last executing test programs: 18.707539754s ago: executing program 3 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 13.740354631s ago: executing program 3 (id=139): inotify_init1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) sendmmsg$unix(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40008004) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 13.586290485s ago: executing program 0 (id=140): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) readv(r2, &(0x7f0000000280)=[{0x0}], 0x1) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x2010001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x10001, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x728, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x7fffffff, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0xf, 0x4, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4200003, 0x1, 0x5, 0x80, 0x9, 0x3ff, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x7, 0x1000, 0x7f, 0x5, 0xffffffff, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x8, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549ffcfa26", 0xc}, 0x1, 0x0, 0x0, 0x4000}, 0x4480) 12.112143276s ago: executing program 0 (id=143): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r0, 0x80046f49, &(0x7f00000000c0)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092fbc620ac05c2773aeb010303010902240001040020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34565348}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000180)={0xe, &(0x7f00000001c0)=[{0x25, '\x00', @buffer={"28d189bb837b7b47b4adf405e8be88d0ace4b6e651b80392842ea55be64b9d03", 0x20}, 0x5}, {0x3, '\x00', @buffer={"964e493a0ea132bb1d1bd4597feb536e5fdaf4d4bf39d71d9612f2029b87fba0", 0x20}, 0xbe8}, {0x15, '\x00', @st={0x4, [{0x3, @svalue=0x1}, {0x0, @uvalue=0xff}, {0x1, @uvalue=0x5}, {0x0, @svalue=0x7}]}, 0x9}, {0x24, '\x00', @data, 0x80000001}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRESHEX=r3, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c0077"], 0x58}, 0x1, 0x0, 0x0, 0x28081}, 0x8000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 11.578633191s ago: executing program 3 (id=145): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000540)=0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) r6 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x141, 0xb3, 0xe2, 0x7a, 0x20, 0xe41, 0x4642, 0xd1a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x4}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="4001e6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) syz_usb_connect$uac1(0x2, 0xa3, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r1], 0x0) 10.86436101s ago: executing program 2 (id=147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) 10.064806303s ago: executing program 4 (id=148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32, @ANYBLOB="0000002000000000240012800b000100697036746e6c000014000280060012004e22000006001f"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 9.836366618s ago: executing program 0 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8, 0x1894}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x553, &(0x7f0000000d00)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "8f4182", 0x51d, 0x2f, 0xff, @private2, @loopback, {[@dstopts={0x3b, 0x1f, '\x00', [@ra={0x5, 0x2, 0x2}, @ra, @generic={0x6, 0xf1, "14298db31ca94747347e4cdef27668b2dd7d84eb7083713bd9d994fcd7c8c97edfbe4cfa911c5a2e0fbd38b0ebced2b11955abe05b96197a3047c1a6113dda96066760fd70f34c35ed9974aeac573a97a5171e522340927434e8a5b04c4cd7432c799e0ee90bd9e0de01f0fbae50f259929521c6b03e99e0df3f15c3509d66d196ba8ed98737a026bfa618908d9601bccb7fff886022b181ede141e0ecc5613d55d331626068e636cf6f5319a93bb9a0fac9ff5a36f93f516f0c7b9b87a6308889082be2cfc3c3b9cde1f6a007032f9a0c54b3e61fb67cc023da89b372669e800e7b8f99fc52ea12e01aa5e6d59e344f69"}]}, @routing={0x87, 0x12, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x20}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @private1, @remote, @remote]}, @routing={0x2f, 0x0, 0x1, 0x8}, @srh={0x67, 0x6, 0x4, 0x3, 0xff, 0x20, 0xfffe, [@private1, @loopback, @empty]}, @dstopts={0x0, 0x1b, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0xff, 0x6a24, [0x1]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x79, 0x85, "7a528e40edfa4e7f6d9c47a2647e7dfda66bb6dc61e4f951e1e4fef408211992d6278752d7818d055860ed8cdbf559508854316a1dfa1ed5debf5a58d5ca50b86bde2f9bcc69f25a75d72c275b677a04df9e6b64cb9dd44df81ec50c79e2d829c2f53581ff09e24615d38d5ffc8a41519276c877f20bded48ed25d7502a864494729a45467"}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x33, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}]}, @routing={0x21, 0x2, 0xc738167ee87e60ed, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd4, 0x2, [0x3, 0x8], "a362b22068c2a2ea1c79c459f2fa21def0fbae76b9e6877281a7a8ef4ceaa290dff9a0ebf68f427f12335c882e29f5a33549a15745463d4a8069a6224df53c31dd66ccacec5421d6dadd5491524b190757dc88b022f6d4530c716ef72e084fee06c7f80d74a4ac44ee6d54f186c179b39423474a45ede59f231791e3351b0f607daf114ff9eab11d6db9f588307a57275196284a0cddbbccdbe0de6a54a03ebc6385852fccf1904fecbc1d77f150fe3176399179b746ed8bdf1ea318d21bec27e94588464ec7305b3449e893616e2d0fe1a02b1d"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4df9a518b97e2a8308b0bc2051df9aafd0c3f152daa90468c82e73e721c665f4d2b26a63ee00f05788f6f1dc27d4fd98ab5fba31ae66b7006b8a7a842a09d3ca713972b4696922afab1ee6f7f643c5195668b6b31d09c6a6c327af387032ce46f441572658ef663f45569d5ebadb03331b8ff7e530241d17d63a32e581fa702e7f8ae67780c0e4"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "2ed4ff470df1b480563e55ca125986b9ce653a1e161f702adb49fc895d27a174f549c0070ed787e3eab5f5a5191a5299c8b2e3a692931fb166da2c13276035083d0e43857dd60744fa8a3f48744ca1a71b"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x4}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x81}, 0x2, {0x1, 0xbe9, 0x3, 0x0, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x4, "e201a9e97709d15c11d67ca8e6e7651259f92869d3f6b9ae7e766735402de4c623d5f0a9f0ebb1077229e5f3851a468457"}}}}}}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.825867129s ago: executing program 4 (id=150): r0 = syz_io_uring_setup(0x28a5, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) socket(0x2c, 0x3, 0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0), 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="1a7d", 0x2, 0x20044084, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.399246751s ago: executing program 4 (id=151): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000"], 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x10) r0 = socket(0x10, 0x3, 0x0) bind(r0, &(0x7f00000002c0)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xd, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002100)=@newtaction={0x1684, 0x30, 0x4, 0x70bd26, 0x25dfdbff, {}, [{0xfdc, 0x1, [@m_pedit={0xfd8, 0x4, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x2, 0xcecc, 0x2, 0x9, 0x5}, 0x80, 0x69, [{0x7, 0x0, 0x72a0, 0x2, 0x5}, {0x681, 0x9, 0x7fffffff, 0x5, 0x7ff, 0x6}, {0x3, 0x7, 0xf06, 0x3, 0x8001, 0x8}, {0x7, 0xffffcb0f, 0xffff8000, 0x4016, 0x9, 0xff}, {0x9, 0x5, 0x80000001, 0x727, 0x2, 0x4}, {0x10, 0x5482, 0xf6, 0x4, 0x7f}]}, [{0x8001, 0x23, 0xf, 0xfffffffa, 0x8001, 0x4}, {0xf, 0x3, 0xe60b, 0x4, 0x4, 0xfe000000}, {0x0, 0x8, 0x7747, 0x9, 0x400, 0xcd}, {0x3, 0xe, 0x3fb7d6f3, 0x5, 0x2, 0x1}, {0x1, 0x4, 0x0, 0x800, 0x9, 0x7}, {0xfa, 0x0, 0x7, 0x9589, 0x0, 0xb}, {0x77, 0x5, 0xffffffff, 0x1, 0x7, 0x7}, {0x3b, 0xfffffffb, 0xffffffff, 0x2, 0x0, 0x5}, {0x6, 0x5, 0x7fffffff, 0x1, 0x42, 0x1}, {0x101, 0x9, 0x400, 0x2, 0x7, 0xe}, {0x7fffffff, 0x98d, 0xf, 0x1, 0x5, 0x9}, {0x5, 0x7, 0x9, 0xd, 0x7, 0x9}, {0x2, 0x0, 0x2, 0x100, 0x9, 0x8}, {0x4c, 0x100, 0x3, 0xc4, 0x7, 0x938a}, {0x7ff, 0x6, 0x5, 0xaa09, 0x4, 0xa2}, {0xe0000000, 0x4, 0x7f, 0x5, 0x7, 0x3}, {0x5, 0x200, 0x36b, 0x2, 0x7fff, 0x81}, {0x3, 0x2, 0x2, 0xed75, 0x0, 0x5}, {0x3e08, 0x80, 0x6, 0xe, 0x7, 0x5}, {0x7, 0xcf, 0x8, 0x9, 0x80}, {0xe8, 0x6, 0x3, 0xba, 0x1, 0xaff}, {0x9, 0x10000, 0x140000, 0x7f, 0x4, 0x1000}, {0x7, 0x6, 0xe, 0x3be8ec56, 0x7fffffff, 0x6}, {0x5, 0x60, 0x6, 0x0, 0x1, 0x4}, {0xffff7fff, 0x5, 0x0, 0x9, 0x3, 0x80000000}, {0x6, 0x7fffffff, 0x6, 0x1000, 0x0, 0x408}, {0x3, 0x7cb, 0x7, 0x0, 0xfffffff9, 0xdfe3}, {0x8, 0x0, 0x53, 0x8, 0x8, 0x81}, {0x101, 0x8, 0x3, 0x6ca, 0x3, 0x100}, {0xfffffffb, 0x7f, 0x8, 0xffffff7f, 0x1, 0x5}, {0x8, 0x9, 0x2, 0x6, 0x5, 0x9}, {0xd17, 0x6, 0x7eeb, 0x7f, 0x40, 0x7fff}, {0x7fffffff, 0x0, 0x100, 0x1, 0x6, 0xd12e}, {0x8, 0x5, 0x0, 0x0, 0xe41, 0xd52ae7}, {0xffffffc0, 0x10, 0x1, 0x54b, 0x9, 0xfffffff8}, {0xd, 0xfb, 0xb, 0x1eb, 0x1, 0x101}, {0x800, 0x3, 0x9, 0x9, 0x8197, 0x8}, {0x2, 0x2, 0x9, 0x12, 0x7, 0x11f}, {0xc00000, 0xa8, 0x73, 0x9, 0x7, 0x8}, {0x0, 0xffffffff, 0x6000000, 0x0, 0xf0fd, 0x3}, {0x6, 0xf2, 0x1, 0x80000000, 0xbbf0, 0xfffffffd}, {0x1, 0x1, 0x5, 0x5, 0x7fff, 0x4d}, {0x6, 0x6, 0x9, 0x3, 0x6, 0xb1}, {0x0, 0x3, 0x2, 0x2, 0x4, 0xffffe1d0}, {0x0, 0x81, 0x0, 0x7ff, 0x0, 0x14e2}, {0x5, 0x6, 0x0, 0x4, 0x0, 0x8}, {0x8, 0x0, 0x7, 0x8, 0x2, 0x1}, {0x4674, 0x40, 0x5, 0x2, 0x8, 0x3}, {0x10001, 0xde, 0x1ff, 0xffffffff, 0x6, 0x2}, {0x9, 0x8, 0x1, 0x4ff, 0x10000000, 0x8}, {0x8, 0x4, 0x4, 0x1, 0xfffffffc, 0x9}, {0x80, 0x595, 0x7, 0x0, 0x0, 0x1}, {0xc96e, 0x8000, 0x3, 0x6, 0x8, 0x5f0516f2}, {0x80000000, 0x7, 0xff000000, 0x40, 0x7fffffff, 0x9}, {0x6, 0x4, 0x481, 0x3ff, 0x48, 0x98}, {0x8, 0x6, 0x0, 0x3, 0x101, 0x138}, {0x400, 0x0, 0x19d3, 0x5, 0x4, 0x2b5d}, {0x2, 0x8, 0x9, 0xee, 0x481a0f3f, 0x4}, {0x1, 0x996, 0xb, 0x8620, 0x1000, 0x6}, {0x3, 0x8, 0x0, 0x1, 0x7, 0x2da}, {0xb598, 0x8, 0x8, 0xa240, 0x46, 0x2}, {0xec, 0x9, 0x1, 0xfffffff5, 0x7, 0x2}, {0x3, 0xe7, 0x80000000, 0x7, 0x8, 0x7fff}, {0x2, 0x1, 0x1, 0x5, 0x4}, {0x81, 0x4, 0xff, 0xffffff7f, 0x401, 0x8001}, {0x6, 0x400, 0x1, 0x7, 0x6, 0x6}, {0xffff, 0x100, 0x7, 0x7, 0x4, 0x9}, {0x805, 0x6, 0x200, 0x1, 0xff, 0x2}, {0x3, 0x4, 0x80, 0xf13, 0x40000, 0x3ff}, {0x5, 0x3, 0x1, 0x3, 0x195, 0x2}, {0xb2be, 0x1, 0xf69, 0x5, 0x8, 0x7}, {0x0, 0x4, 0xc4, 0x1, 0x4, 0x4}, {0x7, 0x5, 0x9, 0x8, 0x7, 0x6}, {0x9, 0xe, 0x1, 0x7fffffff, 0x5, 0x6}, {0x7, 0x40, 0xfffffffe, 0x0, 0x2, 0xfffffffc}, {0x6, 0x3, 0x40, 0x800, 0x400, 0x100}, {0x3, 0xb, 0x1000, 0x9, 0x4, 0x401}, {0x5988, 0x56, 0x3, 0x5, 0xe, 0x6}, {0xb661, 0x8, 0x80000000, 0x8, 0xa3}, {0x8, 0x3, 0x7, 0x6, 0x4, 0xa}, {0x7, 0x6, 0x8, 0x8, 0x0, 0x100}, {0x0, 0x8, 0x288f9043, 0xd5, 0x4, 0x9}, {0x6, 0x5, 0xf9fe, 0x7, 0x8, 0x3}, {0x100, 0x66542a14, 0x8001, 0x7, 0x2, 0xb9a0}, {0x8000, 0x8, 0x7fe, 0x4, 0x80, 0x7}, {0x8, 0x8, 0x2, 0x3, 0x10, 0xc}, {0x7, 0x2, 0x8, 0x1, 0xfeb, 0xfffffff9}, {0x4, 0x2, 0x9, 0x30000, 0xa, 0xc}, {0x1, 0x9, 0x7, 0x4, 0x80}, {0x8, 0x3, 0x6af65030, 0x9, 0x450e, 0xfffffffc}, {0x5, 0x9, 0x6, 0xfffffff6, 0x6, 0x80000001}, {0x3, 0x1454, 0x1, 0x6, 0x200, 0x7ff}, {0x7fffffff, 0x8, 0x3, 0x4, 0x7f, 0x3}, {0xdc6, 0x0, 0x3, 0xb150, 0x10001}, {0x0, 0x8, 0xfffff330, 0x5, 0x8}, {0x8, 0x9, 0x3a09, 0x0, 0x6, 0x8000}, {0x3, 0x9, 0xe, 0x10001, 0x4, 0x8}, {0x5, 0x9, 0x101, 0x81, 0xfffffff8, 0x40}, {0x5, 0x1000, 0x5, 0xffffffff, 0x2, 0x4}, {0x5, 0x80, 0x80000000, 0x410b, 0x5, 0x9}, {0x6, 0x3, 0x6, 0x0, 0x1, 0xe}, {0x8b, 0x6, 0xffff, 0xe87, 0x7, 0x8}, {0x7, 0x3, 0x3, 0x7, 0xf4c, 0x6890}, {0x6, 0x3, 0x14, 0x5, 0x8, 0xb}, {0xd, 0x5, 0x1, 0xf, 0x7, 0x6}, {0x0, 0x2, 0xa, 0x7ff, 0xa31, 0x7fcfaf1f}, {0xf0000000, 0x7, 0xa5c, 0xfffffffe, 0x388a, 0xfff}, {0x0, 0x4, 0x8, 0x9, 0x8, 0x7}, {0xa, 0x5, 0x2, 0x8, 0x6, 0x10}, {0x1, 0x6, 0xd59, 0x0, 0x200, 0x9}, {0x1000, 0x89f6, 0x9, 0x2, 0x9, 0x9}, {0x1, 0x0, 0x6, 0xb, 0x3, 0x2}, {0x3, 0x6, 0x80000001, 0x7fff, 0xffffffff, 0xd807}, {0xd4, 0x7, 0x2, 0x0, 0x8, 0x1}, {0x6141, 0x5, 0x800, 0x40, 0x2, 0xfffffffb}, {0x81, 0x5, 0x5, 0xd60a, 0x5, 0x10001}, {0xda8b, 0xdfea, 0x6, 0xe6fa, 0x5b6a, 0x2000000}, {0x8d, 0x4, 0xbf1, 0xfeb2, 0x2, 0x1}, {0x10001, 0x3ff, 0x7, 0xf, 0x2, 0x8}, {0x0, 0xb, 0x2, 0x7, 0xb59, 0x3}, {0x576, 0x14, 0x10000, 0x9e80, 0x8, 0x3ff}, {0x0, 0xffffffff, 0x1, 0x8, 0x7, 0x1000000}, {0x0, 0xd00000, 0x0, 0xa, 0x6e}, {0x50, 0x8, 0xffff, 0x3, 0x7fe8, 0xffffff00}, {0x9, 0xdb, 0x6, 0xffffbf1f, 0x0, 0x9}, {0x4, 0x3, 0x1, 0x5d, 0x5}, {0x8001, 0x869d, 0x6, 0x9, 0x8, 0x7}, {0x401, 0x6, 0x7, 0x6, 0x273a4a1c, 0x100}], [{0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0xd}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5}, {}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0xb}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x3}, {0x1}, {}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}]}}]}, {0xf9, 0x6, "b958f33e93a1528b818cd1d665db98ea080edc1e3a9d051af3fba0936d86121b9a8906c2814444800eb1798574727646fe17c90d41e1e075383ea59042f9549b370d9d55313441defe85f2a3b9ef90bdfaec124bc038587f3ea982e77d09cec93e6e9e37081cbc9174f16a08768c0eb24184543065b7fb5761e40178cdab16f34a71446cc040909b6cd592d8e20233cc5a8bc4a72292029ddf8a34e86805d464de20f9bd89cad68cb8dd1157c89d27f712d55a69fa3433f221051894c7b3bd7d584ec7dadb3620355500c5b82d06020c88ae7463f668da622ab3ddf79630b04daacbae6de8dfec748576aa3b92b2e9d4b93d79d0b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x694, 0x1, [@m_xt={0x250, 0x20, 0x0, 0x0, {{0x7}, {0x21c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xbe, 0x6, {0x2, 'raw\x00', 0x4, 0x0, "8d70e86011fe445162f8bf48a03b2e488e53eadb330c976afaf3e8f8499c5c10ae7da65e4cc355caa42ba31f5a4b9c50384127914aceaf8513b61845d1f37ff7912fc884d6adec223a825133929dc154a6271b3972853afb37eeeb9cec483bf164e27241410ee4646737ffc16734bcb784a78b8cd1b049ab3204cbe8b5cea946412a5b0f0b97a8d7c1f4ac9faf1c8e043930f741"}}, @TCA_IPT_TARG={0x123, 0x6, {0x32d4, 'nat\x00', 0x4, 0x7c, "cb038ff64129188ac8e3e838e343ead0a815627835a21629caade9a31529ade457ac71a92994e37a0bfe17861ff94666f363878f4f4dfbbd4a5852ef0c0f1fdecde3b96907248e7d2cb3e0d0d6db56cf0678dcb00ba0cfded92301f8fe19cb896ed78f282fc273e19ed01ab63d90aa51ae184d832b5904ce2ead2bd780060492d2a31e91f3c1266cfe3cdb3f16a1ea1d7114aa9119229dc9887340c80d0bb37ddf90d428c670a7835b9f90db2a130f2d7eaf0d14df809b771c08217940bcb5db5be773fa819f04b63378eddbf345b202eb88ed1c3ca3e3eeb6b1c179de1abf322713150782baf67be12981bac42778f93be03627cb32942195"}}]}, {0x10, 0x6, "9a781efa4d426362dcbceb01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xe8, 0x6, "d81b46b4726e72de248b050bc50c8d857f73a4a67a1fbec11511bbebfb32aa207d614f2797e6a60f668cd7d799944e6236c1a6c867a66ad48be1bcf8de4383ff48aafce50b63f4d6f674e9104f975af8e92bbb8c17539db4158d0e44af9edd2097ce731e45102682a5c7ad02899b73b34a5cc73e61febab3a80e86021562390551376b96f0a0e0ebc70bfd1c187f129ffe9f3cc02e43cdedb19e3bc5779123ecb2b21ea544d00690a3680364040cf7b916bb8f875d4305a51a5b9159249c3f1cd189fdff5a903c8e5047c743f3ebc391b20486aa1415b746cd833b137d7ad4578feb65b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x78, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x49, 0x6, "c46162aa4a69ba0389e2553a5e821b66cbd8f556fc89b1c74de904e73c32ba6930111249cdda50e1977525de04d28245a0cc4386476bb5788aec43f9df8e171b2437c6c8a4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x104, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0xd0, 