [ 216.174842][ T6155] netlink: 2 bytes leftover after parsing attributes in process `syz.2.602'. [ 216.186963][ T4243] usb 5-1: config 0 descriptor?? [ 216.192023][ T6155] device team0 entered promiscuous mode [ 216.192093][ T6155] device team_slave_0 entered promiscuous mode [ 216.192328][ T6155] device team_slave_1 entered promiscuous mode [ 216.220349][ T6155] bridge0: port 3(team0) entered blocking state [ 216.227075][ T6155] bridge0: port 3(team0) entered disabled state [ 216.242704][ T6155] bridge0: port 3(team0) entered blocking state [ 216.249538][ T6155] bridge0: port 3(team0) entered forwarding state [ 216.261800][ T4256] usb 2-1: USB disconnect, device number 11 [ 216.264593][ T6159] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 216.342871][ T4243] usb 5-1: can't set config #0, error -71 [ 216.366544][ T4243] usb 5-1: USB disconnect, device number 7 [ 217.287578][ T4243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.645485][ T4243] usb 4-1: Using ep0 maxpacket: 32 [ 218.701766][ T4243] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.715126][ T4243] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.721838][ T4243] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 218.730955][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.741483][ T4243] usb 4-1: config 0 descriptor?? [ 218.797596][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.615'. [ 219.019477][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.107333][ T4243] usbhid 4-1:0.0: can't add hid device: -71 [ 219.113865][ T4243] usbhid: probe of 4-1:0.0 failed with error -71 [ 219.143019][ T4243] usb 4-1: USB disconnect, device number 3 [ 219.287421][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 219.418628][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 219.626620][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.644284][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.673456][ T21] usb 5-1: Product: syz [ 219.684042][ T21] usb 5-1: Manufacturer: syz [ 219.695331][ T21] usb 5-1: SerialNumber: syz [ 219.855105][ T21] usb 5-1: config 0 descriptor?? [ 220.020131][ T21] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 220.042820][ T21] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 220.650819][ T4189] Bluetooth: hci4: link tx timeout [ 220.655991][ T4189] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.663881][ T4189] Bluetooth: hci4: link tx timeout [ 220.669057][ T4189] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.097365][ T4294] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.227354][ T21] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 221.347317][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 222.067620][ T4294] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.092812][ T4294] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.136694][ T4294] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.207355][ T4294] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.261437][ T4294] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.292807][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.297442][ T21] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 222.341979][ T21] em28xx 5-1:0.0: board has no eeprom [ 222.594548][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 222.626841][ T6220] udc-core: couldn't find an available UDC or it's busy [ 222.682261][ T6220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.697506][ T4243] Bluetooth: hci4: command 0x0406 tx timeout [ 222.846244][ T4294] usb 4-1: GET_CAPABILITIES returned 0 [ 222.852163][ T4294] usbtmc 4-1:16.0: can't read capabilities [ 223.014718][ T21] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 223.023617][ T21] em28xx 5-1:0.0: dvb set to bulk mode. [ 223.297549][ T6191] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 223.760944][ T4243] em28xx 5-1:0.0: Binding DVB extension [ 223.767331][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.780595][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.789689][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.798756][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.807835][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.816901][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.825970][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.835201][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.844293][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.853365][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.862557][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.871632][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.880710][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.889760][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.898800][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.907868][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.954952][ T4294] usb 5-1: USB disconnect, device number 8 [ 224.078133][ T4294] em28xx 5-1:0.0: Disconnecting em28xx [ 224.144935][ T5868] usb 4-1: USB disconnect, device number 4 [ 224.896325][ T4243] em28xx 5-1:0.0: Registering input extension [ 224.929953][ T4294] em28xx 5-1:0.0: Closing input extension [ 224.952246][ T4294] em28xx 5-1:0.0: Freeing device [ 226.997369][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 227.247369][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 227.397639][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.437659][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.478528][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.527217][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.591661][ T7] usb 3-1: config 0 descriptor?? [ 227.658152][ T7] hub 3-1:0.0: USB hub found [ 227.877390][ T7] hub 3-1:0.0: 1 port detected [ 230.638588][ T7] usb 3-1: USB disconnect, device number 10 [ 230.750723][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 230.750738][ T26] audit: type=1326 audit(1765143489.150:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80320f4749 code=0x0 [ 231.268697][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.313737][ T26] audit: type=1326 audit(1765143489.710:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.4.656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03926d0749 code=0x0 [ 231.557388][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 231.605451][ T6325] input: syz0 as /devices/virtual/input/input15 [ 231.772884][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.993358][ T7] usb 3-1: config 0 has an invalid interface number: 36 but max is 1 [ 232.013556][ T7] usb 3-1: config 0 has an invalid interface number: 5 but max is 1 [ 232.022071][ T7] usb 3-1: config 0 has an invalid interface number: 3 but max is 1 [ 232.030897][ T7] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 232.040624][ T7] usb 3-1: config 0 has no interface number 0 [ 232.047442][ T7] usb 3-1: config 0 has no interface number 1 [ 232.054590][ T7] usb 3-1: config 0 has no interface number 2 [ 232.080362][ T7] usb 3-1: config 0 interface 36 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 232.550340][ T7] usb 3-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 232.562627][ T7] usb 3-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 232.584826][ T7] usb 3-1: config 0 interface 36 has no altsetting 0 [ 232.592841][ T7] usb 3-1: config 0 interface 5 has no altsetting 0 [ 232.601171][ T4294] Bluetooth: hci4: command 0x0405 tx timeout [ 232.883035][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e3fc00: rx timeout, send abort [ 233.036066][ T6346] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 233.048358][ T7] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 233.074556][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.094938][ T7] usb 3-1: Product: syz [ 233.113939][ T6346] (unnamed net_device) (uninitialized): peer notification delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 233.127977][ T7] usb 3-1: Manufacturer: syz [ 233.132614][ T7] usb 3-1: SerialNumber: syz [ 233.191342][ T7] usb 3-1: config 0 descriptor?? [ 233.243489][ T6349] binder: 6348:6349 ioctl 40046205 0 returned -22 [ 233.383852][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e3e400: rx timeout, send abort [ 233.392826][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e3fc00: abort rx timeout. Force session deactivation [ 233.516178][ T6355] netlink: 92 bytes leftover after parsing attributes in process `syz.0.667'. [ 233.892186][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e3e400: abort rx timeout. Force session deactivation [ 236.354170][ T7] usb 3-1: USB disconnect, device number 11 [ 236.421662][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 236.778836][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.797287][ T4294] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 237.218920][ T4294] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.228487][ T7] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 237.247308][ T7] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 237.258241][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.288090][ T7] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 237.304309][ T4294] usb 2-1: config 0 descriptor?? [ 237.324340][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.348546][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.369821][ T4294] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 237.449834][ T4287] udevd[4287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.36/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.753817][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.5/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 