last executing test programs: 10.416735608s ago: executing program 2 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xb, &(0x7f0000002a80)) fchmod(r0, 0x0) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x5) r2 = io_uring_setup(0x6f0a, &(0x7f0000000000)={0x0, 0xefcf, 0x2, 0x0, 0x2a7, 0x0, r1}) io_uring_setup(0x115a, &(0x7f0000000080)={0x0, 0x8274, 0x20, 0x1, 0x117, 0x0, r2}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0xffffffffffffffff, 0xe59d4000) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 8.455004042s ago: executing program 1 (id=448): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2000400c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r6 = timerfd_create(0x1, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000200)={{r7, r8+10000000}}, &(0x7f0000000380)) 7.238764292s ago: executing program 1 (id=454): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000001500)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004000)=ANY=[@ANYBLOB="0180c20000f8bbbbbbbbbbbb86dd6001044800183aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000004c0)={r7, 0x3, 0x1000, 0x7fffffff}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 6.858929725s ago: executing program 2 (id=456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)='$+', 0x2}], 0x1}}], 0x2, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.282985773s ago: executing program 2 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 6.219415996s ago: executing program 1 (id=459): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x40840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[], 0x28}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.921252806s ago: executing program 1 (id=461): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) r4 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x80010, r5, 0x15b77000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r6, &(0x7f0000000080), 0x11ffffce1) 5.823147199s ago: executing program 2 (id=463): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r7, &(0x7f00000008c0)=ANY=[], 0x56c) close(r7) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305a10000000000100000009ad3", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f0002000000080005", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x40000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0x9fd}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5.424809162s ago: executing program 3 (id=466): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x8010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x437a, &(0x7f0000000300)={0x0, 0x20001848, 0xa, 0x3}, 0x0, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x1) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000a40)="1debb5002d", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000013d000/0x3000)=nil, 0x3000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/193, 0xc1}, {0x0}], 0x2, 0x74, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9000d75600000000000000000080000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r4], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) 4.701993786s ago: executing program 0 (id=468): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) 4.018862098s ago: executing program 1 (id=469): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000001500)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004000)=ANY=[@ANYBLOB="0180c20000f8bbbbbbbbbbbb86dd6001044800183aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000004c0)={r7, 0x3, 0x1000, 0x7fffffff}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.865828213s ago: executing program 3 (id=470): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@empty, 0x57}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/140, 0x8c}], 0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f00000014c0)={&(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001580)={0x0, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x1], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3], &(0x7f0000001540)=[0x6, 0x7, 0x5], 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 3.832259104s ago: executing program 4 (id=471): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.711675928s ago: executing program 0 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}]}, 0x24}}, 0xea5bc50b6199d7fe) 3.620289611s ago: executing program 2 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e0a030000000000000000000a0000060940010073797a31000000000900020073797a31000000002c0000000e0a010100000000000000000a0000060900010073797a31"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) 3.576716042s ago: executing program 3 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) 3.482813796s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x40000000, 0x40071, 0x200000009}) sendmsg$nl_route_sched(r4, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = fsopen(&(0x7f0000000200)='binder\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec010203010902", @ANYRESDEC], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) close_range(r7, r8, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x325840, 0x115) 3.476789986s ago: executing program 2 (id=476): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r5, 0xc}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x857) 3.465740586s ago: executing program 3 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 3.122754138s ago: executing program 1 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r3, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x36) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r7, 0x6f6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.890773125s ago: executing program 4 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, &(0x7f00000001c0), 0x2000022d, 0x2, 0x0, 0xa) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.618222964s ago: executing program 4 (id=480): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2.236355257s ago: executing program 4 (id=481): r0 = dup(0xffffffffffffffff) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) close(r3) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r5, 0xffffffffffffffff, 0xa, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) write$UHID_INPUT(r0, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 1.582160998s ago: executing program 3 (id=482): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) 599.8785ms ago: executing program 4 (id=483): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x9, {'\x00', "57fab043e15fad27a639f105b5e9f977", "a7c9474b00000000f7ff0000ff4a5ef3"}, 0x4000c, 0x6}) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/4, 0x1}], 0x53, 0x1, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) 510.752073ms ago: executing program 3 (id=484): landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000001c0)={0x1, 0x5}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffff9c, &(0x7f0000000100), 0x165402, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x1c, 0x3c, 0x301, 0x74bd25, 0x25dfdbff, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044093}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x2}, [], {0x2}, {0x2, 0x4}}, 0x24, 0x2) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={r7, r8, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4801) sendfile(r1, r0, 0x0, 0x80009) 388.262877ms ago: executing program 4 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fsopen(&(0x7f0000000200)='binder\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbf4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7082272f25212d0}, 0x4000) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec010203010902", @ANYRESDEC], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) close_range(r6, r7, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x325840, 0x115) syz_usb_connect$uac3(0x3, 0x89, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000081e040500400001020301090277000301024000080b000101003000193a5fc8035c0d0c7a197168beddb9180904000000010130000a2401000a0008000000090401000001023000090401010101023000090501"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 300.57901ms ago: executing program 0 (id=486): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) 138.736006ms ago: executing program 0 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) 0s ago: executing program 0 (id=488): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff000) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000001500)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004000)=ANY=[@ANYBLOB="0180c20000f8bbbbbbbbbbbb86dd6001044800183aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000004c0)={r8, 0x3, 0x1000, 0x7fffffff}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 59.079742][ T4261] cgroup: Unknown subsys name 'net' [ 59.206903][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.425291][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.745027][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.753447][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.760933][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.761870][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.769265][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.783044][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.783280][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.797655][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.800204][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.812825][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.820396][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.827899][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.852227][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.860741][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.868962][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.876697][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.883953][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.893139][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.900770][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.908318][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.916150][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.916218][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.930855][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.931591][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.938798][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.947205][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.968057][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.975947][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.983750][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.991054][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.315672][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 