0x6, "95697c2269a2415ac1ea1fbed54935686bb9c08b8880232b90c9387c9c8515cb31f5a3121c281107195a152244393a095523d94d03595215c7d9cce6f86cbaa45276235a1378194df9d23b7d14e0d6d45e0e17fd08b41bc675b06c9ea308828b557a378d49258a39ece9e8c8dd95f582f518ea95f84d7cf88d7b7c86072b11f1d48e8f6a9e4d18a1051bae75d5da62607e88bec1d21536d48db2525bcd9f60207805f624836a8ea3b0a3dc6e4062cc5792371d529945827b01ca6681ff042aa32191868c4824936dd3e6a352"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xb4, 0x1c, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x4, 0x10000000, 0x8, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x2e8ab8595e4cb5ac}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xa, 0x6, 0x3d, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x28, 0x6, "bdd3dd0175c0e49fc23e07fa87a726af197b62119bd6e7214d15324e3957430ed342d117"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x8, 0x7, 0x1, 0x7}}]}, {0xad, 0x6, "e0d99f60aece62e5fc18078b7aeaafad87d670c84b1ad1223d173e8bb550303fe4b3fbb5c452779b268cb2e4327118c7372136e153d9304c40fa96128517e3fdbd01780afbe583f98be5cecbe3d0d816e7671544c5af06887b8e95d80767fc244e80743ec3d5fe50d285041093e5dfd47a1aeb8dd0080fc6e7b42d7db24b429c9098494a39346dacf2c7d17045a657605eb9422c1ce73da0957334eef64f79878a8c15946651242399"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1684}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r11 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r13, &(0x7f0000000100)={0x20000014}) epoll_pwait(r11, &(0x7f0000000400)=[{}, {}], 0x2, 0xfffffffd, 0x0, 0xfffffffffffffcee) syz_usb_control_io$uac2(r1, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.176144937s ago: executing program 1 (id=152): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000080)={0x20, 0x11, 0x28, {0x28, 0x11, "afc091ee308d250e55b6b2548c7c4571a3b934210bb88b3f0d0027400c6b9db341518f189bd0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.801621377s ago: executing program 0 (id=153): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/230, 0xe6}}], 0x1, 0x0, 0x0) 8.461796127s ago: executing program 0 (id=154): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) readv(r2, &(0x7f0000000280)=[{0x0}], 0x1) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x2010001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x10001, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x728, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x7fffffff, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0xf, 0x4, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4200003, 0x1, 0x5, 0x80, 0x9, 0x3ff, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x7, 0x1000, 0x7f, 0x5, 0xffffffff, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x8, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549ffcfa26", 0xc}, 0x1, 0x0, 0x0, 0x4000}, 0x4480) 6.478397651s ago: executing program 3 (id=155): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0xb, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x384, 0xed}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.381760484s ago: executing program 0 (id=156): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0xf8, &(0x7f0000000900)=ANY=[@ANYBLOB="050ff8000207100202c0ff7fec1001f25bb7d1c8259e63d850a13b4ef4f7eb6f1b5b074484ec97fee85de70d5dd3716502c1fe02300893454f413707000000000000001876527489857faf5b16eea73761820d3bda5c04e2e72cd323e472728ee2c108ba44be3471d5b4b5a743138fa51b5e8686bf7daf87296ee2a30825160024dcba237f7fb8c25428e66df43006ff8983216d7fda14e946ca93d573c0df31af4e09a80f5249cdd393051b721961583bbf9faf5f077d1c6c8fceb527f44393"], 0x4, [{0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1403e9f1e3ef35ac4dd7"]}, {0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="0d03a3210200000000000000a6"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB]}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000580)={0xc, &(0x7f0000000480)={0x0, 0x30, 0x95, {0x95, 0x3, "2f7838b852ee35ac28ea18e18651986371f170ff62e6a100156084b19301e541ea19b180a6254ca6d3d444fc87c14e67f708174f942f92c0c24b4ee61fd7948579d430bcf03d5da56f2aebbf351ae8600be0b64e134b87b79d2d3fc25c1a266a389b87abf76b498c3b48241e925f627f5ae70f747a02bfe24478604bd073476b21a4d1cc9cf4bcc4ff597d04f32cbbd7c29214"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) close(0x3) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) 6.301300136s ago: executing program 3 (id=157): r0 = msgget(0x2, 0x8) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000140)=""/68) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0xa07}], 0x1, 0x0, 0x0, 0x40404c5}, 0xc000004) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000f80)=0xe4) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB='@\"\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 6.063120193s ago: executing program 2 (id=158): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f00000008c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.453015749s ago: executing program 1 (id=159): chdir(&(0x7f0000000540)='./cgroup\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 5.44194522s ago: executing program 1 (id=160): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r0, 0x80046f49, &(0x7f00000000c0)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092fbc620ac05c2773aeb010303010902240001040020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34565348}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000180)={0xe, &(0x7f00000001c0)=[{0x25, '\x00', @buffer={"28d189bb837b7b47b4adf405e8be88d0ace4b6e651b80392842ea55be64b9d03", 0x20}, 0x5}, {0x3, '\x00', @buffer={"964e493a0ea132bb1d1bd4597feb536e5fdaf4d4bf39d71d9612f2029b87fba0", 0x20}, 0xbe8}, {0x15, '\x00', @st={0x4, [{0x3, @svalue=0x1}, {0x0, @uvalue=0xff}, {0x1, @uvalue=0x5}, {0x0, @svalue=0x7}]}, 0x9}, {0x24, '\x00', @data, 0x80000001}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRESHEX=r3, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c0077"], 0x58}, 0x1, 0x0, 0x0, 0x28081}, 0x8000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) 4.355375369s ago: executing program 4 (id=161): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0xef) msgctl$IPC_RMID(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x44}}, 0x0) 3.474574784s ago: executing program 4 (id=162): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r1, 0x0, 0x0, 0x78f2a36b) 3.195665041s ago: executing program 1 (id=163): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x3f3ffc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb) 3.189838172s ago: executing program 3 (id=164): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}]}, 0x38}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000009ac0)=[{&(0x7f0000000880)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="1d2ec7e2", 0x4}], 0x1, &(0x7f0000000c00)=[@init={0x14, 0x84, 0x0, {0x2, 0x3, 0x101, 0xe}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x80}}, @dstaddrv4={0x10, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}], 0x38, 0x1}], 0x1, 0x8ddcc1c97e7a01d0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r4, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x3a4}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x140, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x27}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2f}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}]}, @NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "806c3f05e9cf7adf0024ddcbab157c7337b103990486bba2690d56e0db3b920c8ab6b3fb5358682ee56d3207f9bc8220095612bcad25731d2758acdec4aa200062a0cb749d315e7e90022a19f129493b6ddd03996bd07cf638f7a6940e44d474399f279716988cc24dc9218864961e9f8761216f18b04cb1d52eca2a1241b4a969b3abc1c83d214f0ccd37b96e884a8f57920b163d00060ae3a5e8581d9d0ed2d9a7482e89a9937740e9a92bd4f2d0514ae4ccdc613c9737745b5e6ca3c90d02ceab1acc"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0xa, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.15823881s ago: executing program 4 (id=165): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.134482831s ago: executing program 1 (id=166): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) readv(r2, &(0x7f0000000280)=[{0x0}], 0x1) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x2010001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x10001, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x728, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x7fffffff, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0xf, 0x4, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4200003, 0x1, 0x5, 0x80, 0x9, 0x3ff, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x7, 0x1000, 0x7f, 0x5, 0xffffffff, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x8, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549ffcfa26", 0xc}, 0x1, 0x0, 0x0, 0x4000}, 0x4480) 1.569634197s ago: executing program 2 (id=167): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0xb, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x384, 0xed}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.120711998s ago: executing program 1 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) 934.457894ms ago: executing program 2 (id=169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9c, @private2, 0x4d0}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="f676fbd1", 0x4}], 0x1}}], 0x1, 0x51) 901.510085ms ago: executing program 2 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc020) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x4, 0x10000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' B', 0x2}, {0x0}], 0x2}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) 0s ago: executing program 2 (id=171): epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x2, 0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500279d6212099040ef0f3f00102030109022c0001880b000209041e0002ff1e7106082402011003d10809050f"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x200000000000001) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) connect$pppoe(r2, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r9, @ANYBLOB="100001800400"], 0x28}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 58.498515][ T4174] cgroup: Unknown subsys name 'net' [ 58.601862][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.856040][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.101595][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.180933][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.222686][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.251606][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.259509][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.267468][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.278702][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.285825][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.294084][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.321575][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 61.336278][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.381776][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.414474][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.423764][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.430801][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.438655][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.472692][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.479998][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.487786][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.539801][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.546992][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.555509][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.562695][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.569990][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.578270][ T4201] device bridge_slave_0 entered promiscuous mode [ 61.592913][ T4188] team0: Port device team_slave_0 added [ 61.600994][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.610253][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.617403][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.625272][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.632304][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.639609][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.647874][ T4201] device bridge_slave_1 entered promiscuous mode [ 61.655207][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.662261][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.670065][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.678414][ T4188] team0: Port device team_slave_1 added [ 61.691702][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.718682][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.725893][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.733829][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.757884][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.772376][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.779554][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.805584][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.824214][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.834820][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.856480][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.863449][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.889471][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.902573][ T4190] team0: Port device team_slave_0 added [ 61.911018][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.921746][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.949399][ T4190] team0: Port device team_slave_1 added [ 61.962396][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.973608][ T4194] team0: Port device team_slave_0 added [ 61.994756][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.001819][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.017610][ T4201] team0: Port device team_slave_0 added [ 62.031197][ T4201] team0: Port device team_slave_1 added [ 62.038081][ T4194] team0: Port device team_slave_1 added [ 62.078425][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.085573][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.111977][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.126915][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.133931][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.160616][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.174867][ T4189] team0: Port device team_slave_0 added [ 62.202387][ T4189] team0: Port device team_slave_1 added [ 62.220980][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.228255][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.257803][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.269864][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.277631][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.303691][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.316082][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.323044][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.349050][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.368545][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.376311][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.402283][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.414385][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.421340][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.447347][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.479059][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.486394][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.512384][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.531770][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.538417][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.545498][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.553224][ T4190] Cannot create hsr debugfs directory [ 62.596910][ T4201] device hsr_slave_0 entered promiscuous mode [ 62.604590][ T4201] device hsr_slave_1 entered promiscuous mode [ 62.611135][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.619008][ T4201] Cannot create hsr debugfs directory [ 62.636587][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.643286][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.650118][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.658036][ T4194] Cannot create hsr debugfs directory [ 62.692630][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.699426][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.706753][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.714369][ T4189] Cannot create hsr debugfs directory [ 62.864580][ T4196] Bluetooth: hci0: command 0x0409 tx timeout [ 62.870991][ T4196] Bluetooth: hci4: command 0x0409 tx timeout [ 62.877934][ T4196] Bluetooth: hci1: command 0x0409 tx timeout [ 62.884771][ T4196] Bluetooth: hci3: command 0x0409 tx timeout [ 62.900103][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 62.972345][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.984073][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.993098][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.009714][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.053203][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.069203][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.082858][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.101467][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.111662][ T4201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.121169][ T4201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.146437][ T4201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.159121][ T4201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.244898][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.255079][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.268556][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.300649][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.309330][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.318502][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.328895][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.339808][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.352738][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.381587][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.390970][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.400975][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.408202][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.417832][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.426981][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.435521][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.442564][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.450716][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.466032][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.476746][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.488245][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.500152][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.515311][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.530850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.541349][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.552789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.562919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.601624][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.608831][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.619287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.627392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.636546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.645017][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.652055][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.660297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.670792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.679338][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.686405][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.694250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.702755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.711402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.719845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.744323][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.756534][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.770321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.779917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.789087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.800503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.809146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.817637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.826194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.834904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.846322][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.854255][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.862855][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.871434][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.895241][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.908480][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.917935][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.926883][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.936021][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.944462][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.952048][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.976727][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.985796][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.995509][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.006979][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.016588][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.023657][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.031666][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.040601][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.049326][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.056411][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.069490][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.077590][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.087202][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.099229][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.114764][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.138163][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.178370][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.187700][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.197001][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.206798][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.216648][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.226319][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.233375][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.241902][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.251692][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.260155][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.267418][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.275770][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.284856][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.293038][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.318815][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.336560][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.356423][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.390224][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.401189][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.410072][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.421068][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.430124][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.439068][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.448831][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.457605][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.469456][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.481961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.490586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.521403][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.529942][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.542543][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.551867][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.565777][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.575951][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.587259][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.597804][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.609105][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.638827][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.655583][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.674126][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.681219][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.714102][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.754011][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.762515][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.777184][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.789571][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.796709][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.806648][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.815405][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.824088][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.832614][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.841394][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.849127][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.856637][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.871531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.880086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.911209][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.921933][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.955026][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 64.967544][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.974081][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 64.978776][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.981937][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 65.000768][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 65.004259][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.006956][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 65.022149][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.033989][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.042239][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.068465][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.080681][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.091197][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.110641][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.142490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.152825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.175425][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.188878][ T4190] device veth0_vlan entered promiscuous mode [ 65.201172][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.211800][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.239351][ T4190] device veth1_vlan entered promiscuous mode [ 65.251282][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.259699][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.268868][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.277785][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.301157][ T4188] device veth0_vlan entered promiscuous mode [ 65.311234][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.320142][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.330251][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.338736][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.347948][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.359414][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.368342][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.377090][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.414057][ T4188] device veth1_vlan entered promiscuous mode [ 65.421185][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.431642][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.440047][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.448717][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.456411][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.469565][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.477573][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.489830][ T4201] device veth0_vlan entered promiscuous mode [ 65.502279][ T4201] device veth1_vlan entered promiscuous mode [ 65.512516][ T4194] device veth0_vlan entered promiscuous mode [ 65.524981][ T4190] device veth0_macvtap entered promiscuous mode [ 65.534176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.542215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.550587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.559888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.568684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.577192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.586221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.595062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.602970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.628215][ T4190] device veth1_macvtap entered promiscuous mode [ 65.638835][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.650164][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.659625][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.668647][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.677386][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.691764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.700958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.711088][ T4201] device veth0_macvtap entered promiscuous mode [ 65.722502][ T4194] device veth1_vlan entered promiscuous mode [ 65.731539][ T4188] device veth0_macvtap entered promiscuous mode [ 65.741636][ T4201] device veth1_macvtap entered promiscuous mode [ 65.762246][ T4188] device veth1_macvtap entered promiscuous mode [ 65.775330][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.792154][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.800941][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.809889][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.818158][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.826537][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.834910][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.842964][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.851719][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.860502][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.869424][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.881494][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.914883][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.928935][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.940367][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.948422][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.957127][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.966670][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.975179][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.984668][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.993346][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.004345][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.013193][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.022071][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.032166][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044201][ T4194] device veth0_macvtap entered promiscuous mode [ 66.054910][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.067098][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.078505][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.101803][ T4189] device veth0_vlan entered promiscuous mode [ 66.114306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.122499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.132525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.141690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.150320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.160723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.168792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.181710][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.193033][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.203016][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.215169][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.226514][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.236534][ T4189] device veth1_vlan entered promiscuous mode [ 66.249656][ T4194] device veth1_macvtap entered promiscuous mode [ 66.260240][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.269167][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.278187][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.287532][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.298406][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.307337][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.316247][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.325872][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.338290][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.349608][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.359561][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.370320][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.386210][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.396696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.406358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.449207][ T4189] device veth0_macvtap entered promiscuous mode [ 66.459809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.471364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.479974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.495183][ T4201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508447][ T4201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.517346][ T4201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.526343][ T4201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549854][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.565856][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.575800][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.586424][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.596258][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.607062][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.618574][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.629925][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.641638][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.651543][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.662077][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.672200][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.682909][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.694815][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.702900][ T4189] device veth1_macvtap entered promiscuous mode [ 66.726562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.734559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.743018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.752055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.760759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.772819][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.781840][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.791506][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.800459][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.820344][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.831055][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.841140][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.851602][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.861788][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.873059][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.882898][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.894258][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.905935][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.916781][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.932047][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.942346][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.953665][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.963816][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.974459][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.984453][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.995129][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.008468][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.023070][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.033634][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.034237][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 67.042341][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.049324][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 67.063176][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.063901][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 67.079430][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 67.085671][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 67.092914][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.102636][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.112811][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.124375][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.148689][ T444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.178960][ T444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.187788][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.201717][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.241842][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.255972][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.299755][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.313011][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.331444][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.342504][ T444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.350023][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.364341][ T444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.370867][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.371975][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.385586][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.400924][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.419567][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.451386][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.473443][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.481735][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.526466][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.564217][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.572070][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.598779][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.603698][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.620268][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.628283][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.644833][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.653252][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.688105][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.827336][ T4277] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.899274][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.343966][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.787121][ T4232] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 68.828616][ T4232] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 68.866072][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.984398][ T4283] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.028310][ T4232] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 69.121361][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 69.159337][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 69.177027][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 69.193619][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 69.203718][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 69.724166][ T4306] qrtr: Invalid version 30 [ 70.015384][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.283651][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 70.423847][ T13] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 70.442202][ T13] usb 1-1: config 0 has no interface number 0 [ 70.448890][ T13] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 70.462822][ T13] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 70.478624][ T13] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.506469][ T13] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 70.524323][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.552605][ T13] usb 1-1: config 0 descriptor?? [ 70.615511][ T13] ldusb 1-1:0.55: Interrupt in endpoint not found [ 70.846777][ T4196] usb 1-1: USB disconnect, device number 2 [ 70.943262][ T4269] usb 4-1: USB disconnect, device number 2 [ 71.373784][ T4269] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.403663][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.563577][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.613672][ T4269] usb 4-1: Using ep0 maxpacket: 32 [ 71.747342][ T4269] usb 4-1: config 4 has an invalid interface number: 196 but max is 0 [ 71.766539][ T4269] usb 4-1: config 4 has no interface number 0 [ 71.772665][ T4269] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 71.783208][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.801506][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 71.819053][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 71.838586][ T4269] usb 4-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.853689][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 71.858272][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.873650][ T4269] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.889321][ T4269] usb 4-1: config 4 interface 196 has no altsetting 0 [ 71.896360][ T4232] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 71.905864][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.928305][ T4232] usb 2-1: config 0 descriptor?? [ 71.985210][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.020103][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.063803][ T4269] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 72.068310][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.082078][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 72.100390][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.108902][ T4269] usb 4-1: Product: syz [ 72.113218][ T4269] usb 4-1: Manufacturer: syz [ 72.123564][ T4269] usb 4-1: SerialNumber: syz [ 72.130403][ T13] usb 5-1: config 0 descriptor?? [ 72.153896][ T4346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.186830][ T4233] usb 2-1: USB disconnect, device number 2 [ 72.204729][ T13] hub 5-1:0.0: USB hub found [ 72.413748][ T13] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 72.490276][ T4365] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 72.613704][ T4269] ipheth 4-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 72.633957][ T4269] ipheth: probe of 4-1:4.196 failed with error -22 [ 72.767967][ T4369] device syzkaller0 entered promiscuous mode [ 72.866639][ T13] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 73.198542][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.266045][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.273233][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.353652][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.443733][ T4269] usb 1-1: Using ep0 maxpacket: 8 [ 73.483679][ T1108] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 73.593584][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 73.603840][ T4269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.605792][ T4355] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 73.683665][ T4269] usb 1-1: config 4 interface 0 has no altsetting 0 [ 73.714384][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.724863][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.893782][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.893798][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.893822][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.904352][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.904395][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 73.904431][ T1108] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 73.904451][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.947500][ T4377] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.952486][ T4269] usb 1-1: string descriptor 0 read error: -22 [ 73.973062][ T4269] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 73.984813][ T1108] hub 3-1:1.0: bad descriptor, ignoring hub [ 73.991106][ T4269] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 73.992000][ T23] usb 2-1: Product: syz [ 74.002395][ T1108] hub: probe of 3-1:1.0 failed with error -5 [ 74.011694][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 74.022488][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 74.022740][ T23] usb 2-1: Manufacturer: syz [ 74.035741][ T23] usb 2-1: SerialNumber: syz [ 74.042730][ T4232] usb 4-1: USB disconnect, device number 3 [ 74.043754][ T1108] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 74.050817][ T4269] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 74.060413][ T1108] cdc_wdm 3-1:1.0: Unknown control protocol [ 74.106379][ T4269] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.122932][ T4269] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 74.130877][ T4269] usb 1-1: media controller created [ 74.150826][ T4269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.211908][ T13] usb 5-1: USB disconnect, device number 2 [ 74.220334][ T4355] usbhid 5-1:0.0: reset_resume error -19 [ 74.228705][ T4385] Zero length message leads to an empty skb [ 74.254431][ T4269] zl10353_read_register: readreg error (reg=127, ret==0) [ 74.349256][ T4269] usb 1-1: USB disconnect, device number 3 [ 74.393901][ T23] usb 2-1: 0:2 : does not exist [ 74.467668][ T23] usb 2-1: USB disconnect, device number 3 [ 74.595609][ T4233] usb 3-1: USB disconnect, device number 2 [ 74.727602][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.345208][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.352837][ T4204] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.424123][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.593737][ T4204] usb 2-1: Using ep0 maxpacket: 16 [ 75.713896][ T4204] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 75.723202][ T4204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.752115][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.764516][ T4204] usb 2-1: config 0 descriptor?? [ 75.805562][ T4204] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 75.843672][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.866351][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.883637][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.913742][ T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 75.935078][ T23] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 75.944120][ T23] usb 3-1: Product: syz [ 75.948401][ T23] usb 3-1: SerialNumber: syz [ 75.964673][ T23] usb 3-1: config 0 descriptor?? [ 76.044768][ T4233] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 76.053985][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.062114][ T4233] usb 1-1: Product: syz [ 76.066385][ T4233] usb 1-1: Manufacturer: syz [ 76.070988][ T4233] usb 1-1: SerialNumber: syz [ 76.117970][ T4233] usb 1-1: selecting invalid altsetting 1 [ 76.124464][ T4233] usb 1-1: unit 6 not found! [ 76.142554][ T4233] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 76.175641][ T4387] udevd[4387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.235490][ T23] hso 3-1:0.0: Failed to find BULK IN ep [ 76.284040][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.313622][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.321465][ T4233] usb 1-1: USB disconnect, device number 4 [ 76.346877][ T1108] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 76.381075][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.392544][ T1108] usb 5-1: config 0 descriptor?? [ 76.448343][ T23] usb 3-1: USB disconnect, device number 3 [ 76.653589][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.885601][ T1108] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 76.893613][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 76.896617][ T1108] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 77.014387][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.038942][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.107054][ T1108] cp2112 0003:10C4:EA90.0002: Part Number: 0xE1 Device Version: 0x47 [ 77.213721][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.223219][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.236881][ T4232] usb 4-1: Product: syz [ 77.241069][ T4232] usb 4-1: Manufacturer: syz [ 77.247065][ T4232] usb 4-1: SerialNumber: syz [ 77.283598][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.363747][ T1108] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 77.389195][ T1108] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 77.399068][ T1108] usb 5-1: USB disconnect, device number 3 [ 77.440130][ T4420] fido_id[4420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 77.553661][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 77.584543][ T4232] usb 4-1: 0:2 : does not exist [ 77.634926][ T4232] usb 4-1: USB disconnect, device number 4 [ 77.657707][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.703659][ T13] usb 3-1: config 4 has an invalid interface number: 196 but max is 0 [ 77.712127][ T13] usb 3-1: config 4 has no interface number 0 [ 77.721613][ T13] usb 3-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 77.749482][ T13] usb 3-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.750848][ T4422] loop4: detected capacity change from 0 to 4096 [ 77.759957][ T13] usb 3-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.782694][ T13] usb 3-1: config 4 interface 196 has no altsetting 0 [ 77.783400][ C1] blk_update_request: I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 77.807332][ C0] blk_update_request: I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.818757][ C0] Buffer I/O error on dev loop4, logical block 496, async page read [ 77.993940][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 78.010317][ T13] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 78.027278][ T13] usb 3-1: Product: syz [ 78.034475][ T13] usb 3-1: Manufacturer: syz [ 78.039107][ T13] usb 3-1: SerialNumber: syz [ 78.085110][ T4417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 78.179309][ T4428] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.35'. [ 78.331231][ T4441] device ipip0 entered promiscuous mode [ 78.376692][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.574936][ T13] ipheth 3-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 78.586565][ T13] ipheth: probe of 3-1:4.196 failed with error -22 [ 78.623752][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 78.743664][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.761394][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.772034][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.781342][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.811872][ T23] usb 1-1: config 0 descriptor?? [ 78.864444][ T23] hub 1-1:0.0: USB hub found [ 79.083660][ T23] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 79.103629][ T4204] gspca_sonixj: reg_w1 err -71 [ 79.109234][ T4204] sonixj: probe of 2-1:0.0 failed with error -71 [ 79.139044][ T4204] usb 2-1: USB disconnect, device number 4 [ 79.517660][ T23] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 79.924924][ T13] usb 1-1: USB disconnect, device number 5 [ 79.943684][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.963756][ T2303] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.024552][ T4204] usb 3-1: USB disconnect, device number 4 [ 80.107838][ T4460] device syzkaller0 entered promiscuous mode [ 80.117484][ T4460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 80.183751][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 80.233674][ T2303] usb 2-1: Using ep0 maxpacket: 32 [ 80.305202][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.319197][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.383773][ T2303] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 80.392111][ T2303] usb 2-1: config 4 has no interface number 0 [ 80.398324][ T2303] usb 2-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 80.417361][ T2303] usb 2-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.442893][ T2303] usb 2-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.457992][ T2303] usb 2-1: config 4 interface 196 has no altsetting 0 [ 80.483814][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.493026][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.503712][ T23] usb 4-1: Product: syz [ 80.507924][ T23] usb 4-1: Manufacturer: syz [ 80.513348][ T23] usb 4-1: SerialNumber: syz [ 80.563594][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.653862][ T2303] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 80.665326][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 80.676570][ T2303] usb 2-1: Product: syz [ 80.680893][ T2303] usb 2-1: Manufacturer: syz [ 80.685957][ T2303] usb 2-1: SerialNumber: syz [ 80.723868][ T4455] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 80.815777][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 80.853745][ T23] usb 4-1: 0:2 : does not exist [ 80.858802][ T4236] usb 3-1: too many configurations: 22, using maximum allowed: 8 [ 80.880850][ T23] usb 4-1: USB disconnect, device number 5 [ 80.893686][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.945428][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.959049][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.046073][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.058429][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.124941][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.143851][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.152579][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.154045][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 81.194840][ T2303] ipheth 2-1:4.196: Apple iPhone USB Ethernet device attached [ 81.243826][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.260015][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.323770][ T1108] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 81.344490][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.356744][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.388317][ T4475] capability: warning: `syz.3.52' uses deprecated v2 capabilities in a way that may be insecure [ 81.409802][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.432330][ T23] usb 2-1: USB disconnect, device number 5 [ 81.503926][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.512622][ T23] ipheth 2-1:4.196: Apple iPhone USB Ethernet now disconnected [ 81.526103][ T1108] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 81.538677][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.556438][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.585272][ T1108] usb 5-1: Product: syz [ 81.592675][ T1108] usb 5-1: Manufacturer: syz [ 81.606608][ T1108] usb 5-1: SerialNumber: syz [ 81.626353][ T1108] usb 5-1: config 0 descriptor?? [ 81.635694][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.652650][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.685617][ T1108] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 81.753706][ T4236] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.806324][ T4236] usb 3-1: config 0 has no interface number 0 [ 81.905079][ T1108] gspca_sunplus: reg_r err -32 [ 81.983917][ T4236] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 82.047306][ T4236] usb 3-1: New USB device strings: Mfr=127, Product=6, SerialNumber=36 [ 82.097747][ T4236] usb 3-1: Product: syz [ 82.120523][ T4236] usb 3-1: Manufacturer: syz [ 82.133691][ T4236] usb 3-1: SerialNumber: syz [ 82.152361][ T4236] usb 3-1: config 0 descriptor?? [ 82.205380][ T4236] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 82.323682][ T2303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 82.636830][ T4236] gspca_spca1528: reg_w err -71 [ 82.673676][ T4236] spca1528: probe of 3-1:0.1 failed with error -71 [ 82.693133][ T4236] usb 3-1: USB disconnect, device number 5 [ 82.706880][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.721025][ T2303] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 82.841590][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.852032][ T2303] usb 2-1: config 0 descriptor?? [ 82.950892][ T4522] loop3: detected capacity change from 0 to 256 [ 83.000458][ T4522] exfat: Unknown parameter 'keep_last_dots' [ 83.843514][ T2303] ath6kl: Unsupported hardware version: 0x0 [ 83.874018][ T4511] [U]  [ 83.886023][ T4513] syz.0.57 (4513) used greatest stack depth: 19960 bytes left [ 84.055352][ T4536] device syzkaller0 entered promiscuous mode [ 84.213735][ T1108] sunplus: probe of 5-1:0.0 failed with error -32 [ 84.236369][ T1108] usb 5-1: USB disconnect, device number 4 [ 84.379804][ T4551] ======================================================= [ 84.379804][ T4551] WARNING: The mand mount option has been deprecated and [ 84.379804][ T4551] and is ignored by this kernel. Remove the mand [ 84.379804][ T4551] option from the mount to silence this warning. [ 84.379804][ T4551] ======================================================= [ 84.482745][ T4555] Malformed UNC in devname [ 84.482745][ T4555] [ 84.489796][ T4555] CIFS: VFS: Malformed UNC in devname [ 84.583720][ T4196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.649792][ T4559] overlayfs: overlapping lowerdir path [ 84.841813][ T4569] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 84.853534][ T4196] usb 1-1: Using ep0 maxpacket: 32 [ 84.996027][ T4196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.017146][ T4196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.064096][ T4196] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.093810][ T4196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.134334][ T4196] usb 1-1: config 0 descriptor?? [ 85.176514][ T4196] hub 1-1:0.0: USB hub found [ 85.399352][ T4196] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 85.819108][ T4196] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 86.244134][ T4235] usb 1-1: USB disconnect, device number 6 [ 86.673562][ T4236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.753649][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.913540][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 86.930108][ T4622] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 86.993573][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 87.018464][ T4625] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.723785][ T4236] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 87.731917][ T4236] usb 5-1: config 0 has no interface number 0 [ 87.738734][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.763561][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.775333][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.793598][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.816676][ T4642] device syzkaller0 entered promiscuous mode [ 87.821945][ T23] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 87.843548][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.864025][ T23] usb 4-1: config 0 descriptor?? [ 87.933660][ T4236] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 