last executing test programs: 15.841576264s ago: executing program 4 (id=146): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0), 0x0, 0x4, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$sock(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)="ab03aacc9933dabeaa0ddad306c8699d533eaf111194cfe98ed51d5317a95c3b5be419112f41055c99db0b92f21691cebd49a17aec76893712b012dac8f586e2394e7e21adb830680560a8486b19e73dd6ef5059a39a80aae4a6825122553cdddb11d615cdb735bc95c5135e7d0a433ba4ad8bbb9eb48466849eeb93b58fe562952656bd8768fc305fffa2371ba8c5cb205a47968f1d573e155486c994f5c8e1ff78f7abe115908f682038ee04c3d31319f06a5613ee0b51f415c995ffc4f9057c187480dd1d690c381ae1e81bc9f753b7d6ce00885751456a0e50955d6f83d0f850fe817f80757035ec1e93", 0xec}, {&(0x7f00000003c0)="a1bb2a284b5ae09a63688afa7d12453d156dfbe6a20afe097d2aca24bff7323a68a37af0544fe4322205b5f4d3", 0x2d}, {0x0}, {&(0x7f0000000700)="cd7b83ba9f03fb001f53052e861798fae20eab4a5f4a8245e5f74fd5f3762086951001cf76c1c49d4d9fa5d18c9ed65a6db655d487ab0bd00a6c8f18008b4750d53a318994820ef47cc7cc42a80f36e40c2c79f92f04c774d4846bfa3db15b1dbbadf6fef6274d10565a3c418d68c608d86eaba8e1cc66b72a443475d2d9ff8a6e032713a26db50132d262397eca34ff276442f55e5adf68a8f63bdf20d329bb96c15dd35bae9c20550e865724c5ccf89bd63a43c1ca0b6295b36a3990345e79d08c8f1278abc254ac6707ac1b147d", 0xcf}, {&(0x7f0000000540)="ac8dd3aa18b844f87500dc0b628a42ac", 0x10}, {&(0x7f0000000800)="79b5622e772d53b06086233e635e130237dc6cd76aca5de28be1e2276845ad9f1dce419a931f66699463c24364b918faa7e135e39496a75087fea6e1be634fb5d958d302a1c90840b5865909064b8e36447a6a08b10aa780bf7536ada98c5e790b5961bdd5830fdbddae45bd0182e5809073fc3d3d78952dcab7c45a1bb45a2d13cfb51ece62c7acd82f01eb0c6cf10ef01a5564ba6c588c86ff0aa9134c5b", 0x9f}, {&(0x7f00000008c0)="76577b88ced2b741cd6052db6385", 0xe}, {&(0x7f0000000900)="01e5b4207acf1db475f889e4a413ac771ebf0404f14b29ab26d552d1e12e3b531b2435a24df4560c03ffac5b1cbc4cdb365d479c993746dbbe1868", 0x3b}, {&(0x7f0000000940)="fc56fdc2c62338198e1522542a23cdeec77e6c1e06af0d56474a3f21b5c43876d47442314b259114e7abbaef9ffbfd70adf7ab20fac15533b683e4d941b56ca4d078078e0019260313badda65d8f3be7257c29e3c26cf21ee9118fd321666383697cb76697d9d40e8722f6b2c6e33a1fb4d566f25f6dba22125b0102139e9d4daf6bd0b84edea85831ff5d057ee5a0e3782bc354118f10d9630fb96537a0120a1e8a1245824e41e931d061ce308f5c90bf27f15842b2fa3c54de31be572cc627962777e2c2d9a30de8cb", 0xca}, {&(0x7f0000000a40)="28a14d2363283c6b7de184eb3d7abca0feedcf66638661f1c2ad105cd10a9d5f597e2bcd6afed34835d4c8f7c54b9c5b84747c3392ccc32aa79e", 0x3a}], 0xa, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x30}, 0x20008000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/4, 0x4}], 0x2, &(0x7f0000000280)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 15.841132923s ago: executing program 2 (id=147): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xa}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18cb02a0, 0x0) 15.216832415s ago: executing program 2 (id=149): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) timerfd_create(0x9, 0x0) close(r2) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 14.091899857s ago: executing program 4 (id=151): r0 = socket(0x29, 0x80000, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7fff, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioperm(0x0, 0x1, 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="85578dfbceec38d66a463a84fba1f6b04fa1dc1f4197358c22160e83fe30716cb0bd58d953e101d131a9b4ee6c6676313996", 0x32}, {&(0x7f0000000440)="c95910d4043fb11d7e4a0d3944464983e293a61e6e55e900f9ffd03fb8ae977c1ea373506b0304e2b08a60f45e956561a0550e3e715aa231a2f52fad4bc0ec152bc5777a9ee95ce8a9d3c84acd6c09ea5317e5bdfda4c680577bf5a1bfe11d45e68316ccea4d3a2647ce81994a688d55317acd59806da60487a374bffb35d4689dd429f7d8f234abcce17f884da608568de7917631ea94ebd0fe9b9491284166d65e86b80ac8d6", 0xa7}, {0x0}, {&(0x7f00000005c0)="ed774f4e640378579c8f7500a5147b88c5f6967cf083687a77062fbf17f37d214e311d9345a9136e98e98a62141e098d0d959dd8aaccf62d0d1ba30e0722e64267d76233476c2fd43d4f165508f0c33a8cbd08b4942ed7906a1209291adce07f4d", 0x61}, {&(0x7f0000000640)="3061a273f4b79fa5176dc7d804b641dd6b407160a710486ba2e958f2eb30f3a8ffcf30b7761b9baab5ea1fa0dad5c37bb88cd504f853a8b5208a8ae6f2cfb30e11ebb202a301e53a8b9c17e6faed1ea6b78d028816fe6b702c8962d9233ef9d9d08e", 0x62}], 0x5, &(0x7f0000000880)=[@dstopts={{0x18, 0x29, 0x37, {0xff}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x0, 0x80, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2]}}}], 0x88}}], 0x1, 0x811) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x800, 0x7) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000002540)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002800500010000000000b4256f256a225b32c4de55bf77ff5f4b4c12357d32172c67e62f41e0285ef4384f2aaf60bd774059031ea4cd57551d75f43f5bd3e6"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) 13.790016883s ago: executing program 2 (id=152): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) stat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x5}], 0x2, 0x40000000, 0x0) shutdown(r1, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 13.43254187s ago: executing program 3 (id=153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.801481231s ago: executing program 1 (id=158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9.951641948s ago: executing program 4 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000a80)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[]) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008090}, 0x8890) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x2, 0xc0}) sendto(0xffffffffffffffff, &(0x7f0000000180)='+', 0x1, 0x24044044, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x6, 0x5}) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) 9.854193589s ago: executing program 1 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) munmap(&(0x7f000006d000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x8000) clock_getres(0x8, 0x0) 9.7997636s ago: executing program 3 (id=161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='syscall\x00') lseek(r4, 0x9, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x15, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x1, 0xf3}}}}, 0x0) setgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 8.598894534s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000120387a820dffba62ff810000000000"], 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1a, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$inet(0x2, 0x1, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r7, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x2004000c) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) 8.598779294s ago: executing program 1 (id=163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) listen(r0, 0x3841b273) 8.509125505s ago: executing program 2 (id=164): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.27383658s ago: executing program 2 (id=165): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.051541714s ago: executing program 1 (id=166): r0 = msgget$private(0x0, 0x23) msgrcv(r0, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) 7.356333517s ago: executing program 4 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0xa5, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x0, 0x14, 0xfd, 0x2, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg$unix(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 7.033965734s ago: executing program 1 (id=169): r0 = socket(0x29, 0x80000, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7fff, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioperm(0x0, 0x1, 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="85578dfbceec38d66a463a84fba1f6b04fa1dc1f4197358c22160e83fe30716cb0bd58d953e101d131a9b4ee6c6676313996", 0x32}, {&(0x7f0000000440)="c95910d4043fb11d7e4a0d3944464983e293a61e6e55e900f9ffd03fb8ae977c1ea373506b0304e2b08a60f45e956561a0550e3e715aa231a2f52fad4bc0ec152bc5777a9ee95ce8a9d3c84acd6c09ea5317e5bdfda4c680577bf5a1bfe11d45e68316ccea4d3a2647ce81994a688d55317acd59806da60487a374bffb35d4689dd429f7d8f234abcce17f884da608568de7917631ea94ebd0fe9b9491284166d65e86b80ac8d6", 0xa7}, {0x0}, {&(0x7f00000005c0)="ed774f4e640378579c8f7500a5147b88c5f6967cf083687a77062fbf17f37d214e311d9345a9136e98e98a62141e098d0d959dd8aaccf62d0d1ba30e0722e64267d76233476c2fd43d4f165508f0c33a8cbd08b4942ed7906a1209291adce07f4d", 0x61}, {&(0x7f0000000640)="3061a273f4b79fa5176dc7d804b641dd6b407160a710486ba2e958f2eb30f3a8ffcf30b7761b9baab5ea1fa0dad5c37bb88cd504f853a8b5208a8ae6f2cfb30e11ebb202a301e53a8b9c17e6faed1ea6b78d028816fe6b702c8962d9233ef9d9d08e", 0x62}], 0x5, &(0x7f0000000880)=[@dstopts={{0x18, 0x29, 0x37, {0xff}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x0, 0x80, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2]}}}], 0x88}}], 0x1, 0x811) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x800, 0x7) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000002540)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002800500010000000000b4256f256a225b32c4de55bf77ff5f4b4c12357d32172c67e62f41e0285ef4384f2aaf60bd774059031ea4cd57551d75f43f5bd3e6"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) 7.030123894s ago: executing program 3 (id=170): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000d40)={0x1c, &(0x7f0000000c00)={0x40, 0x31, 0x1, 'Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.591285451s ago: executing program 0 (id=172): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000500)=0xe37, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000300)=0x4) 4.479864673s ago: executing program 0 (id=173): socket$tipc(0x1e, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.449963403s ago: executing program 2 (id=174): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) stat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x5}], 0x2, 0x40000000, 0x0) shutdown(r1, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 3.348413465s ago: executing program 0 (id=175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 3.290794046s ago: executing program 3 (id=176): bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(0xffffffffffffffff, 0x3841b273) 3.035423251s ago: executing program 3 (id=177): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0), 0x0, 0x4, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$sock(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)="ab03aacc9933dabeaa0ddad306c8699d533eaf111194cfe98ed51d5317a95c3b5be419112f41055c99db0b92f21691cebd49a17aec76893712b012dac8f586e2394e7e21adb830680560a8486b19e73dd6ef5059a39a80aae4a6825122553cdddb11d615cdb735bc95c5135e7d0a433ba4ad8bbb9eb48466849eeb93b58fe562952656bd8768fc305fffa2371ba8c5cb205a47968f1d573e155486c994f5c8e1ff78f7abe115908f682038ee04c3d31319f06a5613ee0b51f415c995ffc4f9057c187480dd1d690c381ae1e81bc9f753b7d6ce00885751456a0e50955d6f83d0f850fe817f80757035ec1e93", 0xec}, {&(0x7f00000003c0)="a1bb2a284b5ae09a63688afa7d12453d156dfbe6a20afe097d2aca24bff7323a68a37af0544fe4322205b5f4d3", 0x2d}, {0x0}, {&(0x7f0000000700)="cd7b83ba9f03fb001f53052e861798fae20eab4a5f4a8245e5f74fd5f3762086951001cf76c1c49d4d9fa5d18c9ed65a6db655d487ab0bd00a6c8f18008b4750d53a318994820ef47cc7cc42a80f36e40c2c79f92f04c774d4846bfa3db15b1dbbadf6fef6274d10565a3c418d68c608d86eaba8e1cc66b72a443475d2d9ff8a6e032713a26db50132d262397eca34ff276442f55e5adf68a8f63bdf20d329bb96c15dd35bae9c20550e865724c5ccf89bd63a43c1ca0b6295b36a3990345e79d08c8f1278abc254ac6707ac1b147d", 0xcf}, {&(0x7f0000000540)="ac8dd3aa18b844f87500dc0b628a42ac", 0x10}, {&(0x7f0000000800)="79b5622e772d53b06086233e635e130237dc6cd76aca5de28be1e2276845ad9f1dce419a931f66699463c24364b918faa7e135e39496a75087fea6e1be634fb5d958d302a1c90840b5865909064b8e36447a6a08b10aa780bf7536ada98c5e790b5961bdd5830fdbddae45bd0182e5809073fc3d3d78952dcab7c45a1bb45a2d13cfb51ece62c7acd82f01eb0c6cf10ef01a5564ba6c588c86ff0aa9134c5b", 0x9f}, {&(0x7f00000008c0)="76577b88ced2b741cd6052db6385", 0xe}, {&(0x7f0000000900)="01e5b4207acf1db475f889e4a413ac771ebf0404f14b29ab26d552d1e12e3b531b2435a24df4560c03ffac5b1cbc4cdb365d479c993746dbbe1868", 0x3b}, {&(0x7f0000000940)="fc56fdc2c62338198e1522542a23cdeec77e6c1e06af0d56474a3f21b5c43876d47442314b259114e7abbaef9ffbfd70adf7ab20fac15533b683e4d941b56ca4d078078e0019260313badda65d8f3be7257c29e3c26cf21ee9118fd321666383697cb76697d9d40e8722f6b2c6e33a1fb4d566f25f6dba22125b0102139e9d4daf6bd0b84edea85831ff5d057ee5a0e3782bc354118f10d9630fb96537a0120a1e8a1245824e41e931d061ce308f5c90bf27f15842b2fa3c54de31be572cc627962777e2c2d9a30de8cb", 0xca}, {&(0x7f0000000a40)="28a14d2363283c6b7de184eb3d7abca0feedcf66638661f1c2ad105cd10a9d5f597e2bcd6afed34835d4c8f7c54b9c5b84747c3392ccc32aa79e", 0x3a}], 0xa, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x30}, 0x20008000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/4, 0x4}], 0x2, &(0x7f0000000280)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1.717976787s ago: executing program 0 (id=178): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r5, &(0x7f0000001100), 0x0, 0x40000040, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x80140) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000440)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 1.487825921s ago: executing program 3 (id=179): write$nbd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="67446698000000000400030003000000756132806120daf7ab849aaeb12ba36dbb059cae458fe0553885"], 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_clone3(0x0, 0x0) getpgid(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r2) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x128) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 690.789007ms ago: executing program 0 (id=180): r0 = msgget$private(0x0, 0x23) msgrcv(r0, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) 205.850116ms ago: executing program 4 (id=181): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1001, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0xfff, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x4391, 0x1c1, 0x1000000003, 0x2, 0x2, 0x9, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x2, 0x9, 0x266, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x8, 0xd, 0x9, 0x3, 0x80000000, 0xffffffbffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x8000000, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0x8000000000000000, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0xffff, 0x8, 0x34, 0x1, 0xd, 0x2, 0x4000005, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x24, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004900) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b06010200000000000000000600000205000100"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4854) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r8, 0x0, 0x20, 0x0, 0x300) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x20}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x68) 180.419927ms ago: executing program 0 (id=182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 1 (id=183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 36.165784][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.194357][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. syzkaller login: [ 57.748556][ T4254] cgroup: Unknown subsys name 'net' [ 57.877386][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.145559][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.491823][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.501036][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.513129][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.520819][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.521959][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.529174][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.537744][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.545901][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.553397][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.559514][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.567458][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.574323][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.582205][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.588771][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.603884][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.604572][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.611969][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.619952][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.626266][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.634474][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.641766][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.648844][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.656205][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.663268][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.701206][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.709410][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.710931][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.764080][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.775398][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.784250][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.135108][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 61.245407][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 61.270922][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 61.299480][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 61.387583][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 61.400266][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408818][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.417614][ T4271] device bridge_slave_0 entered promiscuous mode [ 61.456703][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.464791][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.472966][ T4271] device bridge_slave_1 entered promiscuous mode [ 61.508615][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.516095][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.524597][ T4274] device bridge_slave_0 entered promiscuous mode [ 61.533957][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.541160][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.549632][ T4274] device bridge_slave_1 entered promiscuous mode [ 61.570192][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.577678][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.586251][ T4266] device bridge_slave_0 entered promiscuous mode [ 61.618706][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.626550][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.634809][ T4266] device bridge_slave_1 entered promiscuous mode [ 61.645752][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.663078][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.670624][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.680384][ T4265] device bridge_slave_0 entered promiscuous mode [ 61.714868][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.726206][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.736279][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.743810][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.753057][ T4265] device bridge_slave_1 entered promiscuous mode [ 61.776485][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.798191][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.825647][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.837667][ T4271] team0: Port device team_slave_0 added [ 61.852714][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.865536][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.875563][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.883255][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.891463][ T4278] device bridge_slave_0 entered promiscuous mode [ 61.908854][ T4271] team0: Port device team_slave_1 added [ 61.937882][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.945655][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.954383][ T4278] device bridge_slave_1 entered promiscuous mode [ 61.980111][ T4274] team0: Port device team_slave_0 added [ 61.988803][ T4265] team0: Port device team_slave_0 added [ 61.997319][ T4265] team0: Port device team_slave_1 added [ 62.012948][ T4266] team0: Port device team_slave_0 added [ 62.027984][ T4274] team0: Port device team_slave_1 added [ 62.048283][ T4266] team0: Port device team_slave_1 