62.378300][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 62.431486][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 62.445078][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 62.507046][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 62.557452][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.565493][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.574316][ T4282] device bridge_slave_0 entered promiscuous mode [ 62.587636][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.594782][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.603038][ T4282] device bridge_slave_1 entered promiscuous mode [ 62.639495][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.646820][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.654683][ T4277] device bridge_slave_0 entered promiscuous mode [ 62.683451][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.690566][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.698670][ T4277] device bridge_slave_1 entered promiscuous mode [ 62.722961][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.758554][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.768061][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775604][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.783914][ T4273] device bridge_slave_0 entered promiscuous mode [ 62.803739][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.810898][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.818877][ T4283] device bridge_slave_0 entered promiscuous mode [ 62.834039][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.841161][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.849071][ T4273] device bridge_slave_1 entered promiscuous mode [ 62.856519][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.863788][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.871606][ T4281] device bridge_slave_0 entered promiscuous mode [ 62.880617][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.890932][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.898157][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.906018][ T4283] device bridge_slave_1 entered promiscuous mode [ 62.930203][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.940109][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.947955][ T4281] device bridge_slave_1 entered promiscuous mode [ 62.956969][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.977573][ T4282] team0: Port device team_slave_0 added [ 62.991235][ T4282] team0: Port device team_slave_1 added [ 63.018764][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.043211][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.062781][ T4277] team0: Port device team_slave_0 added [ 63.070091][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.087592][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.094689][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.120923][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.134032][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.145130][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.155403][ T4277] team0: Port device team_slave_1 added [ 63.162497][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.179300][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.186347][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.212335][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.243356][ T4283] team0: Port device team_slave_0 added [ 63.271602][ T4281] team0: Port device team_slave_0 added [ 63.278733][ T4283] team0: Port device team_slave_1 added [ 63.293579][ T4273] team0: Port device team_slave_0 added [ 63.299796][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.307131][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.333491][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.354529][ T4281] team0: Port device team_slave_1 added [ 63.368319][ T4273] team0: Port device team_slave_1 added [ 63.374613][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.381554][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.407905][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.447715][ T4282] device hsr_slave_0 entered promiscuous mode [ 63.454891][ T4282] device hsr_slave_1 entered promiscuous mode [ 63.461847][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.469238][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.495431][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.529051][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.536169][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.562778][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.574637][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.581579][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.607594][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.623905][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.630857][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.656788][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.669418][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.676574][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.702794][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.718654][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.726151][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.752584][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.812339][ T4283] device hsr_slave_0 entered promiscuous mode [ 63.819240][ T4283] device hsr_slave_1 entered promiscuous mode [ 63.825942][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.833271][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 63.833810][ T4283] Cannot create hsr debugfs directory [ 63.862896][ T4273] device hsr_slave_0 entered promiscuous mode [ 63.869693][ T4273] device hsr_slave_1 entered promiscuous mode [ 63.876265][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.884188][ T4273] Cannot create hsr debugfs directory [ 63.912523][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 63.923041][ T4277] device hsr_slave_0 entered promiscuous mode [ 63.929605][ T4277] device hsr_slave_1 entered promiscuous mode [ 63.936174][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.943884][ T4277] Cannot create hsr debugfs directory [ 63.961200][ T4281] device hsr_slave_0 entered promiscuous mode [ 63.968557][ T4281] device hsr_slave_1 entered promiscuous mode [ 63.975389][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.983277][ T4281] Cannot create hsr debugfs directory [ 63.992566][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 63.992675][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 64.072910][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 64.284938][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.296741][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.305164][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.314002][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.377521][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.391471][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.412050][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.420826][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.476194][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.493729][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.514848][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.536665][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.573297][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.615460][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.632031][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.641863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.650838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.666790][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.687630][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.697210][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.707513][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.716705][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.724014][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.732192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.741107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.749524][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.756706][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.764572][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.783043][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.798519][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.817282][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.826388][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.834732][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.848627][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.877670][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.886784][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.897552][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.906756][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.913902][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.922039][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.931146][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.939854][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.948181][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.957550][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.966169][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.974844][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.983398][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.990454][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.998516][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.007250][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.023228][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.033770][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.054949][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.066970][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.075937][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.085446][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.093832][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.102939][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.112091][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.134771][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.144099][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.153296][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.160866][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.169123][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