last executing test programs: 13.062044899s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000008d777686d9e099d9419f7da334dfff0010000000"], 0x24, 0x0) 8.402208292s ago: executing program 2 (id=52): syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) memfd_create(0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0xfffffffffffffffc}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x4040000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000001880)=[{&(0x7f0000000400)="8b2960", 0x3}, {&(0x7f00000017c0)="e7ce", 0x2}], 0x2) 8.360757763s ago: executing program 3 (id=54): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5, r4}, 0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa00) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000001540)={0x2, [0xcb, 0xecde, 0x1], [{0xffffffff, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xffffff14, 0x1, 0x0, 0x0, 0x1}, {0xa, 0x3af0231d, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x0, 0x1}, {0xfffffff7, 0xe, 0x0, 0x1, 0x1, 0x1}, {0xaa64, 0x100, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7c591eec, 0x80000000, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x8, 0xd, 0x1}, {0xb, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0xa071, 0x0, 0x1, 0x0, 0x1}], 0x4}) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x151) 8.358027253s ago: executing program 1 (id=55): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x25}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="ac", 0x1}], 0x1}, 0x20008884) 8.283841545s ago: executing program 2 (id=56): writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000005c0)="546317a78c13ac7c", 0x8}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.163973158s ago: executing program 0 (id=57): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000c520000000000000008400000008000000200100000000000000000000000000002000"], 0x58, 0x4855}, 0x24000052) recvmmsg$unix(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10140, 0x0) 7.983436822s ago: executing program 1 (id=58): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x1) r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$tun(r0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 7.983251082s ago: executing program 0 (id=59): setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 7.341089736s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.655893111s ago: executing program 2 (id=61): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000500)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) fcntl$setstatus(r1, 0x4, 0x2000) 6.590646663s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r3}) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5.906964218s ago: executing program 3 (id=63): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6e21, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x5}, 0xefe}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffd46, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendto(r1, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.47469984s ago: executing program 1 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000008d777686d9e099d9419f7da334dfff0010000000"], 0x24, 0x0) 3.777686026s ago: executing program 3 (id=70): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x1) r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$tun(r0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.697656937s ago: executing program 0 (id=71): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x200, 0x1}, {0x74, 0x2}, @const={0x8e, {0x0, 0x8834, 0xcf0, 0x8}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 3.206107268s ago: executing program 0 (id=72): writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000005c0)="546317a78c13ac7c", 0x8}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.205545028s ago: executing program 2 (id=73): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5, r4}, 0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$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") r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa00) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000001540)={0x2, [0xcb, 0xecde, 0x1], [{0xffffffff, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xffffff14, 0x1, 0x0, 0x0, 0x1}, {0xa, 0x3af0231d, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x0, 0x1}, {0xfffffff7, 0xe, 0x0, 0x1, 0x1, 0x1}, {0xaa64, 0x100, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7c591eec, 0x80000000, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x8, 0xd, 0x1}, {0xb, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0xa071, 0x0, 0x1, 0x0, 0x1}], 0x4}) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x151) 3.205259768s ago: executing program 3 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.205137908s ago: executing program 4 (id=75): syz_open_dev$usbfs(0x0, 0x76, 0x101b01) mknod(0x0, 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000001340)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002740)=ANY=[], 0x59) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.121345221s ago: executing program 4 (id=76): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r0, r1, 0x0) 2.837096257s ago: executing program 4 (id=77): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r4}) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.910962568s ago: executing program 2 (id=78): syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) memfd_create(0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0xfffffffffffffffc}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x4040000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000001880)=[{&(0x7f0000000400)="8b2960", 0x3}, {&(0x7f00000017c0)="e7ce", 0x2}], 0x2) 1.573178065s ago: executing program 4 (id=79): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x25}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="ac", 0x1}], 0x1}, 0x20008884) 1.537446485s ago: executing program 2 (id=80): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x20) 1.421123348s ago: executing program 0 (id=81): setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 1.145857564s ago: executing program 3 (id=82): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x1) r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$tun(r0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 779.056773ms ago: executing program 4 (id=83): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6e21, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x5}, 0xefe}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffd46, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendto(r1, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 136.560427ms ago: executing program 4 (id=84): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000500)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) fcntl$setstatus(r1, 0x4, 0x2000) 74.292948ms ago: executing program 3 (id=85): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x0, 0x2a}, 0x28) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/150) 0s ago: executing program 1 (id=86): syz_open_dev$usbfs(0x0, 0x76, 0x101b01) mknod(0x0, 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000001340)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002740)=ANY=[], 0x59) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 61.361058][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.406259][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. syzkaller login: [ 85.010586][ T4177] cgroup: Unknown subsys name 'net' [ 85.155865][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.972893][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 88.889099][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 88.922189][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 88.968050][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 89.059255][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 89.116761][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 89.200589][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.216068][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233407][ T4200] device bridge_slave_0 entered promiscuous mode [ 89.284689][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.298950][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.313177][ T4200] device bridge_slave_1 entered promiscuous mode [ 89.347356][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.363610][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.377414][ T4193] device bridge_slave_0 entered promiscuous mode [ 89.421342][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.444646][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.458124][ T4193] device bridge_slave_1 entered promiscuous mode [ 89.481458][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.491180][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.507197][ T4195] device bridge_slave_0 entered promiscuous mode [ 89.561718][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.583174][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.600804][ T4195] device bridge_slave_1 entered promiscuous mode [ 89.619207][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.646067][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.660990][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.680583][ T4189] device bridge_slave_0 entered promiscuous mode [ 