87.942737][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.968181][ T4236] usb 5-1: Product: syz [ 87.972383][ T4236] usb 5-1: Manufacturer: syz [ 87.999900][ T4236] usb 5-1: SerialNumber: syz [ 88.026401][ T4236] usb 5-1: config 0 descriptor?? [ 88.065023][ T4236] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.304318][ T4236] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.334690][ T4236] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 88.346543][ T23] hid-generic 0003:057E:2019.0005: unknown main item tag 0x0 [ 88.363581][ T23] hid-generic 0003:057E:2019.0005: unknown main item tag 0x0 [ 88.371004][ T23] hid-generic 0003:057E:2019.0005: unknown main item tag 0x0 [ 88.393625][ T23] hid-generic 0003:057E:2019.0005: unknown main item tag 0x0 [ 88.401072][ T23] hid-generic 0003:057E:2019.0005: unknown main item tag 0x0 [ 88.438926][ T23] hid-generic 0003:057E:2019.0005: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 88.549586][ T4236] usb 4-1: USB disconnect, device number 6 [ 88.604131][ T4664] fido_id[4664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 88.627184][ T1323] cfg80211: failed to load regulatory.db [ 88.636655][ T2303] ath6kl: Failed to init ath6kl core: -22 [ 88.682284][ T2303] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 88.702153][ T2303] usb 2-1: USB disconnect, device number 6 [ 88.748272][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.766636][ T1323] usb 5-1: USB disconnect, device number 5 [ 88.773607][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 88.783571][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.808142][ T1323] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 88.840057][ T1323] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 88.861263][ T1323] quatech2 5-1:0.51: device disconnected [ 89.012387][ T4672] Malformed UNC in devname [ 89.012387][ T4672] [ 89.019149][ T4672] CIFS: VFS: Malformed UNC in devname [ 89.063587][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 89.193673][ T2303] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.393782][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 89.412844][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.435878][ T23] usb 1-1: Product: syz [ 89.448465][ T23] usb 1-1: Manufacturer: syz [ 89.454769][ T2303] usb 2-1: Using ep0 maxpacket: 16 [ 89.470197][ T23] usb 1-1: SerialNumber: syz [ 89.583958][ T2303] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 89.593541][ T2303] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 89.617463][ T2303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.632869][ T2303] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 89.642393][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.650651][ T4235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.665191][ T2303] usb 2-1: config 0 descriptor?? [ 89.683917][ T4668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 89.709985][ T2303] pxrc 2-1:0.0: Could not find endpoint [ 89.716258][ T2303] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 89.893564][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 89.894754][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 89.931768][ T4196] usb 2-1: USB disconnect, device number 7 [ 89.994045][ T23] usb 1-1: USB disconnect, device number 7 [ 90.014202][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.058171][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.078366][ T4235] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.105672][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.137901][ T4235] usb 5-1: config 0 descriptor?? [ 90.194745][ T4235] hub 5-1:0.0: USB hub found [ 90.403706][ T4235] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 91.920647][ T4235] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 91.936021][ T4685] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.234066][ T4235] usb 5-1: USB disconnect, device number 6 [ 93.903516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 93.941857][ T4704] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.973956][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.072982][ T4708] fido_id[4708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 94.285941][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 94.297756][ T4717] Malformed UNC in devname [ 94.297756][ T4717] [ 94.304507][ T4717] CIFS: VFS: Malformed UNC in devname [ 94.413876][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.615121][ T4236] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.635857][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.669202][ T4236] usb 2-1: Product: syz [ 94.678053][ T4236] usb 2-1: Manufacturer: syz [ 94.689175][ T4236] usb 2-1: SerialNumber: syz [ 94.707598][ T4236] usb 2-1: config 0 descriptor?? [ 94.760840][ T4236] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.793092][ T4236] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 95.235481][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.408794][ T4236] em28xx 2-1:0.0: unknown em28xx chip ID (148) [ 95.523621][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 95.676437][ T13] usb 4-1: config 4 has an invalid interface number: 196 but max is 0 [ 95.695415][ T13] usb 4-1: config 4 has no interface number 0 [ 95.713188][ T13] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 95.746901][ T13] usb 4-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.757282][ T4236] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.771611][ T4236] em28xx 2-1:0.0: board has no eeprom [ 95.797601][ T13] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 95.815546][ T4747] input: syz1 as /devices/virtual/input/input6 [ 95.826548][ T13] usb 4-1: config 4 interface 196 has no altsetting 0 [ 96.023599][ T4236] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.023686][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 96.058168][ T4236] em28xx 2-1:0.0: dvb set to bulk mode. [ 96.064010][ T13] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 96.072760][ T4233] em28xx 2-1:0.0: Binding DVB extension [ 96.107609][ T4236] usb 2-1: USB disconnect, device number 8 [ 96.122934][ T13] usb 4-1: Product: syz [ 96.126497][ T4236] em28xx 2-1:0.0: Disconnecting em28xx [ 96.165716][ T13] usb 4-1: Manufacturer: syz [ 96.194232][ T13] usb 4-1: SerialNumber: syz [ 96.243869][ T4733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.263043][ T4233] em28xx 2-1:0.0: Registering input extension [ 96.302879][ T4236] em28xx 2-1:0.0: Closing input extension [ 97.533054][ T4236] em28xx 2-1:0.0: Freeing device [ 97.943717][ T13] ipheth 4-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 97.959270][ T13] ipheth: probe of 4-1:4.196 failed with error -22 [ 98.257398][ T4760] loop1: detected capacity change from 0 to 32768 [ 98.341964][ T4760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.106 (4760) [ 98.386282][ T4760] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.395410][ T4760] BTRFS info (device loop1): turning on sync discard [ 98.402264][ T4760] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.411833][ T4760] BTRFS info (device loop1): use zstd compression, level 3 [ 98.419058][ T4760] BTRFS info (device loop1): turning on async discard [ 98.425983][ T4760] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.436792][ T4760] BTRFS info (device loop1): trying to use backup root at mount time [ 98.444944][ T4760] BTRFS info (device loop1): force zlib compression, level 3 [ 98.452357][ T4760] BTRFS info (device loop1): using free space tree [ 98.458892][ T4760] BTRFS info (device loop1): has skinny extents [ 98.634078][ T144] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 98.706675][ T4760] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 98.716381][ T444] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 98.788321][ T4760] BTRFS warning (device loop1): couldn't read tree root [ 98.819685][ T4760] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 98.830335][ T4760] BTRFS warning (device loop1): couldn't read tree root [ 98.853946][ T4760] BTRFS info (device loop1): enabling ssd optimizations [ 98.861638][ T4760] BTRFS info (device loop1): clearing free space tree [ 98.869628][ T4760] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.879587][ T4760] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.911097][ T4760] BTRFS info (device loop1): creating free space tree [ 98.919363][ T4760] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.929078][ T4760] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.482270][ T4235] usb 4-1: USB disconnect, device number 7 [ 99.614199][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.886896][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 99.984479][ T4235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.029156][ T1108] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 100.039977][ T1108] usb 5-1: config 4 has no interface number 0 [ 100.058862][ T4796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 100.086697][ T1108] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 100.110849][ T1108] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.132746][ T1108] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.145549][ T1108] usb 5-1: config 4 interface 196 has no altsetting 0 [ 100.314784][ T1108] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 100.329063][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 100.338471][ T1108] usb 5-1: Product: syz [ 100.343346][ T1108] usb 5-1: Manufacturer: syz [ 100.352311][ T1108] usb 5-1: SerialNumber: syz [ 100.385577][ T4782] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.393988][ T4235] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.407676][ T4235] usb 4-1: config 0 has no interface number 0 [ 100.583718][ T4235] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 100.599996][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.611516][ T4235] usb 4-1: Product: syz [ 100.615876][ T4235] usb 4-1: Manufacturer: syz [ 100.621920][ T4235] usb 4-1: SerialNumber: syz [ 100.636450][ T4235] usb 4-1: config 0 descriptor?? [ 100.843763][ T1108] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 100.890581][ T1108] ipheth: probe of 5-1:4.196 failed with error -22 [ 100.897536][ T4235] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 100.926861][ T4235] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.112283][ T4810] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.832157][ T4235] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 101.873948][ T4235] usb 4-1: media controller created [ 101.944505][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.056789][ T4235] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 102.141246][ T4235] usb 4-1: USB disconnect, device number 8 [ 102.255749][ T4818] Malformed UNC in devname [ 102.255749][ T4818] [ 102.262434][ T4818] CIFS: VFS: Malformed UNC in devname [ 102.283521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 102.293511][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 102.303506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 102.313506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 102.323503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 102.527288][ T4824] loop3: detected capacity change from 0 to 32768 [ 102.548178][ T4822] loop0: detected capacity change from 0 to 8192 [ 102.576813][ T4824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.119 (4824) [ 102.623621][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.638760][ T4824] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 102.647606][ T4822] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 102.647878][ T4822] REISERFS (device loop0): using ordered data mode [ 102.647890][ T4822] reiserfs: using flush barriers [ 102.650396][ T4822] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.657197][ T4824] BTRFS info (device loop3): turning on sync discard [ 102.657242][ T4824] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.657274][ T4824] BTRFS info (device loop3): use zstd compression, level 3 [ 102.657295][ T4824] BTRFS info (device loop3): turning on async discard [ 102.657313][ T4824] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.657328][ T4824] BTRFS info (device loop3): trying to use backup root at mount time [ 102.657345][ T4824] BTRFS info (device loop3): force zlib compression, level 3 [ 102.657364][ T4824] BTRFS info (device loop3): using free space tree [ 102.657376][ T4824] BTRFS info (device loop3): has skinny extents [ 102.784979][ T4822] REISERFS (device loop0): checking transaction log (loop0) [ 102.809088][ T4822] REISERFS (device loop0): Using r5 hash to sort names [ 102.833678][ T4822] REISERFS (device loop0): using 3.5.x disk format [ 102.866309][ T4822] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.939923][ T4232] usb 5-1: USB disconnect, device number 7 [ 103.266524][ T444] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 103.516065][ T1108] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 103.531728][ T4847] x_tables: duplicate underflow at hook 4 [ 103.537596][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.537792][ T4824] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 103.554235][ T4251] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 103.561776][ T1108] usb 3-1: config 0 descriptor?? [ 103.625644][ T1108] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 103.631155][ T4824] BTRFS warning (device loop3): couldn't read tree root [ 103.639268][ T4824] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 103.649166][ T4824] BTRFS warning (device loop3): couldn't read tree root [ 103.699801][ T4824] BTRFS info (device loop3): enabling ssd optimizations [ 103.707463][ T4824] BTRFS info (device loop3): clearing free space tree [ 103.714576][ T4824] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.724295][ T4824] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.743321][ T4824] BTRFS info (device loop3): creating free space tree [ 103.751114][ T4824] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.762055][ T4824] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.884049][ T4235] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.447643][ T2303] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.538049][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 104.669239][ T4235] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.684605][ T4235] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.718925][ T4235] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.738653][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.838991][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.040528][ T2303] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 105.058779][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.069597][ T2303] usb 2-1: Product: syz [ 105.079379][ T2303] usb 2-1: Manufacturer: syz [ 105.084280][ T2303] usb 2-1: SerialNumber: syz [ 105.119396][ T2303] usb 2-1: config 0 descriptor?? [ 105.220856][ T1108] usb 3-1: USB disconnect, device number 