.179365][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.188487][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.197798][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.209129][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.218167][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.229891][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.238795][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.247428][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.254553][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.278086][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.298490][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.313573][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.334201][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.342410][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.352665][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.361084][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.370169][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.379046][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.386179][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.395238][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.407539][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.424913][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.449331][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.491317][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.509318][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.523860][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.538659][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.548017][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.563152][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.571697][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.596658][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.630103][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.638873][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.682550][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.690490][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.719556][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.743047][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.750533][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.796470][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.838298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.863662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.879561][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.889686][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.904222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.912970][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 65.939590][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.960637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.972870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.986896][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.993988][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 66.008108][ T4273] device veth0_vlan entered promiscuous mode [ 66.016666][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.033254][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.058329][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.065464][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.074125][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 66.080153][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 66.092049][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.115086][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.147556][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.152752][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 66.154669][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.173769][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.182101][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.192303][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.200587][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.208870][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.217498][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.226027][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.236204][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.265611][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.277020][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.289265][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.296407][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.312302][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.324511][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.333787][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.368514][ T4273] device veth1_vlan entered promiscuous mode [ 66.383745][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.394433][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.408232][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.417133][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.424236][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.431889][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.439407][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.446945][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.455657][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.486049][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.507972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.518822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.528307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.538208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.547253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.557947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.571715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.582133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.596991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.608193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.616955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.625515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.634955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.643710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.651858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.659989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.670313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.678805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.695402][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.733496][ T4273] device veth0_macvtap entered promiscuous mode [ 66.761009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.774630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.783885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.793309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.801752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.811196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.821516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.838342][ T4273] device veth1_macvtap entered promiscuous mode [ 66.854106][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.897332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.911171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.920307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.940725][ T4282] device veth0_vlan entered promiscuous mode [ 66.955717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.965290][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.973407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.984992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.998762][ T4283] device veth0_vlan entered promiscuous mode [ 67.007425][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.020275][ T4282] device veth1_vlan entered promiscuous mode [ 67.030223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.041055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.050169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.058582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.071982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.092008][ T4283] device veth1_vlan entered promiscuous mode [ 67.104469][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.123754][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.145431][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.164299][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.199300][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.235661][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.245812][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.257317][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267064][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.280756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.291437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.300400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.310712][ T4282] device veth0_macvtap entered promiscuous mode [ 67.320905][ T4282] device veth1_macvtap entered promiscuous mode [ 67.367150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.375633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.384537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.391892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.400436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.408942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.424538][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.437657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.447890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.465327][ T4283] device veth0_macvtap entered promiscuous mode [ 67.480846][ T4283] device veth1_macvtap entered promiscuous mode [ 