237.773103][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 237.882731][ T4294] usb 2-1: USB disconnect, device number 12 [ 237.929932][ T4243] usb 3-1: USB disconnect, device number 12 [ 242.319174][ T4189] Bluetooth: hci0: Unknown advertising packet type: 0x6678 [ 242.319480][ T4189] ================================================================== [ 242.335196][ T4189] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 242.343032][ T4189] Read of size 1 at addr ffff888020fd2401 by task kworker/u5:2/4189 [ 242.351013][ T4189] [ 242.353349][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 242.360902][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.370958][ T4189] Workqueue: hci0 hci_rx_work [ 242.375655][ T4189] Call Trace: [ 242.379027][ T4189] [ 242.381979][ T4189] dump_stack_lvl+0x168/0x230 [ 242.386770][ T4189] ? show_regs_print_info+0x20/0x20 [ 242.391980][ T4189] ? load_image+0x3b0/0x3b0 [ 242.396492][ T4189] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 242.401881][ T4189] print_address_description+0x60/0x2d0 [ 242.407435][ T4189] ? hci_le_meta_evt+0x12c0/0x3b80 [ 242.412794][ T4189] kasan_report+0xdf/0x130 [ 242.417320][ T4189] ? hci_le_meta_evt+0x12c0/0x3b80 [ 242.422449][ T4189] hci_le_meta_evt+0x12c0/0x3b80 [ 242.427400][ T4189] ? hci_event_packet+0x2b0/0x12f0 [ 242.432523][ T4189] ? hci_remote_host_features_evt+0x280/0x280 [ 242.438596][ T4189] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 242.444234][ T4189] ? mark_lock+0x94/0x320 [ 242.448791][ T4189] ? mutex_unlock+0x10/0x10 [ 242.453328][ T4189] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 242.459364][ T4189] ? lock_chain_count+0x20/0x20 [ 242.464230][ T4189] ? __rwlock_init+0x140/0x140 [ 242.469194][ T4189] hci_event_packet+0xe05/0x12f0 [ 242.474139][ T4189] ? lockdep_hardirqs_on+0x94/0x140 [ 242.479379][ T4189] ? rcu_lock_release+0x20/0x20 [ 242.484327][ T4189] ? hci_send_to_monitor+0x9c/0x4a0 [ 242.489539][ T4189] hci_rx_work+0x255/0xa10 [ 242.493993][ T4189] process_one_work+0x863/0x1000 [ 242.499056][ T4189] ? worker_detach_from_pool+0x240/0x240 [ 242.504689][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 242.509978][ T4189] ? _raw_spin_lock_irq+0xab/0xe0 [ 242.515007][ T4189] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 242.520378][ T4189] ? wq_worker_running+0x97/0x170 [ 242.525402][ T4189] worker_thread+0xaa8/0x12a0 [ 242.530099][ T4189] kthread+0x436/0x520 [ 242.534249][ T4189] ? rcu_lock_release+0x20/0x20 [ 242.539099][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 242.543777][ T4189] ret_from_fork+0x1f/0x30 [ 242.548202][ T4189] [ 242.551219][ T4189] [ 242.553535][ T4189] Allocated by task 6441: [ 242.557852][ T4189] __kasan_kmalloc+0xb5/0xf0 [ 242.562443][ T4189] __alloc_skb+0x22c/0x750 [ 242.566966][ T4189] vhci_write+0xbc/0x450 [ 242.571214][ T4189] vfs_write+0x712/0xd00 [ 242.575496][ T4189] ksys_write+0x14d/0x250 [ 242.579850][ T4189] do_syscall_64+0x4c/0xa0 [ 242.584296][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.590219][ T4189] [ 242.592579][ T4189] Last potentially related work creation: [ 242.598311][ T4189] kasan_save_stack+0x35/0x60 [ 242.603015][ T4189] kasan_record_aux_stack+0xb8/0x100 [ 242.608359][ T4189] kvfree_call_rcu+0x10a/0x7c0 [ 242.613122][ T4189] neigh_remove_one+0x4e8/0x5f0 [ 242.617987][ T4189] ___neigh_create+0x468/0x2250 [ 242.622860][ T4189] ip6_finish_output2+0xa01/0x1500 [ 242.628002][ T4189] ndisc_send_skb+0xbea/0x14a0 [ 242.632768][ T4189] ndisc_send_ns+0x63c/0x840 [ 242.637358][ T4189] addrconf_dad_work+0xa47/0x1520 [ 242.642425][ T4189] process_one_work+0x863/0x1000 [ 242.647452][ T4189] worker_thread+0xaa8/0x12a0 [ 242.652159][ T4189] kthread+0x436/0x520 [ 242.656251][ T4189] ret_from_fork+0x1f/0x30 [ 242.660695][ T4189] [ 242.663032][ T4189] The buggy address belongs to the object at ffff888020fd2000 [ 242.663032][ T4189] which belongs to the cache kmalloc-1k of size 1024 [ 242.677091][ T4189] The buggy address is located 1 bytes to the right of [ 242.677091][ T4189] 1024-byte region [ffff888020fd2000, ffff888020fd2400) [ 242.691105][ T4189] The buggy address belongs to the page: [ 242.696755][ T4189] page:ffffea000083f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20fd0 [ 242.706919][ T4189] head:ffffea000083f400 order:3 compound_mapcount:0 compound_pincount:0 [ 242.715271][ T4189] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 242.723294][ T4189] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 242.731909][ T4189] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 242.740936][ T4189] page dumped because: kasan: bad access detected [ 242.747364][ T4189] page_owner tracks the page as allocated [ 242.753254][ T4189] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 58701792710, free_ts 