89.713108][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.747991][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.770219][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.784199][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.804331][ T4189] device bridge_slave_1 entered promiscuous mode [ 89.825714][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.894196][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.914707][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.928238][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.939718][ T4194] device bridge_slave_0 entered promiscuous mode [ 89.971418][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.997725][ T4200] team0: Port device team_slave_0 added [ 90.006602][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.016759][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.034749][ T4194] device bridge_slave_1 entered promiscuous mode [ 90.054008][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.069404][ T4193] team0: Port device team_slave_0 added [ 90.088450][ T4200] team0: Port device team_slave_1 added [ 90.116708][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.136749][ T4193] team0: Port device team_slave_1 added [ 90.156877][ T4195] team0: Port device team_slave_0 added [ 90.212203][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.224995][ T4195] team0: Port device team_slave_1 added [ 90.234251][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.247596][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.298932][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.341191][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.357777][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 90.371398][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.383847][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.426716][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.435933][ T2256] Bluetooth: hci1: command 0x0409 tx timeout [ 90.449048][ T4189] team0: Port device team_slave_0 added [ 90.479371][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.494031][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.543628][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 90.543895][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.555304][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 90.579083][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.590665][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.604605][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 90.629314][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.686685][ T4189] team0: Port device team_slave_1 added [ 90.697089][ T4194] team0: Port device team_slave_0 added [ 90.712046][ T4194] team0: Port device team_slave_1 added [ 90.727210][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.742481][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.782229][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.811536][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.823557][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.861265][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.893245][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.903311][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.943648][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.999921][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.011343][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.051814][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.072093][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.085153][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.124462][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.156371][ T4200] device hsr_slave_0 entered promiscuous mode [ 91.169009][ T4200] device hsr_slave_1 entered promiscuous mode [ 91.192974][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.212661][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.254010][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.296761][ T4194] device hsr_slave_0 entered promiscuous mode [ 91.309177][ T4194] device hsr_slave_1 entered promiscuous mode [ 91.321919][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.331843][ T4194] Cannot create hsr debugfs directory [ 91.364635][ T4193] device hsr_slave_0 entered promiscuous mode [ 91.376961][ T4193] device hsr_slave_1 entered promiscuous mode [ 91.385858][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.398238][ T4193] Cannot create hsr debugfs directory [ 91.434263][ T4195] device hsr_slave_0 entered promiscuous mode [ 91.447057][ T4195] device hsr_slave_1 entered promiscuous mode [ 91.458912][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.474357][ T4195] Cannot create hsr debugfs directory [ 91.508574][ T4189] device hsr_slave_0 entered promiscuous mode [ 91.519387][ T4189] device hsr_slave_1 entered promiscuous mode [ 91.535871][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.548435][ T4189] Cannot create hsr debugfs directory [ 91.950106][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.967540][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.981770][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.998858][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.039350][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.055039][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.074755][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.091273][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.142823][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.184830][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.215466][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.238847][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.369134][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.385129][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.423943][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.432629][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.447355][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 92.461971][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.507501][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.515915][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 92.540281][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.558488][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.585281][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.595863][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 92.646700][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.663370][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.680704][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 92.685144][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.698563][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 92.705596][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.740082][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.754063][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.776642][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.790504][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.812407][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.830218][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.856442][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.879243][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.894168][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.914406][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.934141][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.952860][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.970556][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.984657][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.996924][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.008012][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.020915][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.042051][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.057507][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.081367][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.094337][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.152412][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.166952][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.184662][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.198426][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.214843][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.227334][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.239779][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.250750][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.269459][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.294661][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.308918][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.348663][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.366627][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.384307][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.450263][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.482672][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.517076][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.544047][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.557044][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.573