67.491695][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.501683][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.510047][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.521264][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.535283][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.548422][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.559338][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.570339][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.588125][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.597290][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.606157][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.615011][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.652059][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.660261][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668698][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.669910][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.686838][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.695654][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704407][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.716736][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.727868][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.738001][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.748670][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.761346][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.769704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.777709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.786713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.795322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.804758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.829262][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.840327][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.851371][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.862142][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.874694][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.901847][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.910820][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.928415][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.939215][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.948750][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958291][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.974771][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.983138][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.988332][ T4281] device veth0_vlan entered promiscuous mode [ 67.993061][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 68.008247][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.018156][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.029170][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.037046][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.046856][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.073726][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 68.089890][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.099346][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.127357][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.141613][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.152879][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 68.158902][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 68.174011][ T4281] device veth1_vlan entered promiscuous mode [ 68.190287][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.203488][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.211448][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.232989][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 68.237414][ T4277] device veth0_vlan entered promiscuous mode [ 68.309387][ T4277] device veth1_vlan entered promiscuous mode [ 68.334842][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.343022][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.350833][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.362280][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.391597][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.409224][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.419561][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.430903][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.439287][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.459114][ T4277] device veth0_macvtap entered promiscuous mode [ 68.473381][ T4281] device veth0_macvtap entered promiscuous mode [ 68.490849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.506249][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.514896][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.524415][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.536097][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.544887][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.557135][ T4277] device veth1_macvtap entered promiscuous mode [ 68.576533][ T4281] device veth1_macvtap entered promiscuous mode [ 68.584060][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.591879][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.622029][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.636596][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.646516][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.657165][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.667276][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.678076][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689494][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.700509][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.707939][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.717622][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.727719][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.738357][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.747891][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.764092][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.779536][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.789981][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.800883][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.812419][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.832698][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.843076][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.853630][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.884076][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.908405][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.921952][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.944429][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.962794][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.976954][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.987803][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.015339][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.031885][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.046260][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.064442][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.078104][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.093159][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.121604][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.140620][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.162785][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182514][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.202822][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230346][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.253541][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.267532][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.279214][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.290517][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.304234][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.341668][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353018][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.361792][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.384310][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.420921][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.430322][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440306][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.621567][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.637338][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.637451][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.653238][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.669021][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.688419][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.737396][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.746561][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.761437][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.777345][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.784743][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.810500][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.833862][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.949322][ T4364] tipc: Started in network mode [ 69.981788][ T4364] tipc: Node identity ac14140f, cluster identity 4711 [ 70.002895][ T4364] tipc: New replicast peer: 255.255.255.255 [ 70.017658][ T4364] tipc: Enabled bearer , priority 10 [ 70.024271][ T4366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.055994][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.064157][ T4366] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 70.072704][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 70.106273][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.126494][ T4317] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 70.139996][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.152671][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 70.171054][ T4317] usb 4-1: config 0 descriptor?? [ 70.233816][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 70.239874][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 70.310675][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.319202][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 70.346455][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.390503][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.488786][ T4370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.684339][ T4317] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 70.701109][ T4317] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 70.787208][ T4317] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0001/input/input5 [ 70.865610][ T4317] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 71.023436][ T4316] tipc: Node number set to 2886997007 [ 71.119950][ T4361] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.196781][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.203382][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.523676][ T41] usb 4-1: USB disconnect, device number 2 [ 72.273070][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 72.369485][ T4399] xt_l2tp: invalid flags combination: 8 [ 72.420593][ T4399] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 72.469380][ T4399] Zero length message leads to an empty skb [ 72.532626][ T4316] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.724252][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.756021][ T4316] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.786092][ T4316] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 