6 [ 105.267335][ T4235] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 105.405424][ T2303] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 105.411980][ T2303] dvb_usb_af9035: probe of 2-1:0.0 failed with error -8 [ 105.467105][ T4847] i2c i2c-1: unsupported multi-msg i2c transaction [ 105.484645][ T2303] usb 2-1: USB disconnect, device number 9 [ 105.507222][ T4235] usb 5-1: USB disconnect, device number 8 [ 106.048118][ T4880] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.213573][ T4235] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.933615][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 106.996674][ T4893] Malformed UNC in devname [ 106.996674][ T4893] [ 107.003375][ T4893] CIFS: VFS: Malformed UNC in devname [ 107.054082][ T4235] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.070574][ T4235] usb 3-1: config 0 has no interface number 0 [ 107.243676][ T4235] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 107.289695][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.308585][ T4235] usb 3-1: Product: syz [ 107.314471][ T4235] usb 3-1: Manufacturer: syz [ 107.321443][ T4235] usb 3-1: SerialNumber: syz [ 107.329124][ T4235] usb 3-1: config 0 descriptor?? [ 107.376408][ T4235] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.391438][ T4235] usb 3-1: selecting invalid altsetting 1 [ 107.403673][ T4235] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.429566][ T4235] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.460497][ T4235] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.486504][ T4235] usb 3-1: media controller created [ 107.521553][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.779358][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.787179][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.020642][ T4899] loop4: detected capacity change from 0 to 8192 [ 108.104150][ T4899] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 108.169852][ T4899] REISERFS (device loop4): using ordered data mode [ 108.202106][ T4899] reiserfs: using flush barriers [ 108.230501][ T4899] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.306351][ T4899] REISERFS (device loop4): checking transaction log (loop4) [ 108.339007][ T4899] REISERFS (device loop4): Using r5 hash to sort names [ 108.361332][ T4899] REISERFS (device loop4): using 3.5.x disk format [ 108.386362][ T4899] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 108.557289][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.140188][ T4235] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 109.150495][ T4235] zl10353_read_register: readreg error (reg=127, ret==-110) [ 109.166295][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.203791][ T4875] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 109.232219][ T4235] usb 3-1: USB disconnect, device number 7 [ 109.464315][ T4904] loop2: detected capacity change from 0 to 32768 [ 109.549667][ T4904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.135 (4904) [ 109.633850][ T4908] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.337772][ T4904] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 110.346580][ T4904] BTRFS info (device loop2): turning on sync discard [ 110.353279][ T4904] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.362810][ T4904] BTRFS info (device loop2): use zstd compression, level 3 [ 110.370144][ T4904] BTRFS info (device loop2): turning on async discard [ 110.376995][ T4904] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.388057][ T4904] BTRFS info (device loop2): trying to use backup root at mount time [ 110.396626][ T4904] BTRFS info (device loop2): force zlib compression, level 3 [ 110.404111][ T4904] BTRFS info (device loop2): using free space tree [ 110.410626][ T4904] BTRFS info (device loop2): has skinny extents [ 110.563993][ T144] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 110.587629][ T4904] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 110.596410][ T3072] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 110.608434][ T4904] BTRFS warning (device loop2): couldn't read tree root [ 110.621286][ T4904] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 110.631361][ T4904] BTRFS warning (device loop2): couldn't read tree root [ 110.683770][ T4904] BTRFS info (device loop2): enabling ssd optimizations [ 110.691539][ T4904] BTRFS info (device loop2): clearing free space tree [ 110.698534][ T4904] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.708248][ T4904] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.722261][ T4266] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.731131][ T4904] BTRFS info (device loop2): creating free space tree [ 110.739516][ T4904] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.749171][ T4904] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.998726][ T4266] usb 5-1: Using ep0 maxpacket: 32 [ 111.204293][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.317323][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.327301][ T4266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.327329][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.333009][ T4266] usb 5-1: config 0 descriptor?? [ 111.384818][ T4266] hub 5-1:0.0: USB hub found [ 111.392727][ T4890] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.406972][ T4890] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.416633][ T4890] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.426344][ T4890] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.603877][ T4266] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 111.807300][ T4933] bridge0: port 3(geneve1) entered blocking state [ 111.814108][ T4933] bridge0: port 3(geneve1) entered disabled state [ 111.822424][ T4933] device geneve1 entered promiscuous mode [ 111.828893][ T4933] bridge0: port 3(geneve1) entered blocking state [ 111.835533][ T4933] bridge0: port 3(geneve1) entered forwarding state [ 112.576343][ T4266] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 112.913686][ T4956] Malformed UNC in devname [ 112.913686][ T4956] [ 112.920431][ T4956] CIFS: VFS: Malformed UNC in devname [ 113.064425][ T4957] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.113704][ T4236] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.219355][ T4266] usb 5-1: USB disconnect, device number 9 [ 113.335988][ T4960] fido_id[4960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 113.503939][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 113.576150][ T4266] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.623150][ T4964] loop2: detected capacity change from 0 to 8192 [ 113.663595][ T2303] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.693755][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.716313][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.748562][ T4964] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 113.768621][ T4964] REISERFS (device loop2): using ordered data mode [ 113.778677][ T4964] reiserfs: using flush barriers [ 113.804756][ T4964] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.824504][ T4964] REISERFS (device loop2): checking transaction log (loop2) [ 113.843743][ T4266] usb 5-1: Using ep0 maxpacket: 32 [ 113.853859][ T4964] REISERFS (device loop2): Using r5 hash to sort names [ 113.860732][ T4964] REISERFS (device loop2): using 3.5.x disk format [ 113.872344][ T4964] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 113.903624][ T2303] usb 1-1: Using ep0 maxpacket: 32 [ 113.904087][ T4236] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 113.983835][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.016385][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.025063][ T4236] usb 2-1: Product: syz [ 114.029250][ T4236] usb 2-1: Manufacturer: syz [ 114.033887][ T2303] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 114.033912][ T2303] usb 1-1: config 4 has no interface number 0 [ 114.033945][ T2303] usb 1-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 114.033970][ T2303] usb 1-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.033990][ T2303] usb 1-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.034013][ T2303] usb 1-1: config 4 interface 196 has no altsetting 0 [ 114.093911][ T4236] usb 2-1: SerialNumber: syz [ 114.101281][ T4236] usb 2-1: config 0 descriptor?? [ 114.124285][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.142582][ T4266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.167755][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.194282][ T2303] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 114.206337][ T4266] usb 5-1: config 0 descriptor?? [ 114.212767][ T2303] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 114.221284][ T2303] usb 1-1: Product: syz [ 114.226056][ T4266] usb 5-1: can't set config #0, error -71 [ 114.233447][ T2303] usb 1-1: Manufacturer: syz [ 114.238337][ T2303] usb 1-1: SerialNumber: syz [ 114.248813][ T4266] usb 5-1: USB disconnect, device number 10 [ 114.285019][ T4962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 114.676272][ T4236] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 114.783679][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.916743][ T2303] ipheth 1-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 114.926029][ T2303] ipheth: probe of 1-1:4.196 failed with error -22 [ 115.078553][ T4204] usb 1-1: USB disconnect, device number 8 [ 115.084960][ T4236] rc_core: IR keymap rc-imon-pad not found [ 115.095002][ T4236] Registered IR keymap rc-empty [ 115.123972][ T4236] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 115.153776][ T4236] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.183996][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 115.203726][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 115.225617][ T4236] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.237755][ T4236] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 115.262559][ T4236] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:10> initialized [ 115.423827][ T21] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 115.432929][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.487053][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 115.496228][ T21] usb 4-1: Product: syz [ 115.500415][ T21] usb 4-1: Manufacturer: syz [ 115.513703][ T21] usb 4-1: SerialNumber: syz [ 115.518497][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 115.544379][ T21] usb 4-1: config 0 descriptor?? [ 115.553620][ T4982] netlink: 'syz.4.148': attribute type 18 has an invalid length. [ 115.574000][ T4968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.581057][ T4968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.604401][ T21] usb 4-1: ucan: probing device on interface #0 [ 115.631091][ T21] usb 4-1: ucan: invalid EP count (1) [ 115.644253][ T21] usb 4-1: ucan: probe failed; try to update the device firmware [ 115.743642][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 115.744498][ T2303] usb 2-1: USB disconnect, device number 10 [ 115.955734][ T4989] process 'syz.3.145' launched '/dev/fd/11' with NULL argv: empty string added [ 116.145362][ T4989] udc-core: couldn't find an available UDC or it's busy [ 116.157568][ T4989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.183846][ T4989] udc-core: couldn't find an available UDC or it's busy [ 116.199718][ T4989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.413587][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.623770][ T2303] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 116.824056][ T21] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 116.839729][ T21] usb 5-1: config 253 has no interface number 0 [ 116.857676][ T21] usb 5-1: config 253 interface 130 has no altsetting 0 [ 116.996679][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.020823][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 117.033758][ T21] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 117.046239][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.062504][ T21] usb 5-1: Product: syz [ 117.071063][ T21] usb 5-1: Manufacturer: syz [ 117.078236][ T2303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.091454][ T21] usb 5-1: SerialNumber: syz [ 117.097143][ T2303] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 117.110274][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.263141][ T5003] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.694938][ T2303] usb 2-1: config 0 descriptor?? [ 118.716042][ T4995] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 118.901101][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 118.961972][ T4234] usb 4-1: USB disconnect, device number 9 [ 119.255319][ T2303] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x1 [ 119.268682][ T2303] gt683r_led 0003:1770:FF00.0009: collection stack underflow [ 119.288559][ T2303] gt683r_led 0003:1770:FF00.0009: item 0 0 0 12 parsing failed [ 119.297070][ T2303] gt683r_led 0003:1770:FF00.0009: hid parsing failed [ 119.309400][ T2303] gt683r_led: probe of 0003:1770:FF00.0009 failed with error -22 [ 119.433642][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.466914][ T4196] usb 2-1: USB disconnect, device number 11 [ 119.484591][ T2303] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.583679][ T21] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 119.592673][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.623927][ T21] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 119.631197][ T21] usb 5-1: media controller created [ 119.643172][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.673345][ T21] DVB: Unable to find symbol dib8000_attach() [ 119.679466][ T21] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 119.703645][ T4234] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.713673][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 119.723716][ T2303] usb 4-1: Using ep0 maxpacket: 32 [ 119.733717][ T21] rc_core: IR keymap rc-dib0700-nec not found [ 119.739811][ T21] Registered IR keymap rc-empty [ 119.745281][ T21] dvb-usb: could not initialize remote control. [ 119.751521][ T21] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 119.804064][ T21] dib0700: There's no endpoint for remote controller [ 119.843640][ T2303] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.853624][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.859669][ T2303] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.865844][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.885371][ T4232] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.894451][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.905443][ T4232] usb 1-1: config 0 descriptor?? [ 119.943568][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 119.955511][ T4232] hub 1-1:0.0: USB hub found [ 119.993764][ T2303] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.010311][ T2303] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 120.019517][ T2303] usb 4-1: Product: syz [ 120.033978][ T2303] usb 4-1: Manufacturer: syz [ 120.063963][ T4234] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 