628][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.595876][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.611860][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.626439][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.650913][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.676170][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.715028][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.740902][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.754207][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.779332][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.794733][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.828458][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.865601][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.883233][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.898143][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.915367][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.930828][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.952415][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.967377][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.981894][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.001286][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.056515][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.070666][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.095630][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.114152][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.126250][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.141257][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.155217][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.173385][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.186134][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.195292][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.208362][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.224133][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.234788][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.247717][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.268698][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.292519][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.330353][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.362131][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.417654][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.430625][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.452635][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.477715][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.504522][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.526803][ T2256] Bluetooth: hci0: command 0x040f tx timeout [ 94.539716][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.559172][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.576941][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.588851][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.601199][ T2256] Bluetooth: hci1: command 0x040f tx timeout [ 94.627826][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.648545][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.675811][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 94.719787][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.743964][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.759027][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 94.759688][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 94.771207][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.796878][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.819269][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.835864][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.861489][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.877680][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.896826][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.933561][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.943574][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.958469][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.972831][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.994708][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.028244][ T4194] device veth0_vlan entered promiscuous mode [ 95.057445][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.090938][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.152306][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.186165][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.217962][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.233436][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.259261][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.272432][ T4194] device veth1_vlan entered promiscuous mode [ 95.306741][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.341144][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.371160][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.394964][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.416761][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.441536][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.455641][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.503830][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.530243][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.549843][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.576244][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.587349][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.599500][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.612097][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.679042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.704877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.722092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.734744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.769453][ T4200] device veth0_vlan entered promiscuous mode [ 95.797723][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.818486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.827654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.842215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.852198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.879022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.892103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.913768][ T4200] device veth1_vlan entered promiscuous mode [ 95.936543][ T4194] device veth0_macvtap entered promiscuous mode [ 95.950690][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.969207][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.980196][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.001245][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.027952][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.047095][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.092346][ T4194] device veth1_macvtap entered promiscuous mode [ 96.117102][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.135857][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.158514][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.170062][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.188034][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.206494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.224082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.243090][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.279437][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.311658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.327508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.370274][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.417251][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.433148][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.463283][ T4200] device veth0_macvtap entered promiscuous mode [ 96.485830][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.506558][ T4195] device veth0_vlan entered promiscuous mode [ 96.519066][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.531640][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.546104][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.570585][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.584679][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.595963][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 96.602213][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.632478][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.655235][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.675773][ T2256] Bluetooth: hci1: command 0x0419 tx timeout [ 96.697402][ T4200] device veth1_macvtap entered promiscuous mode [ 96.735644][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.758526][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 96.760709][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.796374][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.821266][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.837250][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 96.837296][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 