72.795923][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.823256][ T4316] usb 5-1: config 0 descriptor?? [ 72.845342][ T4316] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 72.852804][ T4316] dvb-usb: bulk message failed: -22 (3/0) [ 72.939977][ T4316] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 72.968026][ T4316] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 73.009075][ T4316] usb 5-1: media controller created [ 73.039256][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.051558][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.130608][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.157244][ T4316] dvb-usb: bulk message failed: -22 (6/0) [ 73.178969][ T4316] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 73.211518][ T4316] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 73.324477][ T4316] dvb-usb: schedule remote query interval to 150 msecs. [ 73.378454][ T4316] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 73.392635][ T4417] netlink: 'syz.3.13': attribute type 12 has an invalid length. [ 73.405228][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 73.418721][ T4316] usb 5-1: USB disconnect, device number 2 [ 73.478054][ T4316] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 73.887771][ T4429] fuse: Bad value for 'fd' [ 73.927990][ T4429] process 'syz.2.17' launched './file0' with NULL argv: empty string added [ 74.557112][ T4458] netlink: 'syz.1.25': attribute type 12 has an invalid length. [ 74.583439][ T2189] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 74.764260][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 74.802751][ T2189] usb 5-1: config index 0 descriptor too short (expected 14385, got 27) [ 74.826991][ T2189] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 74.907811][ T2189] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 74.978900][ T2189] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 75.009847][ T4466] device syzkaller0 entered promiscuous mode [ 75.052678][ T2189] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 75.091537][ T2189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.172598][ T2189] usb 5-1: Product: syz [ 75.176848][ T2189] usb 5-1: Manufacturer: syz [ 75.227195][ T2189] usb 5-1: SerialNumber: syz [ 75.561951][ T4477] fuse: Bad value for 'fd' [ 75.901575][ T4486] netlink: 'syz.3.36': attribute type 12 has an invalid length. [ 76.458815][ T4506] device syzkaller0 entered promiscuous mode [ 76.724857][ T4504] syz.1.41 (4504) used greatest stack depth: 20376 bytes left [ 76.919773][ T4517] fuse: Bad value for 'fd' [ 77.439034][ T4528] netlink: 'syz.0.49': attribute type 12 has an invalid length. [ 77.750087][ T4538] device syzkaller0 entered promiscuous mode [ 78.031849][ T2189] usb 5-1: USB disconnect, device number 3 [ 78.390556][ T4565] tipc: Enabled bearer , priority 0 [ 78.398412][ T4565] device syzkaller0 entered promiscuous mode [ 78.467353][ T4565] tipc: Resetting bearer [ 78.485715][ T4564] tipc: Resetting bearer [ 78.509832][ T4564] tipc: Disabling bearer [ 78.519747][ T4569] netlink: 'syz.1.65': attribute type 12 has an invalid length. [ 78.770377][ T4578] tipc: Started in network mode [ 78.840070][ T4578] tipc: Node identity be45c8e25507, cluster identity 4711 [ 78.848912][ T4578] tipc: Enabled bearer , priority 0 [ 78.905887][ T4583] device syzkaller0 entered promiscuous mode [ 79.011907][ T4578] tipc: Resetting bearer [ 79.046177][ T4576] tipc: Resetting bearer [ 79.092626][ T2189] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.106630][ T4576] tipc: Disabling bearer [ 79.300953][ T2189] usb 3-1: config index 0 descriptor too short (expected 14385, got 27) [ 79.316279][ T2189] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 79.350485][ T2189] usb 3-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 79.379596][ T2189] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 79.401767][ T4599] netlink: 'syz.4.77': attribute type 12 has an invalid length. [ 79.452558][ T2189] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 79.471783][ T2189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.501066][ T2189] usb 3-1: Product: syz [ 79.520712][ T2189] usb 3-1: Manufacturer: syz [ 79.527716][ T4605] tipc: Started in network mode [ 79.536874][ T2189] usb 3-1: SerialNumber: syz [ 79.549888][ T4605] tipc: Node identity ea5732a17a3, cluster identity 4711 [ 79.557306][ T4605] tipc: Enabled bearer , priority 0 [ 79.565644][ T4605] device syzkaller0 entered promiscuous mode [ 79.614901][ T4605] tipc: Resetting bearer [ 79.641054][ T4600] tipc: Resetting bearer [ 79.700521][ T4600] tipc: Disabling bearer [ 80.120364][ T4621] tipc: Started in network mode [ 80.132185][ T4621] tipc: Node identity 8aaed9d22587, cluster identity 4711 [ 80.183510][ T4621] tipc: Enabled bearer , priority 0 [ 80.206584][ T4628] device syzkaller0 entered promiscuous mode [ 80.345189][ T4628] tipc: Resetting bearer [ 80.381951][ T4620] tipc: Resetting bearer [ 80.555672][ T4620] tipc: Disabling bearer [ 80.871332][ T4639] tipc: Enabled bearer , priority 0 [ 80.970980][ T4646] device syzkaller0 entered promiscuous mode [ 81.157642][ T4646] tipc: Resetting bearer [ 81.217751][ T4638] tipc: Resetting bearer [ 81.303420][ T4638] tipc: Disabling bearer [ 81.436649][ T126] cfg80211: failed to load regulatory.db [ 81.644621][ T4661] device syzkaller0 entered promiscuous mode [ 81.932128][ T4672] tipc: Enabled bearer , priority 0 [ 81.996424][ T4673] device syzkaller0 entered promiscuous mode [ 82.110272][ T4672] tipc: Resetting bearer [ 82.158060][ T4671] tipc: Resetting bearer [ 82.246368][ T4671] tipc: Disabling bearer [ 82.918063][ T2189] usb 3-1: USB disconnect, device number 2 [ 82.959019][ T4693] tipc: Enabled bearer , priority 0 [ 82.985586][ T4693] device syzkaller0 entered promiscuous mode [ 83.036061][ T4693] tipc: Resetting bearer [ 83.066691][ T4690] tipc: Resetting bearer [ 83.100529][ T4690] tipc: Disabling bearer [ 83.394988][ T4707] device syzkaller0 entered promiscuous mode [ 83.412004][ T4710] tipc: Enabled bearer , priority 0 [ 83.470242][ T4710] device syzkaller0 entered promiscuous mode [ 83.522118][ T4710] tipc: Resetting bearer [ 83.544011][ T4709] tipc: Resetting bearer [ 83.573668][ T4709] tipc: Disabling bearer [ 84.106713][ T4735] tipc: Enabled bearer , priority 0 [ 84.121043][ T4735] device syzkaller0 entered promiscuous mode [ 84.233251][ T4735] tipc: Resetting bearer [ 84.269836][ T4734] tipc: Resetting bearer [ 84.324756][ T4734] tipc: Disabling bearer [ 84.473385][ T2189] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 84.547953][ T4750] device syzkaller0 entered promiscuous mode [ 84.683536][ T2189] usb 4-1: config index 0 descriptor too short (expected 14385, got 27) [ 84.699316][ T4753] tipc: Enabled bearer , priority 0 [ 84.704108][ T2189] usb 4-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 84.748580][ T2189] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 84.764464][ T4759] device syzkaller0 entered promiscuous mode [ 84.771217][ T2189] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 84.818076][ T2189] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.841133][ T2189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.854689][ T4753] tipc: Resetting bearer [ 84.883366][ T2189] usb 4-1: Product: syz [ 84.887613][ T2189] usb 4-1: Manufacturer: syz [ 84.892219][ T2189] usb 4-1: SerialNumber: syz [ 84.956712][ T4752] tipc: Resetting bearer [ 85.018928][ T4752] tipc: Disabling bearer [ 85.606324][ T4783] tipc: Enabled bearer , priority 0 [ 85.659150][ T4786] device syzkaller0 entered promiscuous mode [ 85.707504][ T4788] device syzkaller0 entered promiscuous mode [ 85.838696][ T4783] tipc: Resetting bearer [ 85.887924][ T4782] tipc: Resetting bearer [ 85.966699][ T4782] tipc: Disabling bearer [ 86.541153][ T4814] device syzkaller0 entered promiscuous mode [ 87.184509][ T4829] device syzkaller0 entered promiscuous mode [ 87.487844][ T4832] tipc: Enabled bearer , priority 0 [ 87.554335][ T4833] device syzkaller0 entered promiscuous mode [ 87.673628][ T4832] tipc: Resetting bearer [ 87.685951][ T4831] tipc: Resetting bearer [ 87.693255][ T2189] usb 4-1: USB disconnect, device number 3 [ 87.741363][ T4831] tipc: Disabling bearer [ 88.111148][ T4861] device syzkaller0 entered promiscuous mode [ 88.387815][ T4863] device syzkaller0 entered promiscuous mode [ 90.382805][ T4887] tipc: Enabling of bearer rejected, failed to enable media [ 91.376864][ T4949] tipc: Enabled bearer , priority 0 [ 91.428427][ T4951] device syzkaller0 entered promiscuous mode [ 91.507314][ T4949] tipc: Resetting bearer [ 91.539575][ T4948] tipc: Resetting bearer [ 91.588944][ T4948] tipc: Disabling bearer [ 91.966361][ T4959] tipc: Started in network mode [ 91.981011][ T4959] tipc: Node identity 6ad37cd54c05, cluster identity 4711 [ 92.022195][ T4959] tipc: Enabled bearer , priority 0 [ 92.038494][ T4961] device syzkaller0 entered promiscuous mode [ 92.102063][ T4959] tipc: Resetting bearer [ 92.117786][ T4958] tipc: Resetting bearer [ 92.170723][ T4958] tipc: Disabling bearer [ 92.305457][ T26] audit: type=1800 audit(1780434663.958:2): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.189" name="/" dev="fuse" ino=2 res=0 errno=0 [ 93.380456][ T4989] tipc: Enabled bearer , priority 0 [ 93.404253][ T4989] device syzkaller0 entered promiscuous mode [ 93.478616][ T4989] tipc: Resetting bearer [ 93.503862][ T4987] tipc: Resetting bearer [ 93.546625][ T4987] tipc: Disabling bearer [ 93.768442][ T5003] device syzkaller0 entered promiscuous mode [ 94.289496][ T26] audit: type=1800 audit(1780434665.938:3): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="/" dev="fuse" ino=2 res=0 errno=0 [ 94.475167][ T5035] tipc: Enabled bearer , priority 0 [ 94.496212][ T5035] device syzkaller0 entered promiscuous mode [ 94.581081][ T5035] tipc: Resetting bearer [ 94.648821][ T5034] tipc: Resetting bearer [ 94.680627][ T5034] tipc: Disabling bearer [ 95.069681][ T5043] device syzkaller0 entered promiscuous mode [ 95.959998][ T5074] tipc: Enabled bearer , priority 0 [ 95.969110][ T5074] device syzkaller0 entered promiscuous mode [ 95.987925][ T5073] tipc: Resetting bearer [ 96.019173][ T5073] tipc: Disabling bearer [ 96.398872][ T5088] device syzkaller0 entered promiscuous mode [ 96.484049][ T26] audit: type=1800 audit(1780434668.138:4): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="/" dev="fuse" ino=2 res=0 errno=0 [ 96.779078][ T5110] tipc: Enabled bearer , priority 0 [ 96.790831][ T5110] device syzkaller0 entered promiscuous mode [ 96.898999][ T5109] tipc: Resetting bearer [ 96.960437][ T5109] tipc: Disabling bearer [ 97.012592][ T126] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.214469][ T126] usb 3-1: config index 0 descriptor too short (expected 14385, got 27) [ 97.229472][ T126] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 97.265160][ T126] usb 3-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 97.296045][ T126] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 97.334426][ T126] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 97.359791][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.380824][ T126] usb 3-1: Product: syz [ 97.393620][ T126] usb 3-1: Manufacturer: syz [ 97.404258][ T126] usb 3-1: SerialNumber: syz [ 98.568325][ T5142] netlink: 'syz.3.252': attribute type 12 has an invalid length. [ 99.067656][ T5154] tipc: Enabled bearer , priority 0 [ 99.090161][ T5154] device syzkaller0 entered promiscuous mode [ 99.165297][ T26] audit: type=1800 audit(1780434670.818:5): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.250" name="/" dev="fuse" ino=2 res=0 errno=0 [ 99.200840][ T5153] tipc: Resetting bearer [ 99.236089][ T5153] tipc: Disabling bearer [ 99.579688][ T5171] tipc: Enabled bearer , priority 0 [ 99.617254][ T5171] device syzkaller0 entered promiscuous mode [ 99.677596][ T5169] tipc: Resetting bearer [ 99.777425][ T5169] tipc: Disabling bearer [ 99.784820][ T5177] netlink: 'syz.3.264': attribute type 12 has an invalid length. [ 100.229269][ T126] usb 3-1: USB disconnect, device number 3 [ 100.366070][ T5199] fuse: Bad value for 'fd' [ 100.612175][ T5209] tipc: Enabled bearer , priority 0 [ 100.626534][ T5209] device syzkaller0 entered promiscuous mode [ 100.679173][ T5208] tipc: Resetting bearer [ 100.714419][ T5211] netlink: 'syz.4.277': attribute type 12 has an invalid length. [ 100.731718][ T5208] tipc: Disabling bearer [ 101.012116][ T26] audit: type=1800 audit(1780434672.658:6): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.269" name="/" dev="fuse" ino=2 res=0 errno=0 [ 101.554181][ T5252] netlink: 'syz.1.289': attribute type 12 has an invalid length. [ 101.632665][ T4316] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.851911][ T4316] usb 1-1: config index 0 descriptor too short (expected 14385, got 27) [ 101.875576][ T4316] usb 1-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 101.914570][ T4316] usb 1-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 101.953607][ T4316] usb 1-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 102.021280][ T4316] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 102.086748][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.148866][ T4316] usb 1-1: Product: syz [ 102.215469][ T4316] usb 1-1: Manufacturer: syz [ 102.229612][ T4316] usb 1-1: SerialNumber: syz [ 102.289208][ T5263] netlink: 184 bytes leftover after parsing attributes in process `syz.1.292'. [ 102.641174][ T26] audit: type=1800 audit(1780434674.288:7): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.294" name="/" dev="fuse" ino=2 res=0 errno=0 [ 103.661689][ T5299] netlink: 'syz.2.301': attribute type 12 has an invalid length. [ 104.073618][ T4362] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 104.222525][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.314067][ T4316] usb 1-1: USB disconnect, device number 2 [ 104.324428][ T4362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.388569][ T4362] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.428163][ T4362] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 104.492544][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 104.499538][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.518186][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.541640][ T4320] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 104.563173][ T4362] usb 3-1: config 0 descriptor?? [ 104.569596][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.581992][ T4362] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 104.600947][ T4362] dvb-usb: bulk message failed: -22 (3/0) [ 104.610935][ T4320] usb 4-1: config 0 descriptor?? [ 104.691476][ T4362] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.703244][ T4320] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 104.711258][ T4362] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.719273][ T4362] usb 3-1: media controller created [ 104.726425][ T4362] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.740119][ T4362] dvb-usb: bulk message failed: -22 (6/0) [ 104.748651][ T4362] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.761011][ T4362] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 104.782244][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.792779][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.800142][ T4362] dvb-usb: schedule remote query interval to 150 msecs. [ 104.818192][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.818239][ T4362] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.971611][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.986630][ T4362] dvb-usb: bulk message failed: -22 (1/0) [ 105.003391][ T4362] dvb-usb: error while querying for an remote control event. [ 105.066150][ T2189] usb 3-1: USB disconnect, device number 4 [ 105.107802][ T2189] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 105.598718][ T4320] gspca_vc032x: reg_r err -110 [ 105.604837][ T4320] vc032x: probe of 4-1:0.0 failed with error -110 [ 106.002088][ T5348] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 106.035900][ T5348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.060147][ T5348] bond1: (slave dummy0): making interface the new active one [ 106.121294][ T5348] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 106.171335][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 106.192202][ T5355] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 106.201096][ T5355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 106.212724][ T5355] device dummy0 entered promiscuous mode [ 106.221464][ T5355] bond1: (slave dummy0): Releasing active interface [ 106.642580][ T2189] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 106.837705][ T2189] usb 5-1: config index 0 descriptor too short (expected 14385, got 27) [ 106.852004][ T2189] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 106.862356][ T4320] usb 4-1: USB disconnect, device number 4 [ 106.875147][ T2189] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 106.890077][ T2189] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 106.935734][ T2189] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 106.955197][ T2189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.980386][ T2189] usb 5-1: Product: syz [ 106.989560][ T2189] usb 5-1: Manufacturer: syz [ 106.994552][ T2189] usb 5-1: SerialNumber: syz [ 107.191780][ T5381] netlink: 'syz.3.324': attribute type 12 has an invalid length. [ 107.520699][ T26] audit: type=1800 audit(1780434679.168:8): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="/" dev="fuse" ino=2 res=0 errno=0 [ 109.096840][ T5420] netlink: 'syz.1.335': attribute type 12 has an invalid length. [ 109.488928][ T2189] usb 5-1: USB disconnect, device number 4 [ 109.602648][ T4362] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.795984][ T4362] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.812889][ T4362] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.827717][ T4362] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.842088][ T4362] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.855058][ T4362] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 109.866444][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.880122][ T4362] usb 1-1: config 0 descriptor?? [ 110.031087][ T5455] netlink: 'syz.3.348': attribute type 12 has an invalid length. [ 110.070194][ T26] audit: type=1800 audit(1780434681.718:9): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.338" name="/" dev="fuse" ino=2 res=0 errno=0 [ 110.310867][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.333423][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.368700][ T4362] holtek 0003:1241:5015.0002: unknown main item tag 0x0 [ 110.379204][ T4362] holtek 0003:1241:5015.0002: item fetching failed at offset 4/5 [ 110.379968][ T5461] kvm: pic: non byte write [ 110.388967][ T4362] holtek 0003:1241:5015.0002: parse failed [ 110.398721][ T4362] holtek: probe of 0003:1241:5015.0002 failed with error -22 [ 110.658457][ T5432] netlink: 'syz.0.339': attribute type 21 has an invalid length. [ 110.677883][ T5432] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.697633][ T5432] IPv6: Can't replace route, no match found [ 110.743996][ T5482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.778037][ T5482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.849799][ T41] usb 1-1: USB disconnect, device number 3 [ 111.297034][ T5497] netlink: 'syz.4.360': attribute type 12 has an invalid length. [ 111.722649][ T4320] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 111.924884][ T4320] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.944472][ T4320] usb 1-1: config 0 has no interface number 0 [ 111.959512][ T4320] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 111.981463][ T4320] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 112.001081][ T4320] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 112.018443][ T4320] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.076603][ T4320] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.118595][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.160115][ T4320] usb 1-1: config 0 descriptor?? [ 112.168336][ T5501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.195281][ T5501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.221321][ T4320] ldusb 1-1:0.55: Interrupt in endpoint not found [ 112.259767][ T26] audit: type=1800 audit(1780434683.908:10): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.361" name="/" dev="fuse" ino=2 res=0 errno=0 [ 112.475250][ T41] usb 1-1: USB disconnect, device number 4 [ 112.547750][ T26] audit: type=1326 audit(1780434684.198:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.581029][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 112.590172][ T26] audit: type=1326 audit(1780434684.228:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.597829][ T5532] netlink: 'syz.3.373': attribute type 12 has an invalid length. [ 112.622176][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.627353][ T26] audit: type=1326 audit(1780434684.228:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.653458][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.687129][ T26] audit: type=1326 audit(1780434684.228:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.712164][ T26] audit: type=1326 audit(1780434684.228:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.736001][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.765018][ T26] audit: type=1326 audit(1780434684.228:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.788820][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.805457][ T26] audit: type=1326 audit(1780434684.228:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.829511][ T26] audit: type=1326 audit(1780434684.228:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.853250][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.867191][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.871226][ T26] audit: type=1326 audit(1780434684.228:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.892712][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.919310][ T4320] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 112.929093][ T26] audit: type=1326 audit(1780434684.228:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.2.