120.073032][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.082460][ T2303] hub 4-1:4.0: USB hub found [ 120.088763][ T4234] usb 3-1: config 0 descriptor?? [ 120.135012][ T4234] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 120.163669][ T4232] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 120.303881][ T2303] hub 4-1:4.0: 2 ports detected [ 120.343624][ T4204] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 120.609844][ T4232] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 120.643653][ T4204] usb 2-1: Using ep0 maxpacket: 32 [ 120.793794][ T4204] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 120.801989][ T4204] usb 2-1: config 4 has no interface number 0 [ 120.813374][ T4204] usb 2-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 120.826360][ T4204] usb 2-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.836377][ T4204] usb 2-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.846482][ T4204] usb 2-1: config 4 interface 196 has no altsetting 0 [ 121.037938][ T4204] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 121.051346][ T4204] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 121.059659][ T4204] usb 2-1: Product: syz [ 121.064147][ T4204] usb 2-1: Manufacturer: syz [ 121.068807][ T4204] usb 2-1: SerialNumber: syz [ 121.093920][ T5024] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 121.114045][ T4266] usb 5-1: USB disconnect, device number 11 [ 121.161352][ T4266] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 121.307186][ T5014] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 121.563947][ T4204] ipheth 2-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 121.578316][ T4204] ipheth: probe of 2-1:4.196 failed with error -22 [ 121.755754][ T4204] usb 4-1: USB disconnect, device number 10 [ 121.769167][ T4232] usb 2-1: USB disconnect, device number 12 [ 121.773723][ T4266] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 122.408027][ T5037] loop1: detected capacity change from 0 to 8192 [ 122.460965][ T5037] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 122.470601][ T5037] REISERFS (device loop1): using ordered data mode [ 122.477675][ T5037] reiserfs: using flush barriers [ 122.485252][ T5037] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.503996][ T5037] REISERFS (device loop1): checking transaction log (loop1) [ 122.517050][ T5037] REISERFS (device loop1): Using r5 hash to sort names [ 122.524152][ T5037] REISERFS (device loop1): using 3.5.x disk format [ 122.531094][ T5037] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 122.687203][ T4196] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.353609][ T4234] gspca_sonixj: reg_w err -71 [ 123.358363][ T4234] sonixj: probe of 3-1:0.0 failed with error -71 [ 123.366801][ T4234] usb 3-1: USB disconnect, device number 8 [ 123.458400][ T4196] usb 4-1: Using ep0 maxpacket: 32 [ 123.583958][ T4196] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.597242][ T4196] usb 4-1: config 0 has no interface number 0 [ 123.631585][ T4196] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.633559][ T4204] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 123.657858][ T5047] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.694604][ T4196] usb 4-1: config 0 interface 89 has no altsetting 0 [ 123.914441][ T4196] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.948835][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.050319][ T4196] usb 4-1: Product: syz [ 124.098268][ T4196] usb 4-1: Manufacturer: syz [ 124.151457][ T4196] usb 4-1: SerialNumber: syz [ 124.275076][ T4196] usb 4-1: config 0 descriptor?? [ 124.392859][ T4196] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 124.407764][ T4196] em28xx 4-1:0.89: Video interface 89 found: [ 124.813700][ T4204] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.830417][ T4204] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.854634][ T4204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.878297][ T4204] usb 5-1: config 0 descriptor?? [ 124.915424][ T4204] pwc: Askey VC010 type 2 USB webcam detected. [ 125.023737][ T4196] em28xx 4-1:0.89: unknown em28xx chip ID (64) [ 125.333647][ T4204] pwc: recv_control_msg error -32 req 02 val 2b00 [ 125.373606][ T4204] pwc: recv_control_msg error -32 req 02 val 2700 [ 125.633684][ T4204] pwc: recv_control_msg error -71 req 04 val 1000 [ 125.653626][ T4204] pwc: recv_control_msg error -71 req 04 val 1300 [ 125.683675][ T4204] pwc: recv_control_msg error -71 req 04 val 1400 [ 125.703631][ T4204] pwc: recv_control_msg error -71 req 02 val 2000 [ 125.733658][ T4204] pwc: recv_control_msg error -71 req 02 val 2100 [ 125.733861][ T4196] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.754917][ T4204] pwc: recv_control_msg error -71 req 04 val 1500 [ 125.755805][ T4196] em28xx 4-1:0.89: board has no eeprom [ 125.773656][ T4204] pwc: recv_control_msg error -71 req 02 val 2500 [ 125.793632][ T4234] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 125.803626][ T4204] pwc: recv_control_msg error -71 req 02 val 2400 [ 125.823677][ T4204] pwc: recv_control_msg error -71 req 02 val 2600 [ 125.843614][ T4204] pwc: recv_control_msg error -71 req 02 val 2900 [ 125.863656][ T4204] pwc: recv_control_msg error -71 req 02 val 2800 [ 125.873775][ T4196] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 125.881021][ T4196] em28xx 4-1:0.89: analog set to bulk mode. [ 125.893619][ T4204] pwc: recv_control_msg error -71 req 04 val 1100 [ 125.914905][ T4204] pwc: recv_control_msg error -71 req 04 val 1200 [ 125.919055][ T4196] usb 4-1: USB disconnect, device number 11 [ 125.935389][ T4204] pwc: Registered as video103. [ 125.941367][ T4204] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 125.942141][ T4196] em28xx 4-1:0.89: Disconnecting em28xx [ 125.962894][ T4266] em28xx 4-1:0.89: Registering V4L2 extension [ 125.973799][ T4204] usb 5-1: USB disconnect, device number 12 [ 126.042514][ T4266] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 126.050093][ T4266] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 126.070352][ T4266] em28xx 4-1:0.89: No AC97 audio processor [ 126.102383][ T4266] usb 4-1: Decoder not found [ 126.107785][ T4266] em28xx 4-1:0.89: failed to create media graph [ 126.114355][ T4266] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 126.127411][ T5067] ================================================================== [ 126.135689][ T5067] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 126.142666][ T5067] Read of size 8 at addr ffff88805e668900 by task v4l_id/5067 [ 126.150131][ T5067] [ 126.152478][ T5067] CPU: 0 PID: 5067 Comm: v4l_id Not tainted syzkaller #0 [ 126.159521][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.169585][ T5067] Call Trace: [ 126.172868][ T5067] [ 126.175800][ T5067] dump_stack_lvl+0x188/0x250 [ 126.180489][ T5067] ? show_regs_print_info+0x20/0x20 [ 126.185691][ T5067] ? _printk+0xda/0x130 [ 126.189845][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.194443][ T5067] ? load_image+0x400/0x400 [ 126.198951][ T5067] print_address_description+0x60/0x2d0 [ 126.204503][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.209098][ T5067] kasan_report+0xdf/0x130 [ 126.213523][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.218121][ T5067] v4l2_fh_open+0xc6/0x430 [ 126.222549][ T5067] em28xx_v4l2_open+0x152/0x990 [ 126.227408][ T5067] ? __lock_acquire+0x7d10/0x7d10 [ 126.232454][ T5067] v4l2_open+0x20b/0x360 [ 126.236799][ T5067] chrdev_open+0x5c5/0x6a0 [ 126.241230][ T5067] ? cd_forget+0x160/0x160 [ 126.245662][ T5067] ? fsnotify_perm+0x3a7/0x560 [ 126.250436][ T5067] ? cd_forget+0x160/0x160 [ 126.254858][ T5067] do_dentry_open+0x7ff/0xf80 [ 126.259556][ T5067] path_openat+0x26f5/0x2fa0 [ 126.264169][ T5067] ? verify_lock_unused+0x140/0x140 [ 126.269376][ T5067] ? slab_post_alloc_hook+0x4c/0x380 [ 126.274670][ T5067] ? do_filp_open+0x410/0x410 [ 126.279367][ T5067] do_filp_open+0x1e2/0x410 [ 126.283886][ T5067] ? vfs_tmpfile+0x300/0x300 [ 126.288496][ T5067] ? _raw_spin_unlock+0x24/0x40 [ 126.293352][ T5067] ? alloc_fd+0x598/0x630 [ 126.297695][ T5067] do_sys_openat2+0x150/0x4b0 [ 126.302374][ T5067] ? __lock_acquire+0x7d10/0x7d10 [ 126.307411][ T5067] ? do_sys_open+0xe0/0xe0 [ 126.311830][ T5067] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 126.317817][ T5067] ? lock_chain_count+0x20/0x20 [ 126.322674][ T5067] ? vtime_user_exit+0x2c8/0x3e0 [ 126.327622][ T5067] __x64_sys_openat+0x135/0x160 [ 126.332481][ T5067] do_syscall_64+0x4c/0xa0 [ 126.336900][ T5067] ? clear_bhb_loop+0x30/0x80 [ 126.341583][ T5067] ? clear_bhb_loop+0x30/0x80 [ 126.346261][ T5067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.352169][ T5067] RIP: 0033:0x7f510eedd407 [ 126.356592][ T5067] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 126.376199][ T5067] RSP: 002b:00007ffeab2709f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 126.384638][ T5067] RAX: ffffffffffffffda RBX: 00007f510edef880 RCX: 00007f510eedd407 [ 126.392638][ T5067] RDX: 0000000000000000 RSI: 00007ffeab270f1d RDI: ffffffffffffff9c [ 126.400625][ T5067] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 126.408595][ T5067] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 126.416573][ T5067] R13: 00007ffeab270c40 R14: 00007f510f66b000 R15: 000055d888a9b4d8 [ 126.424567][ T5067] [ 126.427592][ T5067] [ 126.429909][ T5067] The buggy address belongs to the page: [ 126.435546][ T5067] page:ffffea0001799a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e668 [ 126.445707][ T5067] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.452848][ T5067] raw: 00fff00000000000 ffffea0001795708 ffff8880b90409f0 0000000000000000 [ 126.461439][ T5067] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 126.470031][ T5067] page dumped because: kasan: bad access detected [ 126.476453][ T5067] page_owner tracks the page as freed [ 126.481817][ T5067] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4266, ts 125997328973, free_ts 126126231363 [ 126.497545][ T5067] get_page_from_freelist+0x1bbd/0x1ca0 [ 126.503103][ T5067] __alloc_pages+0x1ee/0x480 [ 126.507698][ T5067] kmalloc_order+0x40/0x150 [ 126.512209][ T5067] kmalloc_order_trace+0x14/0xf0 [ 126.517148][ T5067] em28xx_v4l2_init+0xe2/0x2e50 [ 126.522002][ T5067] em28xx_init_extension+0x118/0x1b0 [ 126.527287][ T5067] process_one_work+0x85f/0x1010 [ 126.532229][ T5067] worker_thread+0xdcf/0x1290 [ 126.536909][ T5067] kthread+0x436/0x520 [ 126.540973][ T5067] ret_from_fork+0x1f/0x30 [ 126.545391][ T5067] page last free stack trace: [ 126.550052][ T5067] free_unref_page_prepare+0x637/0x6c0 [ 126.555509][ T5067] free_unref_page+0x8f/0x2a0 [ 126.560183][ T5067] free_nonslab_page+0xe2/0x150 [ 126.565032][ T5067] em28xx_v4l2_init+0x1649/0x2e50 [ 126.570056][ T5067] em28xx_init_extension+0x118/0x1b0 [ 126.575348][ T5067] process_one_work+0x85f/0x1010 [ 126.578649][ T4204] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 126.580301][ T5067] worker_thread+0xdcf/0x1290 [ 126.592512][ T5067] kthread+0x436/0x520 [ 126.596592][ T5067] ret_from_fork+0x1f/0x30 [ 126.601014][ T5067] [ 126.603333][ T5067] Memory state around the buggy address: [ 126.608962][ T5067] ffff88805e668800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.617033][ T5067] ffff88805e668880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.625096][ T5067] >ffff88805e668900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.633153][ T5067] ^ [ 126.637232][ T5067] ffff88805e668980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.645298][ T5067] ffff88805e668a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.653363][ T5067] ================================================================== [ 126.661430][ T5067] Disabling lock debugging due to kernel taint [ 126.674405][ T4266] em28xx 4-1:0.89: Registering snapshot button... [ 126.682487][ T4266] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input12 [ 126.693681][ T5067] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.700900][ T5067] CPU: 0 PID: 5067 Comm: v4l_id Tainted: G B syzkaller #0 [ 126.709318][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.719371][ T5067] Call Trace: [ 126.722635][ T5067] [ 126.725558][ T5067] dump_stack_lvl+0x188/0x250 [ 126.730222][ T5067] ? show_regs_print_info+0x20/0x20 [ 126.735417][ T5067] ? load_image+0x400/0x400 [ 126.739906][ T5067] panic+0x2e5/0x810 [ 126.743787][ T5067] ? bpf_jit_dump+0xd0/0xd0 [ 126.748272][ T5067] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 126.754236][ T5067] ? _raw_spin_unlock+0x40/0x40 [ 126.759081][ T5067] ? print_memory_metadata+0x314/0x400 [ 126.764550][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.769121][ T5067] check_panic_on_warn+0x80/0xa0 [ 126.774041][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.778618][ T5067] end_report+0x6d/0xf0 [ 126.782774][ T5067] kasan_report+0x102/0x130 [ 126.787264][ T5067] ? v4l2_fh_open+0xc6/0x430 [ 126.791838][ T5067] v4l2_fh_open+0xc6/0x430 [ 126.796238][ T5067] em28xx_v4l2_open+0x152/0x990 [ 126.801073][ T5067] ? __lock_acquire+0x7d10/0x7d10 [ 126.806099][ T5067] v4l2_open+0x20b/0x360 [ 126.810326][ T5067] chrdev_open+0x5c5/0x6a0 [ 126.814727][ T5067] ? cd_forget+0x160/0x160 [ 126.819123][ T5067] ? fsnotify_perm+0x3a7/0x560 [ 126.823869][ T5067] ? cd_forget+0x160/0x160 [ 126.828268][ T5067] do_dentry_open+0x7ff/0xf80 [ 126.832931][ T5067] path_openat+0x26f5/0x2fa0 [ 126.837785][ T5067] ? verify_lock_unused+0x140/0x140 [ 126.843004][ T5067] ? slab_post_alloc_hook+0x4c/0x380 [ 126.848276][ T5067] ? do_filp_open+0x410/0x410 [ 126.852938][ T5067] do_filp_open+0x1e2/0x410 [ 126.857432][ T5067] ? vfs_tmpfile+0x300/0x300 [ 126.862027][ T5067] ? _raw_spin_unlock+0x24/0x40 [ 126.866867][ T5067] ? alloc_fd+0x598/0x630 [ 126.871177][ T5067] do_sys_openat2+0x150/0x4b0 [ 126.875864][ T5067] ? __lock_acquire+0x7d10/0x7d10 [ 126.880876][ T5067] ? do_sys_open+0xe0/0xe0 [ 126.885302][ T5067] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 126.891265][ T5067] ? lock_chain_count+0x20/0x20 [ 126.896103][ T5067] ? vtime_user_exit+0x2c8/0x3e0 [ 126.901038][ T5067] __x64_sys_openat+0x135/0x160 [ 126.905880][ T5067] do_syscall_64+0x4c/0xa0 [ 126.910296][ T5067] ? clear_bhb_loop+0x30/0x80 [ 126.914965][ T5067] ? clear_bhb_loop+0x30/0x80 [ 126.919622][ T5067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.925496][ T5067] RIP: 0033:0x7f510eedd407 [ 126.929894][ T5067] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 126.949512][ T5067] RSP: 002b:00007ffeab2709f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 126.957914][ T5067] RAX: ffffffffffffffda RBX: 00007f510edef880 RCX: 00007f510eedd407 [ 126.965878][ T5067] RDX: 0000000000000000 RSI: 00007ffeab270f1d RDI: ffffffffffffff9c [ 126.973855][ T5067] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 126.981809][ T5067] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 126.989771][ T5067] R13: 00007ffeab270c40 R14: 00007f510f66b000 R15: 000055d888a9b4d8 [ 126.997732][ T5067] [ 127.000848][ T5067] Kernel Offset: disabled [ 127.005165][ T5067] Rebooting in 86400 seconds..