added [ 62.055815][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.063179][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.090823][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.117562][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.143998][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.151208][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.178299][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.198766][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.206221][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.234173][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.247647][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.268812][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.276225][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.308151][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.320217][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.327582][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.354630][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.375052][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.382522][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409972][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.424297][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.431549][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.458815][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.470850][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.478407][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.505532][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.555783][ T4278] team0: Port device team_slave_0 added [ 62.564405][ T4278] team0: Port device team_slave_1 added [ 62.610235][ T4271] device hsr_slave_0 entered promiscuous mode [ 62.618150][ T4271] device hsr_slave_1 entered promiscuous mode [ 62.628861][ T4266] device hsr_slave_0 entered promiscuous mode [ 62.635904][ T4266] device hsr_slave_1 entered promiscuous mode [ 62.643080][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.651021][ T4266] Cannot create hsr debugfs directory [ 62.666393][ T4274] device hsr_slave_0 entered promiscuous mode [ 62.673465][ T4274] device hsr_slave_1 entered promiscuous mode [ 62.680384][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.688367][ T4274] Cannot create hsr debugfs directory [ 62.702818][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.710224][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.737677][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.761336][ T4265] device hsr_slave_0 entered promiscuous mode [ 62.768653][ T4265] device hsr_slave_1 entered promiscuous mode [ 62.776003][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.783103][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 62.788900][ T4265] Cannot create hsr debugfs directory [ 62.790413][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 62.796477][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 62.803007][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 62.833198][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.840351][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.867302][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 62.873799][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.002742][ T4278] device hsr_slave_0 entered promiscuous mode [ 63.009777][ T4278] device hsr_slave_1 entered promiscuous mode [ 63.016685][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.027618][ T4278] Cannot create hsr debugfs directory [ 63.254944][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.266260][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.276698][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.298478][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.338427][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.357364][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.369488][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.379854][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.468230][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.477921][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.504968][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.518452][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.560992][ T4265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.593158][ T4265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.604068][ T4265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.616844][ T4265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.664726][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.710526][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.722428][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.733907][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.745741][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.756786][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.775509][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.783998][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.795002][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.804530][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.812181][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.828293][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.837938][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.849048][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.870737][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.887536][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.897243][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.908352][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.916186][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.951109][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.961762][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.970900][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.982130][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.990318][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.007384][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.016961][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.026796][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.036070][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.045086][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.058595][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.067590][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.085197][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.094720][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.104956][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.136088][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.148072][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.157545][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.167009][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.176378][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.184418][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.192604][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.203066][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.212481][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.219685][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.229146][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.239320][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.248803][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.256511][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.269025][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.279437][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.289594][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.298820][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.312158][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.322805][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.332052][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.339610][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.369213][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.390078][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.400062][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.410420][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.421594][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.448262][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.458573][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.475265][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.490499][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.508395][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.519397][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.559023][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.567183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.578306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.587466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.596723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.606742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.615350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.624739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.633393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.647260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.656231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.665736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.676346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.690416][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.703169][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.725123][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.743181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.763629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.784042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.803425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.818739][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.826192][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.862317][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 64.868564][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 