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f9ce59 code=0x7ffc0000 [ 112.938834][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.952913][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.001292][ T4320] usb 5-1: config 0 descriptor?? [ 113.158397][ T41] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 113.214395][ T5524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.369'. [ 113.355207][ T41] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.373461][ T41] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.391322][ T41] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.411044][ T41] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.419208][ T41] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 113.430507][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.442873][ T4320] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 113.450155][ T4320] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 113.460514][ T41] usb 4-1: config 0 descriptor?? [ 113.468277][ T4320] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input8 [ 113.495498][ T4320] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 113.697395][ T4316] usb 5-1: USB disconnect, device number 5 [ 113.836189][ T5562] netlink: 64 bytes leftover after parsing attributes in process `syz.1.382'. [ 113.887724][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.912869][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.929511][ T41] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 113.944885][ T41] holtek 0003:1241:5015.0004: item fetching failed at offset 4/5 [ 113.958204][ T41] holtek 0003:1241:5015.0004: parse failed [ 113.969019][ T41] holtek: probe of 0003:1241:5015.0004 failed with error -22 [ 114.149758][ T5536] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 114.161668][ T5536] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.185820][ T5536] IPv6: Can't replace route, no match found [ 114.211907][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.261406][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.299102][ T5573] netlink: 'syz.2.385': attribute type 12 has an invalid length. [ 114.351437][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 114.451391][ T41] usb 4-1: USB disconnect, device number 5 [ 115.170279][ T5587] netlink: 64 bytes leftover after parsing attributes in process `syz.2.390'. [ 116.109406][ T5604] netlink: 'syz.4.397': attribute type 12 has an invalid length. [ 116.745661][ T4316] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 116.897824][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 116.939489][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.939566][ T5626] mmap: syz.4.402 (5626) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.962148][ T4316] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 116.967642][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.977652][ T4316] usb 1-1: config 0 has no interface number 0 [ 116.992608][ T4316] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 117.015933][ T4316] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 117.045722][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.056951][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.072496][ T4316] usb 1-1: Product: syz [ 117.076692][ T4316] usb 1-1: Manufacturer: syz [ 117.081308][ T4316] usb 1-1: SerialNumber: syz [ 117.107469][ T4316] usb 1-1: config 0 descriptor?? [ 117.129605][ T4316] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 117.135930][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.151954][ T4316] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 117.386876][ T41] usb 1-1: USB disconnect, device number 5 [ 117.408691][ T41] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 117.462959][ T41] kobil_sct 1-1:0.148: device disconnected [ 117.870806][ T5643] netlink: 'syz.4.410': attribute type 12 has an invalid length. [ 118.635081][ T5663] netlink: 184 bytes leftover after parsing attributes in process `syz.0.414'. [ 118.671477][ T5663] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.414'. [ 118.834203][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.035434][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.048780][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.061876][ T41] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.077800][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 119.094614][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 119.107533][ T4320] usb 4-1: Product: syz [ 119.118971][ T4320] usb 4-1: Manufacturer: syz [ 119.126506][ T4320] usb 4-1: SerialNumber: syz [ 119.289630][ T41] usb 2-1: config index 0 descriptor too short (expected 14385, got 27) [ 119.305497][ T41] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 119.377424][ T41] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 119.391841][ T5676] netlink: 'syz.4.422': attribute type 12 has an invalid length. [ 119.412189][ T41] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 119.454318][ T41] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 119.487528][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.511691][ T41] usb 2-1: Product: syz [ 119.525707][ T41] usb 2-1: Manufacturer: syz [ 119.555526][ T41] usb 2-1: SerialNumber: syz [ 119.833255][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.037054][ T126] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 120.057232][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.086979][ T126] usb 5-1: Product: syz [ 120.096527][ T126] usb 5-1: Manufacturer: syz [ 120.112744][ T126] usb 5-1: SerialNumber: syz [ 120.139315][ T126] usb 5-1: config 0 descriptor?? [ 120.161959][ T126] hub 5-1:0.0: bad descriptor, ignoring hub [ 120.177513][ T126] hub: probe of 5-1:0.0 failed with error -5 [ 120.368248][ T126] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 120.388917][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.421595][ T126] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 120.476125][ T126] usb 5-1: media controller created [ 120.542239][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.578547][ T5678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.602173][ T5678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.665442][ T5678] trusted_key: encrypted_key: insufficient parameters specified [ 120.726974][ T5678] dib0700: tx buffer length is larger than 4. Not supported. [ 120.794387][ T126] DVB: Unable to find symbol dib7000p_attach() [ 120.801186][ T126] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 121.022570][ T126] rc_core: IR keymap rc-dib0700-rc5 not found [ 121.030044][ T126] Registered IR keymap rc-empty [ 121.050329][ T126] dvb-usb: could not initialize remote control. [ 121.079574][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 121.135517][ T126] usb 5-1: USB disconnect, device number 6 [ 121.215697][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 121.562159][ T4362] usb 4-1: USB disconnect, device number 6 [ 122.153185][ T41] usb 2-1: USB disconnect, device number 2 [ 122.519636][ T5701] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.587580][ T5701] bond1: (slave lo): Enslaving as an active interface with an up link [ 122.617062][ T5701] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 124.972715][ T4362] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.225277][ T4362] usb 4-1: config index 0 descriptor too short (expected 14385, got 27) [ 125.240880][ T4362] usb 4-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 125.300892][ T4362] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 125.369404][ T4362] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 125.421903][ T4362] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 125.531570][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.608293][ T4362] usb 4-1: Product: syz [ 125.620907][ T4362] usb 4-1: Manufacturer: syz [ 125.715873][ T4362] usb 4-1: SerialNumber: syz [ 125.797660][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 125.797674][ T26] audit: type=1326 audit(1780434697.448:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.1.448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb8de796bd7 code=0x0 [ 126.652491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.672517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.682482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.692480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 126.702474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.712468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.722477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.732478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.742480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.752477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 127.722718][ T5792] device syzkaller0 entered promiscuous mode [ 128.509660][ T4362] usb 4-1: USB disconnect, device number 7 [ 128.629457][ T5811] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 5811 comm: syz.1.461) [ 128.694756][ T5821] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 128.720772][ T26] audit: type=1800 audit(1780434700.368:29): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.461" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=39698 res=0 errno=0 [ 128.752271][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.765349][ T5821] netlink: 'syz.3.466': attribute type 2 has an invalid length. [ 128.816584][ T5821] netlink: 'syz.3.466': attribute type 8 has an invalid length. [ 128.823672][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.022550][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 129.044426][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.075120][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.092636][ T41] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.099599][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.148834][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.170303][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.194093][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.317148][ T41] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 129.327821][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.373365][ T41] usb 4-1: config 0 descriptor?? [ 129.437141][ T14] usb 5-1: GET_CAPABILITIES returned 0 [ 129.442782][ T14] usbtmc 5-1:16.0: can't read capabilities [ 129.610802][ T41] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 129.629225][ T41] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 129.641636][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 129.647013][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 129.697858][ T14] usb 5-1: USB disconnect, device number 7 [ 129.712252][ T41] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 129.743301][ T41] [drm] Initialized udl on minor 2 [ 129.782854][ T41] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.822926][ T41] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 129.866125][ T41] usb 4-1: USB disconnect, device number 8 [ 129.889000][ T4362] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 129.906344][ T4362] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 129.916299][ T4362] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 130.534088][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 130.544192][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 130.835762][ T5856] device syzkaller0 entered promiscuous mode [ 131.092516][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 131.296948][ T14] usb 1-1: config index 0 descriptor too short (expected 14385, got 27) [ 131.335682][ T14] usb 1-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 131.370034][ T14] usb 1-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 131.421094][ T14] usb 1-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 131.510754][ T14] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 131.561762][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.581950][ T14] usb 1-1: Product: syz [ 131.594266][ T14] usb 1-1: Manufacturer: syz [ 131.609295][ T14] usb 1-1: SerialNumber: syz [ 132.638246][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.644694][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.758830][ T14] usb 1-1: USB disconnect, device number 6 [ 134.282681][ T41] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 134.636231][ T5897] [ 134.638611][ T5897] ====================================================== [ 134.645630][ T5897] WARNING: possible circular locking dependency detected [ 134.652668][ T5897] syzkaller #0 Not tainted [ 134.657079][ T5897] ------------------------------------------------------ [ 134.664094][ T5897] syz.0.488/5897 is trying to acquire lock: [ 134.669981][ T5897] ffff88807d5a71d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 134.679669][ T5897] [ 134.679669][ T5897] but task is already holding lock: [ 134.687030][ T5897] ffff88807a505af0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 134.697934][ T5897] [ 134.697934][ T5897] which lock already depends on the new lock. [ 134.697934][ T5897] [ 134.708341][ T5897] [ 134.708341][ T5897] the existing dependency chain (in reverse order) is: [ 134.717359][ T5897] [ 134.717359][ T5897] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 134.726066][ T5897] down_write+0x36/0x60 [ 134.730754][ T5897] process_measurement+0x3a2/0x1c30 [ 134.736480][ T5897] ima_file_mmap+0x102/0x150 [ 134.741596][ T5897] __se_sys_remap_file_pages+0x559/0x7b0 [ 134.747748][ T5897] do_syscall_64+0x4c/0xa0 [ 134.752679][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.759083][ T5897] [ 134.759083][ T5897] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 134.766627][ T5897] __lock_acquire+0x2d07/0x7d10 [ 134.771991][ T5897] lock_acquire+0x1bb/0x4a0 [ 134.777003][ T5897] down_read_killable+0x4c/0x340 [ 134.782449][ T5897] mmap_read_lock_killable+0x1d/0x60 [ 134.788237][ T5897] lock_mm_and_find_vma+0x2b1/0x2f0 [ 134.793940][ T5897] do_user_addr_fault+0x2db/0xb10 [ 134.799557][ T5897] exc_page_fault+0x60/0x100 [ 134.804662][ T5897] asm_exc_page_fault+0x22/0x30 [ 134.810021][ T5897] fault_in_readable+0x13e/0x1f0 [ 134.815467][ T5897] fault_in_iov_iter_readable+0xbb/0x2e0 [ 134.821613][ T5897] generic_perform_write+0x1f1/0x5c0 [ 134.827414][ T5897] __generic_file_write_iter+0x148/0x2a0 [ 134.833557][ T5897] generic_file_write_iter+0xab/0x2e0 [ 134.839435][ T5897] vfs_write+0x4b1/0xa30 [ 134.844187][ T5897] ksys_write+0x14c/0x250 [ 134.849027][ T5897] do_syscall_64+0x4c/0xa0 [ 134.853949][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.860352][ T5897] [ 134.860352][ T5897] other info that might help us debug this: [ 134.860352][ T5897] [ 134.870561][ T5897] Possible unsafe locking scenario: [ 134.870561][ T5897] [ 134.877994][ T5897] CPU0 CPU1 [ 134.883341][ T5897] ---- ---- [ 134.888687][ T5897] lock(&sb->s_type->i_mutex_key#13); [ 134.894136][ T5897] lock(&mm->mmap_lock); [ 134.900970][ T5897] lock(&sb->s_type->i_mutex_key#13); [ 134.908935][ T5897] lock(&mm->mmap_lock); [ 134.913249][ T5897] [ 134.913249][ T5897] *** DEADLOCK *** [ 134.913249][ T5897] [ 134.921373][ T5897] 3 locks held by syz.0.488/5897: [ 134.926374][ T5897] #0: ffff88802bacf4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 134.935589][ T5897] #1: ffff888055b9e460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 134.944460][ T5897] #2: ffff88807a505af0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 134.955757][ T5897] [ 134.955757][ T5897] stack backtrace: [ 134.961650][ T5897] CPU: 0 PID: 5897 Comm: syz.0.488 Not tainted syzkaller #0 [ 134.968918][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.978964][ T5897] Call Trace: [ 134.982321][ T5897] [ 134.985242][ T5897] dump_stack_lvl+0x188/0x24e [ 134.989908][ T5897] ? load_image+0x400/0x400 [ 134.994398][ T5897] ? show_regs_print_info+0x12/0x12 [ 134.999584][ T5897] ? print_circular_bug+0x12b/0x1a0 [ 135.004773][ T5897] check_noncircular+0x296/0x330 [ 135.009702][ T5897] ? add_chain_block+0x940/0x940 [ 135.014639][ T5897] ? lockdep_lock+0xf1/0x1f0 [ 135.019219][ T5897] ? _find_first_zero_bit+0xcf/0x100 [ 135.024491][ T5897] __lock_acquire+0x2d07/0x7d10 [ 135.029336][ T5897] ? verify_lock_unused+0x140/0x140 [ 135.034522][ T5897] ? mark_lock+0x94/0x320 [ 135.038840][ T5897] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.044811][ T5897] ? lock_chain_count+0x20/0x20 [ 135.049653][ T5897] ? __schedule+0x119d/0x40e0 [ 135.054317][ T5897] lock_acquire+0x1bb/0x4a0 [ 135.058806][ T5897] ? mmap_read_lock_killable+0x1d/0x60 [ 135.064251][ T5897] ? __schedule+0x11d9/0x40e0 [ 135.068908][ T5897] ? read_lock_is_recursive+0x10/0x10 [ 135.074268][ T5897] ? cmp_ex_search+0x1a/0x70 [ 135.078844][ T5897] ? bsearch+0x8a/0xb0 [ 135.082897][ T5897] ? fault_in_readable+0x13e/0x1f0 [ 135.087997][ T5897] ? search_extable+0x8c/0xd0 [ 135.092658][ T5897] ? trim_init_extable+0x3b0/0x3b0 [ 135.097755][ T5897] ? mmap_read_lock_killable+0x1d/0x60 [ 135.103198][ T5897] down_read_killable+0x4c/0x340 [ 135.108295][ T5897] ? mmap_read_lock_killable+0x1d/0x60 [ 135.113735][ T5897] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.119704][ T5897] mmap_read_lock_killable+0x1d/0x60 [ 135.125063][ T5897] lock_mm_and_find_vma+0x2b1/0x2f0 [ 135.130246][ T5897] do_user_addr_fault+0x2db/0xb10 [ 135.135268][ T5897] exc_page_fault+0x60/0x100 [ 135.139848][ T5897] asm_exc_page_fault+0x22/0x30 [ 135.144689][ T5897] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 135.150398][ T5897] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 135.169991][ T5897] RSP: 0018:ffffc90003a47ab0 EFLAGS: 00050287 [ 135.176044][ T5897] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 135.184000][ T5897] RDX: ffffc9000ec0a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 135.191957][ T5897] RBP: 0000000000000000 R08: ffff88807d728000 R09: 0000000000000002 [ 135.199910][ T5897] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000815000 [ 135.207950][ T5897] R13: 0000000000000000 R14: 0000200000814000 R15: 0000200000814000 [ 135.215908][ T5897] ? fault_in_readable+0x139/0x1f0 [ 135.221012][ T5897] fault_in_iov_iter_readable+0xbb/0x2e0 [ 135.226642][ T5897] generic_perform_write+0x1f1/0x5c0 [ 135.231920][ T5897] ? generic_file_direct_write+0x330/0x330 [ 135.237713][ T5897] ? __file_remove_privs+0x5f0/0x5f0 [ 135.242983][ T5897] ? rwsem_write_trylock+0x135/0x1c0 [ 135.248259][ T5897] ? clear_nonspinnable+0x60/0x60 [ 135.253268][ T5897] ? generic_write_checks_count+0x3d9/0x4c0 [ 135.259147][ T5897] __generic_file_write_iter+0x148/0x2a0 [ 135.264781][ T5897] generic_file_write_iter+0xab/0x2e0 [ 135.270140][ T5897] vfs_write+0x4b1/0xa30 [ 135.274377][ T5897] ? file_end_write+0x250/0x250 [ 135.279219][ T5897] ? __fget_files+0x43d/0x4b0 [ 135.283886][ T5897] ? __fdget_pos+0x2ae/0x360 [ 135.288462][ T5897] ? ksys_write+0x71/0x250 [ 135.292868][ T5897] ksys_write+0x14c/0x250 [ 135.297184][ T5897] ? __ia32_sys_read+0x80/0x80 [ 135.301935][ T5897] ? lockdep_hardirqs_on+0x94/0x140 [ 135.307122][ T5897] do_syscall_64+0x4c/0xa0 [ 135.311529][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 135.316195][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 135.320859][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.326744][ T5897] RIP: 0033:0x7f41b2d9ce59 [ 135.331158][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.350746][ T5897] RSP: 002b:00007f41b3d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.359144][ T5897] RAX: ffffffffffffffda RBX: 00007f41b3016090 RCX: 00007f41b2d9ce59 [ 135.367111][ T5897] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000006 [ 135.375073][ T5897] RBP: 00007f41b2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.383029][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.390983][ T5897] R13: 00007f41b3016128 R14: 00007f41b3016090 R15: 00007fff6c3ee7a8 [ 135.398946][ T5897] [ 135.408458][ T41] usb 5-1: config index 0 descriptor too short (expected 14385, got 27) [ 135.429693][ T41] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 135.448737][ T41] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 135.460233][ T41] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 135.478839][ T41] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 135.505350][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.522480][ T41] usb 5-1: Product: syz [ 135.527728][ T41] usb 5-1: Manufacturer: syz [ 135.535438][ T41] usb 5-1: SerialNumber: syz [ 135.813571][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.835087][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.082516][ T41] usb 5-1: USB disconnect, device number 8