58574312764 [ 242.772377][ T4189] get_page_from_freelist+0x1b77/0x1c60 [ 242.777937][ T4189] __alloc_pages+0x1e1/0x470 [ 242.782542][ T4189] new_slab+0xc0/0x4b0 [ 242.786604][ T4189] ___slab_alloc+0x81e/0xdf0 [ 242.791185][ T4189] __kmalloc_node+0x200/0x3b0 [ 242.795860][ T4189] qdisc_alloc+0x8d/0xb10 [ 242.800186][ T4189] qdisc_create_dflt+0x5f/0x430 [ 242.805057][ T4189] dev_activate+0x331/0x12b0 [ 242.809850][ T4189] __dev_open+0x32c/0x420 [ 242.814185][ T4189] __dev_change_flags+0x20a/0x6a0 [ 242.819291][ T4189] dev_change_flags+0x82/0x1a0 [ 242.824047][ T4189] do_setlink+0xc01/0x3980 [ 242.828461][ T4189] rtnl_newlink+0x1419/0x17d0 [ 242.833133][ T4189] rtnetlink_rcv_msg+0x7ff/0xe90 [ 242.838163][ T4189] netlink_rcv_skb+0x1e0/0x430 [ 242.842919][ T4189] netlink_unicast+0x774/0x920 [ 242.847687][ T4189] page last free stack trace: [ 242.852347][ T4189] free_unref_page_prepare+0x637/0x6c0 [ 242.857812][ T4189] free_unref_page+0x94/0x280 [ 242.862526][ T4189] qlist_free_all+0x35/0x90 [ 242.867048][ T4189] kasan_quarantine_reduce+0x150/0x160 [ 242.872517][ T4189] __kasan_slab_alloc+0x2f/0xd0 [ 242.877374][ T4189] slab_post_alloc_hook+0x4c/0x380 [ 242.882479][ T4189] kmem_cache_alloc+0x100/0x290 [ 242.887327][ T4189] __d_alloc+0x2a/0x6f0 [ 242.891485][ T4189] d_alloc_parallel+0x7b/0x1330 [ 242.896331][ T4189] __lookup_slow+0x113/0x3d0 [ 242.900916][ T4189] lookup_one_len+0x18e/0x2c0 [ 242.905592][ T4189] start_creating+0x184/0x310 [ 242.910271][ T4189] __debugfs_create_file+0x6f/0x510 [ 242.915480][ T4189] nsim_dev_psample_init+0x328/0x560 [ 242.920939][ T4189] nsim_dev_probe+0x706/0x9c0 [ 242.925618][ T4189] really_probe+0x284/0xc80 [ 242.930123][ T4189] [ 242.932437][ T4189] Memory state around the buggy address: [ 242.938069][ T4189] ffff888020fd2300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 242.946146][ T4189] ffff888020fd2380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 242.954223][ T4189] >ffff888020fd2400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.962292][ T4189] ^ [ 242.966367][ T4189] ffff888020fd2480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.974438][ T4189] ffff888020fd2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.982498][ T4189] ================================================================== [ 242.990559][ T4189] Disabling lock debugging due to kernel taint [ 243.001997][ T4189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.009232][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 243.018273][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.028349][ T4189] Workqueue: hci0 hci_rx_work [ 243.033043][ T4189] Call Trace: [ 243.036323][ T4189] [ 243.039252][ T4189] dump_stack_lvl+0x168/0x230 [ 243.043959][ T4189] ? show_regs_print_info+0x20/0x20 [ 243.049178][ T4189] ? load_image+0x3b0/0x3b0 [ 243.053689][ T4189] panic+0x2c9/0x7f0 [ 243.057596][ T4189] ? bpf_jit_dump+0xd0/0xd0 [ 243.062111][ T4189] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 243.068008][ T4189] ? _raw_spin_unlock+0x40/0x40 [ 243.072863][ T4189] ? hci_le_meta_evt+0x12c0/0x3b80 [ 243.077978][ T4189] check_panic_on_warn+0x80/0xa0 [ 243.082930][ T4189] ? hci_le_meta_evt+0x12c0/0x3b80 [ 243.088043][ T4189] end_report+0x6d/0xf0 [ 243.092201][ T4189] kasan_report+0x102/0x130 [ 243.096707][ T4189] ? hci_le_meta_evt+0x12c0/0x3b80 [ 243.101829][ T4189] hci_le_meta_evt+0x12c0/0x3b80 [ 243.106876][ T4189] ? hci_event_packet+0x2b0/0x12f0 [ 243.111999][ T4189] ? hci_remote_host_features_evt+0x280/0x280 [ 243.118107][ T4189] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 243.123902][ T4189] ? mark_lock+0x94/0x320 [ 243.128250][ T4189] ? mutex_unlock+0x10/0x10 [ 243.132772][ T4189] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 243.138862][ T4189] ? lock_chain_count+0x20/0x20 [ 243.143738][ T4189] ? __rwlock_init+0x140/0x140 [ 243.148509][ T4189] hci_event_packet+0xe05/0x12f0 [ 243.153456][ T4189] ? lockdep_hardirqs_on+0x94/0x140 [ 243.158662][ T4189] ? rcu_lock_release+0x20/0x20 [ 243.163515][ T4189] ? hci_send_to_monitor+0x9c/0x4a0 [ 243.168719][ T4189] hci_rx_work+0x255/0xa10 [ 243.173146][ T4189] process_one_work+0x863/0x1000 [ 243.178088][ T4189] ? worker_detach_from_pool+0x240/0x240 [ 243.183722][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 243.189012][ T4189] ? _raw_spin_lock_irq+0xab/0xe0 [ 243.194047][ T4189] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 243.199428][ T4189] ? wq_worker_running+0x97/0x170 [ 243.204456][ T4189] worker_thread+0xaa8/0x12a0 [ 243.209143][ T4189] kthread+0x436/0x520 [ 243.213224][ T4189] ? rcu_lock_release+0x20/0x20 [ 243.218075][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 243.222750][ T4189] ret_from_fork+0x1f/0x30 [ 243.227174][ T4189] [ 243.230458][ T4189] Kernel Offset: disabled [ 243.234790][ T4189] Rebooting in 86400 seconds..