64.875201][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 64.881921][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 64.902462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.910979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.927253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.937155][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.944562][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.952391][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 64.953459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.980286][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.988438][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.020535][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.039538][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.054356][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.073666][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.094586][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.107765][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.133124][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.170181][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.188749][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.206772][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.219896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.229134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.238724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.248198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.257701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.266211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.277469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.299013][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.334745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.352269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.385757][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.401587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.415025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.431586][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.438771][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.452898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.466010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.477331][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.484686][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.494159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.514108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.558881][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.574975][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.590740][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.607151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.616906][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.634595][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.679072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.689096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.701154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.710447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.720371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.730849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.744405][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.753508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.779154][ T4274] device veth0_vlan entered promiscuous mode [ 65.804495][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.817690][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.827925][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.842302][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.851014][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.866981][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.877156][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.888948][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.905938][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.918323][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.939642][ T4274] device veth1_vlan entered promiscuous mode [ 65.950169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.961060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.971507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.987932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.996208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.007530][ T4266] device veth0_vlan entered promiscuous mode [ 66.029675][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.060451][ T4266] device veth1_vlan entered promiscuous mode [ 66.102169][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.110735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.127108][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.139283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.190397][ T4274] device veth0_macvtap entered promiscuous mode [ 66.218217][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.230851][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.245631][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.256438][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.269125][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.279308][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.289016][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.297727][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.313517][ T4271] device veth0_vlan entered promiscuous mode [ 66.330046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.339550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.354078][ T4274] device veth1_macvtap entered promiscuous mode [ 66.364101][ T4266] device veth0_macvtap entered promiscuous mode [ 66.376179][ T4271] device veth1_vlan entered promiscuous mode [ 66.399002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.408205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.416940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.426583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.434809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.447092][ T4266] device veth1_macvtap entered promiscuous mode [ 66.469387][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.492240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.506338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.525411][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.535501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.552810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.569978][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.585491][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.595819][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.605442][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.614970][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.639054][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.657526][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.668965][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.685158][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.708854][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.739898][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.752424][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765553][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.779968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.789402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.798798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.808194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.820767][ T4271] device veth0_macvtap entered promiscuous mode [ 66.844454][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.853834][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.863904][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878101][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.889940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.899147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.909562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.918905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.929534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.939305][ T4271] device veth1_macvtap entered promiscuous mode [ 66.952498][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 66.958780][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 66.965286][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 66.972764][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 67.021921][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 67.055741][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.071348][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.081166][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.090579][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.100049][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.109724][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.118296][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.126743][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.134941][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.173038][ T4265] device veth0_vlan entered promiscuous mode [ 67.195084][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.206062][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.217436][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.228420][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.239975][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.248774][ T4278] device veth0_vlan entered promiscuous mode [ 67.271536][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.283793][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.295363][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.306109][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.317188][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.328006][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.339993][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.369477][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.380975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.389921][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.395876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.400679][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.415542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.426791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.434979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.452309][ T4278] device veth1_vlan entered promiscuous mode [ 67.462287][ T4265] device veth1_vlan entered promiscuous mode [ 67.484069][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.494056][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503836][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.517008][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.558839][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.567982][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.590511][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.608970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.625799][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.635374][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.645494][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.652219][ T4278] device veth0_macvtap entered promiscuous mode [ 67.672672][ T4265] device veth0_macvtap entered promiscuous mode [ 67.688757][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.699704][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.715822][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.726424][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.736650][ T4278] device veth1_macvtap entered promiscuous mode [ 67.747707][ T4265] device veth1_macvtap entered promiscuous mode [ 67.766225][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.780367][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.800825][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.870985][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.885089][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.895309][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.907020][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.917618][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.928602][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.938515][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.941438][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.973139][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.989785][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.019670][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.034337][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.044975][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060677][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072750][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.089756][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.124361][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.138435][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.151271][ T4384] nfs: Deprecated parameter 'nointr' [ 68.161582][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.173146][ T4384] ntfs3: loop0: try to read out of volume at offset 0x0 [ 68.188559][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.225824][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.295091][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.316646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.439295][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.450840][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.463463][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.651714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.660406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.668842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.677268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.685985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.694671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.703763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.712503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.721679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.730677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.041742][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 69.048650][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 69.052009][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 69.055320][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 69.082201][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.101839][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 69.123877][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.154871][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.214345][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.240030][ T4390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 69.252174][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.268954][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.279288][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.290628][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.302967][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.324245][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.338179][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.356722][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.368685][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.382600][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.399879][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.432150][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.441544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.452325][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.471905][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.480389][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.480478][ T4381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.500459][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.515909][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.529683][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.552795][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.613339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.623723][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.642638][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.653745][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.665118][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.702282][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 69.711995][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 69.801910][ T4408] Zero length message leads to an empty skb [ 69.932858][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.941172][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.959558][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.980204][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.999346][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.041820][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.080500][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.098018][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.119656][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 70.161108][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 70.210403][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.264898][ T4416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.332809][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.356617][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.386126][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.568301][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.575431][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.429580][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 73.582678][ T4445] nfs: Deprecated parameter 'nointr' [ 73.625682][ T4445] ntfs3: loop3: try to read out of volume at offset 0x0 [ 73.675223][ T4445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17'. [ 73.707320][ T4445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17'. [ 74.295888][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 75.052903][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 75.144372][ T4459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 75.232490][ T4459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.986487][ T4464] delete_channel: no stack [ 76.392731][ T954] cfg80211: failed to load regulatory.db [ 76.512691][ T4375] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.943098][ T4375] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 77.406281][ T4375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.419004][ T4375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 77.430960][ T4375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.447067][ T4375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.456671][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.514362][ T4375] usb 4-1: config 0 descriptor?? [ 77.522107][ T4463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.697000][ T4485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 77.959768][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.001608][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.017678][ T4375] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 78.044708][ T4375] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 78.054140][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.091959][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.122571][ T4375] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 78.136108][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.151846][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.181865][ T4332] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.190333][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.253486][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.423013][ T4375] usb 4-1: USB disconnect, device number 2 [ 78.430954][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.814199][ T4491] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 78.901826][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 78.915990][ T4332] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 78.930765][ T4492] fido_id[4492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 78.954945][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 78.973723][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.024315][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'. [ 79.030080][ T4332] usb 5-1: Product: syz [ 79.053029][ T4332] usb 5-1: Manufacturer: syz [ 79.057964][ T4332] usb 5-1: SerialNumber: syz [ 79.092996][ T4332] usb 5-1: config 0 descriptor?? [ 79.156898][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 79.206780][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 79.299225][ T4504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.306746][ T4332] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 80.081375][ T4510] delete_channel: no stack [ 81.192030][ T4332] usb write operation failed. (-71) [ 81.244748][ T4332] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 81.302185][ T4332] dvbdev: DVB: registering new adapter (Terratec H7) [ 81.328027][ T4332] usb 5-1: media controller created [ 81.466438][ T4531] binder_alloc: 4530: binder_alloc_buf, no vma [ 81.494099][ T4332] usb read operation failed. (-71) [ 81.504795][ T4332] usb write operation failed. (-71) [ 81.514560][ T4332] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 81.527104][ T4332] usb 5-1: USB disconnect, device number 2 [ 82.284740][ T4538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.681916][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.228670][ T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.292185][ T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.349492][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.375029][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.411538][ T4536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.546913][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 83.557467][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 83.671965][ T4332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.888750][ T4332] usb 5-1: Using ep0 maxpacket: 16 [ 83.908461][ T4332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.046470][ T4332] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.049116][ T4332] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.102096][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.146840][ T4332] usb 5-1: Product: syz [ 84.162247][ T4332] usb 5-1: Manufacturer: syz [ 84.167047][ T4332] usb 5-1: SerialNumber: syz [ 84.189479][ T4332] usb 5-1: config 0 descriptor?? [ 84.226708][ T4553] delete_channel: no stack [ 84.406447][ T4310] usb 4-1: USB disconnect, device number 3 [ 86.242034][ T4584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55'. [ 87.423005][ T27] usb 5-1: USB disconnect, device number 3 [ 87.468657][ T4587] nfs: Deprecated parameter 'nointr' [ 87.516214][ T4587] ntfs3: loop3: try to read out of volume at offset 0x0 [ 87.581384][ T4587] netlink: 48 bytes leftover after parsing attributes in process `syz.3.53'. [ 87.646052][ T4587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.53'. [ 87.734634][ T4599] block nbd0: shutting down sockets [ 90.236280][ T4607] delete_channel: no stack [ 92.116561][ T4628] binder: 4627:4628 ioctl c0306201 200000000080 returned -14 [ 92.361967][ T954] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 93.247323][ T4453] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.306571][ T954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 93.348040][ T954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.368693][ T4643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 93.375552][ T4643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.383858][ T4643] vhci_hcd vhci_hcd.0: Device attached [ 93.412452][ T4645] vhci_hcd: connection closed [ 93.417552][ T4606] vhci_hcd: stop threads [ 93.444505][ T4453] usb 4-1: Using ep0 maxpacket: 16 [ 93.467153][ T4453] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.501033][ T4606] vhci_hcd: release socket [ 93.566623][ T954] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 93.587362][ T4606] vhci_hcd: disconnect device [ 93.680320][ T4453] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.729728][ T954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 93.781397][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.807821][ T954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.868877][ T4453] usb 4-1: Product: syz [ 93.909764][ T4453] usb 4-1: Manufacturer: syz [ 93.918898][ T954] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 93.965415][ T4453] usb 4-1: SerialNumber: syz [ 94.039376][ T954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 94.084077][ T4453] usb 4-1: config 0 descriptor?? [ 95.594118][ T954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.457264][ T4453] usb 4-1: USB disconnect, device number 4 [ 97.104837][ T954] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 97.132247][ T954] usb 2-1: string descriptor 0 read error: -71 [ 97.138775][ T954] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.149942][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.161164][ T954] usb 2-1: can't set config #168, error -71 [ 97.170305][ T954] usb 2-1: USB disconnect, device number 2 [ 97.379847][ T4663] delete_channel: no stack [ 99.892467][ T4684] binder: 4681:4684 ioctl c0306201 200000000080 returned -14 [ 100.063315][ T4686] overlayfs: failed to resolve './file0': -2 [ 101.361799][ T954] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.762022][ T954] usb 2-1: Using ep0 maxpacket: 16 [ 101.773748][ T954] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.864621][ T954] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.894748][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.919683][ T954] usb 2-1: Product: syz [ 101.942098][ T954] usb 2-1: Manufacturer: syz [ 101.946940][ T954] usb 2-1: SerialNumber: syz [ 101.979763][ T954] usb 2-1: config 0 descriptor?? [ 101.991974][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.088411][ T4708] delete_channel: no stack [ 102.181785][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 102.195047][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 102.220618][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.265712][ T7] usb 5-1: Product: syz [ 102.270133][ T7] usb 5-1: Manufacturer: syz [ 102.787761][ T7] usb 5-1: SerialNumber: syz [ 102.805312][ T7] usb 5-1: config 0 descriptor?? [ 103.016763][ T7] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 104.090494][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 104.163034][ T4727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 104.300117][ T4375] usb 2-1: USB disconnect, device number 3 [ 105.191782][ T4743] tipc: Started in network mode [ 105.197710][ T4743] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 105.220065][ T4743] tipc: Enabled bearer , priority 0 [ 105.526643][ T7] usb write operation failed. (-71) [ 105.543213][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.572174][ T7] dvbdev: DVB: registering new adapter (Terratec H7) [ 105.605229][ T7] usb 5-1: media controller created [ 105.624396][ T7] usb read operation failed. (-71) [ 105.636205][ T7] usb write operation failed. (-71) [ 105.675462][ T7] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 105.867321][ T7] usb 5-1: USB disconnect, device number 4 [ 106.000997][ T4749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 106.195878][ T4750] delete_channel: no stack [ 106.222844][ T4453] tipc: Node number set to 11578026 [ 108.946894][ T4775] lo speed is unknown, defaulting to 1000 [ 108.976801][ T4775] lo speed is unknown, defaulting to 1000 [ 109.022002][ T4453] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.202886][ T4775] lo speed is unknown, defaulting to 1000 [ 109.459292][ T4453] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.520452][ T4453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.530563][ T4453] usb 3-1: Product: syz [ 109.538979][ T4453] usb 3-1: Manufacturer: syz [ 109.544950][ T4453] usb 3-1: SerialNumber: syz [ 109.737730][ T954] lo speed is unknown, defaulting to 1000 [ 109.741904][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 109.751757][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.765191][ T4775] infiniband syz2: set active [ 109.773117][ T4775] infiniband syz2: added lo [ 109.782127][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.797507][ T4775] rdma_rxe: unable to create cq [ 109.805171][ T4775] infiniband syz2: Couldn't create ib_mad CQ [ 109.817256][ T4775] infiniband syz2: Couldn't open port 1 [ 109.861547][ T4775] RDS/IB: syz2: added [ 109.875754][ T4775] smc: adding ib device syz2 with port count 1 [ 109.901843][ T4775] smc: ib device syz2 port 1 has pnetid [ 109.914411][ T4622] lo speed is unknown, defaulting to 1000 [ 109.932866][ T4775] lo speed is unknown, defaulting to 1000 [ 109.951780][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 109.965009][ T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.974881][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 110.013626][ T4318] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 110.028285][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.038870][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.081793][ T4318] usb 2-1: Product: syz [ 110.110071][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.127659][ T4318] usb 2-1: Manufacturer: syz [ 110.162846][ T4318] usb 2-1: SerialNumber: syz [ 110.172469][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.192996][ T4318] usb 2-1: config 0 descriptor?? [ 110.210355][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.219676][ T7] usb 5-1: Product: syz [ 110.228909][ T7] usb 5-1: Manufacturer: syz [ 110.250219][ T7] usb 5-1: SerialNumber: syz [ 110.432841][ T4318] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 110.585480][ T4775] lo speed is unknown, defaulting to 1000 [ 110.597131][ T4453] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 110.614364][ T4453] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 110.724104][ T7] usb 5-1: 0:2 : does not exist [ 110.906127][ T4775] lo speed is unknown, defaulting to 1000 [ 111.031891][ T4453] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 111.088146][ T4775] lo speed is unknown, defaulting to 1000 [ 111.203175][ T4453] usb 3-1: USB disconnect, device number 2 [ 111.229177][ T4453] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 111.314816][ T4775] lo speed is unknown, defaulting to 1000 [ 111.655000][ T4792] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 112.229003][ T4795] delete_channel: no stack [ 112.481851][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.489664][ T4622] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.528753][ T4347] usb 5-1: USB disconnect, device number 5 [ 112.680767][ T4318] usb write operation failed. (-71) [ 112.695809][ T4318] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.708494][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.719951][ T7] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.730962][ T4318] dvbdev: DVB: registering new adapter (Terratec H7) [ 112.738181][ T7] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 112.747809][ T4622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.759361][ T4318] usb 2-1: media controller created [ 112.767786][ T4318] usb read operation failed. (-71) [ 112.776690][ T7] usb 3-1: config 220 interface 0 has no altsetting 0 [ 112.784841][ T4622] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 112.794791][ T4622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.804348][ T4318] usb write operation failed. (-71) [ 112.812508][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.833020][ T4318] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 112.842009][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.859628][ T4622] usb 1-1: config 0 descriptor?? [ 112.873581][ T4318] usb 2-1: USB disconnect, device number 4 [ 112.879819][ T7] usb 3-1: Product: syz [ 112.888755][ T7] usb 3-1: Manufacturer: syz [ 112.903257][ T7] usb 3-1: SerialNumber: syz [ 113.155455][ T7] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 113.302825][ T7] usb 3-1: No valid video chain found. [ 113.573953][ T4622] arvo 0003:1E7D:30D4.0002: unbalanced collection at end of report description [ 113.622296][ T4622] arvo 0003:1E7D:30D4.0002: parse failed [ 113.631741][ T7] usb 3-1: USB disconnect, device number 3 [ 113.652267][ T4622] arvo: probe of 0003:1E7D:30D4.0002 failed with error -22 [ 113.847295][ T4812] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 113.910540][ T4812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.982254][ T7] usb 1-1: USB disconnect, device number 2 [ 117.092726][ T4834] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET) [ 117.155372][ T4835] delete_channel: no stack [ 117.285621][ T4844] syz.2.124 sent an empty control message without MSG_MORE. [ 124.268609][ T4884] validate_nla: 44 callbacks suppressed [ 124.268665][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 124.402310][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 124.431778][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.080223][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.174757][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.188735][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.213992][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.256215][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.440416][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.452735][ T4884] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 125.843637][ T4889] delete_channel: no stack [ 129.631999][ T4622] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.601866][ T4622] usb 1-1: Using ep0 maxpacket: 16 [ 130.626486][ T4622] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 131.136085][ T4622] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.150200][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.186123][ T4622] usb 1-1: Product: syz [ 131.190347][ T4622] usb 1-1: Manufacturer: syz [ 131.216568][ T4622] usb 1-1: SerialNumber: syz [ 131.255444][ T4622] usb 1-1: config 0 descriptor?? [ 132.203869][ T4622] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.401786][ T4622] usb 4-1: Using ep0 maxpacket: 8 [ 132.414362][ T4622] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 132.471049][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.491363][ T4622] usb 4-1: Product: syz [ 132.522943][ T4622] usb 4-1: Manufacturer: syz [ 132.525488][ T4325] usb 1-1: USB disconnect, device number 3 [ 132.533957][ T4622] usb 4-1: SerialNumber: syz [ 132.554794][ T4622] usb 4-1: config 0 descriptor?? [ 132.704370][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.713146][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765579][ T4622] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 135.288331][ T4622] usb write operation failed. (-71) [ 135.342076][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 135.399048][ T4375] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 135.432604][ T4622] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.516922][ T4622] dvbdev: DVB: registering new adapter (Terratec H7) [ 135.624633][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.450591][ T4622] usb 4-1: media controller created [ 136.456523][ T4375] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 136.482046][ T4375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.495414][ T4622] usb read operation failed. (-71) [ 136.502177][ T4375] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.519109][ T4622] usb write operation failed. (-71) [ 136.535429][ T4375] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.548437][ T4622] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 136.582018][ T4622] usb 4-1: USB disconnect, device number 5 [ 136.589858][ T4375] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.650956][ T4375] usb 1-1: Manufacturer: syz [ 136.691931][ T4375] usb 1-1: config 0 descriptor?? [ 136.759922][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 136.908600][ T4622] usb 1-1: USB disconnect, device number 4 [ 138.401791][ T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.761754][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 138.837857][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.941962][ T127] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.036930][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.050899][ T127] usb 3-1: Product: syz [ 139.061445][ T127] usb 3-1: Manufacturer: syz [ 139.073880][ T127] usb 3-1: SerialNumber: syz [ 139.094308][ T127] usb 3-1: config 0 descriptor?? [ 139.135727][ T127] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.151017][ T127] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 139.151705][ T4332] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.391678][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 139.402485][ T4332] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 139.416968][ T4332] usb 4-1: config 0 has no interface number 0 [ 139.442303][ T4332] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 139.492186][ T4332] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 139.509364][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.519424][ T4332] usb 4-1: Product: syz [ 139.524355][ T4332] usb 4-1: Manufacturer: syz [ 139.539075][ T4332] usb 4-1: SerialNumber: syz [ 139.584693][ T4332] usb 4-1: config 0 descriptor?? [ 139.613919][ T4332] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 139.632408][ T4332] em28xx 4-1:0.132: Video interface 132 found: [ 139.715565][ T127] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 140.254314][ T4332] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 140.583146][ T127] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 140.691831][ T127] em28xx 3-1:0.0: board has no eeprom [ 140.773178][ T127] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 140.789448][ T127] em28xx 3-1:0.0: dvb set to bulk mode. [ 141.181875][ T4332] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 141.672210][ T127] usb 3-1: USB disconnect, device number 4 [ 141.676318][ T4332] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 141.680205][ T127] em28xx 3-1:0.0: Disconnecting em28xx [ 141.694509][ T7] em28xx 3-1:0.0: Binding DVB extension [ 141.762426][ T7] em28xx 3-1:0.0: Registering input extension [ 141.769263][ T127] em28xx 3-1:0.0: Closing input extension [ 141.805138][ T127] em28xx 3-1:0.0: Freeing device [ 141.961781][ T4332] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 141.969932][ T4332] em28xx 4-1:0.132: analog set to bulk mode. [ 142.017567][ T954] em28xx 4-1:0.132: Registering V4L2 extension [ 142.079154][ T4332] usb 4-1: USB disconnect, device number 6 [ 142.122319][ T4332] em28xx 4-1:0.132: Disconnecting em28xx [ 143.614107][ T954] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 143.634818][ T954] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 144.690346][ T954] em28xx 4-1:0.132: No AC97 audio processor [ 145.089097][ T954] usb 4-1: Decoder not found [ 145.233220][ T954] em28xx 4-1:0.132: failed to create media graph [ 145.240179][ T954] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 145.300568][ T954] em28xx 4-1:0.132: Remote control support is not available for this card. [ 145.300874][ T5049] ================================================================== [ 145.309771][ T4332] em28xx 4-1:0.132: Closing input extension [ 145.317521][ T5049] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 145.317567][ T5049] Read of size 8 at addr ffff888074b7c738 by task v4l_id/5049 [ 145.317608][ T5049] [ 145.317621][ T5049] CPU: 0 PID: 5049 Comm: v4l_id Not tainted syzkaller #0 [ 145.342505][ T5054] netlink: 76 bytes leftover after parsing attributes in process `syz.4.181'. [ 145.348535][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.348565][ T5049] Call Trace: [ 145.348573][ T5049] [ 145.348580][ T5049] dump_stack_lvl+0x168/0x22e [ 145.379749][ T5049] ? __lock_acquire+0x7c50/0x7c50 [ 145.384883][ T5049] ? show_regs_print_info+0x12/0x12 [ 145.390277][ T5049] ? load_image+0x3b0/0x3b0 [ 145.394896][ T5049] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 145.400659][ T5049] ? __virt_addr_valid+0x188/0x540 [ 145.405993][ T5049] ? __virt_addr_valid+0x465/0x540 [ 145.411616][ T5049] ? v4l2_fh_open+0xc6/0x430 [ 145.416424][ T5049] print_report+0xa8/0x210 [ 145.421714][ T5049] kasan_report+0x10b/0x140 [ 145.426398][ T5049] ? v4l2_fh_open+0xc6/0x430 [ 145.431314][ T5049] v4l2_fh_open+0xc6/0x430 [ 145.435964][ T5049] em28xx_v4l2_open+0x152/0x990 [ 145.440988][ T5049] ? __lock_acquire+0x7c50/0x7c50 [ 145.446095][ T5049] v4l2_open+0x20b/0x360 [ 145.450488][ T5049] chrdev_open+0x597/0x670 [ 145.455196][ T5049] ? cd_forget+0x160/0x160 [ 145.460523][ T5049] ? tomoyo_file_open+0xe9/0x170 [ 145.465645][ T5049] ? fsnotify_perm+0x39b/0x550 [ 145.470720][ T5049] ? cd_forget+0x160/0x160 [ 145.475632][ T5049] do_dentry_open+0x7e9/0x10d0 [ 145.480772][ T5049] path_openat+0x25c6/0x2e70 [ 145.485560][ T5049] ? do_sys_openat2+0xcf/0x490 [ 145.490462][ T5049] ? __x64_sys_openat+0x135/0x160 [ 145.495853][ T5049] ? do_syscall_64+0x4c/0xa0 [ 145.500494][ T5049] ? do_filp_open+0x3c0/0x3c0 [ 145.505198][ T5049] do_filp_open+0x1c1/0x3c0 [ 145.509802][ T5049] ? vfs_tmpfile+0x480/0x480 [ 145.514502][ T5049] ? _raw_spin_unlock+0x24/0x40 [ 145.519491][ T5049] ? alloc_fd+0x58f/0x630 [ 145.523841][ T5049] do_sys_openat2+0x142/0x490 [ 145.528673][ T5049] ? up_read+0x20/0x20 [ 145.532833][ T5049] ? do_faccessat+0x681/0xa40 [ 145.537607][ T5049] ? kmem_cache_free+0xf7/0x290 [ 145.542483][ T5049] ? do_sys_open+0xe0/0xe0 [ 145.546979][ T5049] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 145.552964][ T5049] ? lock_chain_count+0x20/0x20 [ 145.558234][ T5049] __x64_sys_openat+0x135/0x160 [ 145.563197][ T5049] do_syscall_64+0x4c/0xa0 [ 145.567694][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 145.572579][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 145.577549][ T5049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.584197][ T5049] RIP: 0033:0x7f81070a7407 [ 145.589381][ T5049] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 145.609859][ T5049] RSP: 002b:00007ffd441c2b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 145.618449][ T5049] RAX: ffffffffffffffda RBX: 00007f8107774880 RCX: 00007f81070a7407 [ 145.626961][ T5049] RDX: 0000000000000000 RSI: 00007ffd441c4f1b RDI: ffffffffffffff9c [ 145.635416][ T5049] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 145.643659][ T5049] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 145.651747][ T5049] R13: 00007ffd441c2de0 R14: 00007f81078d3000 R15: 000055ac1e40a4d8 [ 145.660521][ T5049] [ 145.663554][ T5049] [ 145.666048][ T5049] Allocated by task 954: [ 145.670654][ T5049] kasan_set_track+0x4b/0x70 [ 145.675377][ T5049] __kasan_kmalloc+0x8e/0xa0 [ 145.680071][ T5049] em28xx_v4l2_init+0x107/0x2e70 [ 145.685187][ T5049] em28xx_init_extension+0x118/0x1b0 [ 145.690834][ T5049] process_one_work+0x898/0x1160 [ 145.696048][ T5049] worker_thread+0xaa2/0x1250 [ 145.700810][ T5049] kthread+0x29d/0x330 [ 145.704985][ T5049] ret_from_fork+0x1f/0x30 [ 145.709769][ T5049] [ 145.712241][ T5049] Freed by task 954: [ 145.716262][ T5049] kasan_set_track+0x4b/0x70 [ 145.721043][ T5049] kasan_save_free_info+0x2d/0x50 [ 145.726487][ T5049] ____kasan_slab_free+0x126/0x1e0 [ 145.731608][ T5049] slab_free_freelist_hook+0x131/0x1a0 [ 145.737527][ T5049] __kmem_cache_free+0xb6/0x1f0 [ 145.742464][ T5049] em28xx_v4l2_init+0x166c/0x2e70 [ 145.747505][ T5049] em28xx_init_extension+0x118/0x1b0 [ 145.753145][ T5049] process_one_work+0x898/0x1160 [ 145.758198][ T5049] worker_thread+0xaa2/0x1250 [ 145.763050][ T5049] kthread+0x29d/0x330 [ 145.767905][ T5049] ret_from_fork+0x1f/0x30 [ 145.772428][ T5049] [ 145.774759][ T5049] The buggy address belongs to the object at ffff888074b7c000 [ 145.774759][ T5049] which belongs to the cache kmalloc-8k of size 8192 [ 145.789209][ T5049] The buggy address is located 1848 bytes inside of [ 145.789209][ T5049] 8192-byte region [ffff888074b7c000, ffff888074b7e000) [ 145.803336][ T5049] [ 145.805777][ T5049] The buggy address belongs to the physical page: [ 145.812354][ T5049] page:ffffea0001d2de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74b78 [ 145.823285][ T5049] head:ffffea0001d2de00 order:3 compound_mapcount:0 compound_pincount:0 [ 145.831880][ T5049] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 145.840344][ T5049] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442280 [ 145.849158][ T5049] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 145.857918][ T5049] page dumped because: kasan: bad access detected [ 145.864410][ T5049] page_owner tracks the page as allocated [ 145.870135][ T5049] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3917, tgid 3917 (S30dbus), ts 33100860475, free_ts 33059376875 [ 145.891098][ T5049] post_alloc_hook+0x173/0x1a0 [ 145.895880][ T5049] get_page_from_freelist+0x1a26/0x1ac0 [ 145.901938][ T5049] __alloc_pages+0x1df/0x4e0 [ 145.906599][ T5049] alloc_slab_page+0x5d/0x160 [ 145.911392][ T5049] new_slab+0x87/0x2c0 [ 145.916499][ T5049] ___slab_alloc+0xbc6/0x1220 [ 145.921488][ T5049] __kmem_cache_alloc_node+0x1a0/0x260 [ 145.927825][ T5049] kmalloc_trace+0x26/0xe0 [ 145.932605][ T5049] tomoyo_init_log+0x1081/0x1f50 [ 145.937870][ T5049] tomoyo_supervisor+0x326/0x10b0 [ 145.943304][ T5049] tomoyo_env_perm+0x146/0x1e0 [ 145.948903][ T5049] tomoyo_find_next_domain+0x157a/0x1a40 [ 145.954955][ T5049] tomoyo_bprm_check_security+0x100/0x150 [ 145.960842][ T5049] security_bprm_check+0x5e/0x90 [ 145.966296][ T5049] bprm_execve+0xa77/0x18a0 [ 145.971004][ T5049] do_execveat_common+0x51b/0x6c0 [ 145.976294][ T5049] page last free stack trace: [ 145.981262][ T5049] free_unref_page_prepare+0x8b4/0x9a0 [ 145.987114][ T5049] free_unref_page+0x2e/0x3f0 [ 145.991960][ T5049] __unfreeze_partials+0x1a5/0x200 [ 145.997267][ T5049] put_cpu_partial+0x17c/0x250 [ 146.002287][ T5049] qlist_free_all+0x76/0xe0 [ 146.007033][ T5049] kasan_quarantine_reduce+0x144/0x160 [ 146.012951][ T5049] __kasan_slab_alloc+0x1e/0x80 [ 146.018043][ T5049] slab_post_alloc_hook+0x4b/0x480 [ 146.023155][ T5049] kmem_cache_alloc+0x123/0x2f0 [ 146.028118][ T5049] getname_flags+0xb7/0x500 [ 146.032713][ T5049] do_sys_openat2+0xcf/0x490 [ 146.037589][ T5049] __x64_sys_openat+0x135/0x160 [ 146.042452][ T5049] do_syscall_64+0x4c/0xa0 [ 146.047678][ T5049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.054002][ T5049] [ 146.056328][ T5049] Memory state around the buggy address: [ 146.062741][ T5049] ffff888074b7c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.070863][ T5049] ffff888074b7c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.079190][ T5049] >ffff888074b7c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.087509][ T5049] ^ [ 146.093631][ T5049] ffff888074b7c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.102543][ T5049] ffff888074b7c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.110599][ T5049] ================================================================== [ 146.191722][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.308548][ T5049] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.316493][ T5049] CPU: 0 PID: 5049 Comm: v4l_id Not tainted syzkaller #0 [ 146.323694][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.334436][ T5049] Call Trace: [ 146.337808][ T5049] [ 146.340999][ T5049] dump_stack_lvl+0x168/0x22e [ 146.346113][ T5049] ? memcpy+0x3c/0x60 [ 146.350351][ T5049] ? show_regs_print_info+0x12/0x12 [ 146.356673][ T5049] ? load_image+0x3b0/0x3b0 [ 146.361487][ T5049] panic+0x2c9/0x710 [ 146.365688][ T5049] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.372302][ T5049] ? bpf_jit_dump+0xd0/0xd0 [ 146.377045][ T5049] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 146.383070][ T5049] ? _raw_spin_unlock+0x40/0x40 [ 146.387932][ T5049] check_panic_on_warn+0x80/0xa0 [ 146.392955][ T5049] ? v4l2_fh_open+0xc6/0x430 [ 146.397925][ T5049] end_report+0x66/0x110 [ 146.402417][ T5049] kasan_report+0x118/0x140 [ 146.407366][ T5049] ? v4l2_fh_open+0xc6/0x430 [ 146.411991][ T5049] v4l2_fh_open+0xc6/0x430 [ 146.416434][ T5049] em28xx_v4l2_open+0x152/0x990 [ 146.421545][ T5049] ? __lock_acquire+0x7c50/0x7c50 [ 146.426965][ T5049] v4l2_open+0x20b/0x360 [ 146.431305][ T5049] chrdev_open+0x597/0x670 [ 146.436079][ T5049] ? cd_forget+0x160/0x160 [ 146.440662][ T5049] ? tomoyo_file_open+0xe9/0x170 [ 146.446074][ T5049] ? fsnotify_perm+0x39b/0x550 [ 146.451083][ T5049] ? cd_forget+0x160/0x160 [ 146.455984][ T5049] do_dentry_open+0x7e9/0x10d0 [ 146.461419][ T5049] path_openat+0x25c6/0x2e70 [ 146.466078][ T5049] ? do_sys_openat2+0xcf/0x490 [ 146.471040][ T5049] ? __x64_sys_openat+0x135/0x160 [ 146.476530][ T5049] ? do_syscall_64+0x4c/0xa0 [ 146.481495][ T5049] ? do_filp_open+0x3c0/0x3c0 [ 146.486403][ T5049] do_filp_open+0x1c1/0x3c0 [ 146.491244][ T5049] ? vfs_tmpfile+0x480/0x480 [ 146.495965][ T5049] ? _raw_spin_unlock+0x24/0x40 [ 146.500923][ T5049] ? alloc_fd+0x58f/0x630 [ 146.505955][ T5049] do_sys_openat2+0x142/0x490 [ 146.510905][ T5049] ? up_read+0x20/0x20 [ 146.512439][ T954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.522556][ T5049] ? do_faccessat+0x681/0xa40 [ 146.527244][ T5049] ? kmem_cache_free+0xf7/0x290 [ 146.532224][ T5049] ? do_sys_open+0xe0/0xe0 [ 146.536675][ T5049] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.542757][ T5049] ? lock_chain_count+0x20/0x20 [ 146.547939][ T5049] __x64_sys_openat+0x135/0x160 [ 146.553116][ T5049] do_syscall_64+0x4c/0xa0 [ 146.557561][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 146.562732][ T5049] ? clear_bhb_loop+0x60/0xb0 [ 146.567412][ T5049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.573396][ T5049] RIP: 0033:0x7f81070a7407 [ 146.578149][ T5049] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 146.598021][ T5049] RSP: 002b:00007ffd441c2b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 146.606749][ T5049] RAX: ffffffffffffffda RBX: 00007f8107774880 RCX: 00007f81070a7407 [ 146.615074][ T5049] RDX: 0000000000000000 RSI: 00007ffd441c4f1b RDI: ffffffffffffff9c [ 146.624433][ T5049] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 146.632751][ T5049] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 146.641036][ T5049] R13: 00007ffd441c2de0 R14: 00007f81078d3000 R15: 000055ac1e40a4d8 [ 146.649460][ T5049] [ 146.653196][ T5049] Kernel Offset: disabled [ 146.657626][ T5049] Rebooting in 86400 seconds..