96.871211][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.896249][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.908540][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.925774][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.952345][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.973454][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.988940][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.010760][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.030251][ T4193] device veth0_vlan entered promiscuous mode [ 97.074249][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.091726][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.128436][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.141377][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.171512][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.202597][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.217602][ T4193] device veth1_vlan entered promiscuous mode [ 97.238553][ T4195] device veth1_vlan entered promiscuous mode [ 97.259360][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.270689][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.290493][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.309685][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.327147][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.352517][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.369534][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.399208][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.420631][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.436377][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448130][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.471921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.504695][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.646974][ T4193] device veth0_macvtap entered promiscuous mode [ 97.661900][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.673338][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.692526][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.708180][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.724409][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.758647][ T4195] device veth0_macvtap entered promiscuous mode [ 97.811220][ T4193] device veth1_macvtap entered promiscuous mode [ 97.854790][ T4195] device veth1_macvtap entered promiscuous mode [ 97.878216][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.890707][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.902800][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.917740][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.928779][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.953896][ T4189] device veth0_vlan entered promiscuous mode [ 97.990928][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.997676][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.017576][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.025085][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.055078][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.078073][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.107549][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.132718][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.157750][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.183597][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.210603][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.241374][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.263824][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.298537][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.323394][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.352013][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.374658][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.399745][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.439506][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.468591][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.487951][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.507455][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.533975][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.555233][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.589401][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.604586][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.619288][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.645296][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.668027][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.694342][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.699535][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.715715][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.717880][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.740966][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.758150][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.778675][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.797748][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.814211][ T4189] device veth1_vlan entered promiscuous mode [ 98.842127][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.857386][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.874865][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.887576][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.904058][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.923449][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.936247][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.949974][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.967007][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.008313][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.021352][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.040138][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.056692][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.084754][ T576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.095774][ T576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.114485][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.177085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.207808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.225186][ T576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.262870][ T4189] device veth0_macvtap entered promiscuous mode [ 99.289539][ T576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.347398][ T4189] device veth1_macvtap entered promiscuous mode [ 99.380458][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.390960][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.406366][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.564458][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.631063][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.675433][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.722672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.737167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.758184][ T4282] 9pnet_virtio: no channels available for device syz [ 99.770144][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.807046][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.821539][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.859490][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.885003][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.896464][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.927208][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.950533][ T576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.955268][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.998948][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.999971][ T576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.015546][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.049235][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.055328][ T4286] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.068657][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.127840][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.145555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 100.148744][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.187768][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.204695][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.230722][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.265967][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.331714][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.379542][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.392398][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.410840][ T4286] netlink: 'syz.0.7': attribute type 16 has an invalid length. [ 100.436330][ T4286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 100.467633][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.502787][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.529352][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.544876][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.607579][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.623419][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.717747][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.876697][ T576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.907450][ T576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.994629][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.135708][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.199163][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.316566][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.353127][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.434364][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.511649][ T4303] loop3: detected capacity change from 0 to 128 [ 101.535166][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.718296][ T4303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.783852][ T4309] ======================================================= [ 101.783852][ T4309] WARNING: The mand mount option has been deprecated and [ 101.783852][ T4309] and is ignored by this kernel. Remove the mand [ 101.783852][ T4309] option from the mount to silence this warning. [ 101.783852][ T4309] ======================================================= [ 101.827055][ T4303] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.310046][ T7] cfg80211: failed to load regulatory.db [ 103.514680][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.540195][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.543245][ T4329] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.934610][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.960488][ T4340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.059123][ T4341] netlink: 'syz.2.16': attribute type 16 has an invalid length. [ 104.075531][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 104.438092][ T4352] netlink: 'syz.2.28': attribute type 16 has an invalid length. [ 104.448898][ T4352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 105.290272][ T4366] loop2: detected capacity change from 0 to 128 [ 105.412731][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.445734][ T4366] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.605646][ T4262] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.674240][ T4367] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 105.749579][ T4367] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.948078][ T4262] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 106.245655][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.305645][ T4262] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.403302][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.427265][ T4383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.496409][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.517540][ T4385] debugfs: File 'dropped' in directory 'loop4' already present! [ 106.553873][ T4262] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.570407][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.572938][ T4385] debugfs: File 'msg' in directory 'loop4' already present! [ 106.730052][ T4385] debugfs: File 'trace0' in directory 'loop4' already present! [ 106.745283][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.766904][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.777528][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 106.885131][ T4262] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.103565][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.306133][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.510611][ T4386] netlink: 'syz.1.32': attribute type 16 has an invalid length. [ 107.528981][ T4386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 107.557639][ T4262] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.582802][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.685812][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.733690][ T4262] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.756529][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.869098][ T4262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.245574][ T4262] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 108.267794][ T4262] usb 5-1: can't read configurations, error -71 [ 108.777254][ T4246] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.071626][ T4426] loop2: detected capacity change from 0 to 128 [ 109.104699][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.123956][ T4426] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.407838][ T4246] usb 2-1: Using ep0 maxpacket: 8 [ 110.255574][ T4246] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 110.277821][ T4246] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.318552][ T4246] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.415490][ T4246] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.473078][ T4246] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.525552][ T4246] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.555463][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.724294][ T4440] netlink: 'syz.4.45': attribute type 16 has an invalid length. [ 110.732511][ T4440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 110.845818][ T4246] usb 2-1: GET_CAPABILITIES returned 0 [ 110.853737][ T4246] usbtmc 2-1:16.0: can't read capabilities [ 111.053545][ T4246] usb 2-1: USB disconnect, device number 2 [ 111.160895][ T4443] debugfs: File 'trace0' in directory 'loop4' already present! [ 111.390523][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.330906][ T4449] block nbd4: shutting down sockets [ 112.574814][ T4463] loop3: detected capacity change from 0 to 128 [ 112.782247][ T4463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.812367][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.825720][ T4463] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.161248][ T4481] netlink: 'syz.1.58': attribute type 16 has an invalid length. [ 113.175231][ T4481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 113.546836][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.621404][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.705496][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.825484][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.885787][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.944142][ T4232] usb 5-1: config 0 descriptor?? [ 114.524337][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.588526][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.657246][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.904439][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.917268][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.931075][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.946247][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.958194][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x2 [ 114.997195][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.163878][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.246430][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.343913][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.626628][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.842148][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.925823][ T4232] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 115.935514][ T4273] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.950849][ T4232] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 116.031455][ T4232] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 116.084461][ T4232] usb 5-1: USB disconnect, device number 4 [ 116.318622][ T4273] usb 3-1: Using ep0 maxpacket: 8 [ 116.445743][ T4273] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.524347][ T4273] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.567594][ T4508] debugfs: File 'trace0' in directory 'loop4' already present! [ 116.594512][ T4501] fido_id[4501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.719663][ T4273] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.757471][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.824281][ T4273] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.919417][ T4273] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.997029][ T4273] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.035473][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.258346][ T4521] netlink: 'syz.3.70': attribute type 16 has an invalid length. [ 117.270930][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 117.330791][ T4273] usb 3-1: usb_control_msg returned -71 [ 117.382494][ T4273] usbtmc 3-1:16.0: can't read capabilities [ 117.452307][ T4273] usb 3-1: USB disconnect, device number 2 [ 117.652538][ T4528] loop2: detected capacity change from 0 to 128 [ 117.774129][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.838858][ T4528] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.965764][ T4246] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.423066][ T4568] debugfs: File 'trace0' in directory 'loop4' already present! [ 120.485130][ T4563] netlink: 'syz.3.82': attribute type 16 has an invalid length. [ 120.495502][ T4246] usb 3-1: Using ep0 maxpacket: 32 [ 120.537905][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 120.566303][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.628105][ T4246] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 120.736806][ T4246] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 120.785732][ T4246] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 120.909026][ T4573] [ 120.913435][ T4573] ====================================================== [ 120.927573][ T4573] WARNING: possible circular locking dependency detected [ 120.939814][ T4573] syzkaller #0 Not tainted [ 120.953032][ T4573] ------------------------------------------------------ [ 120.965299][ T4573] syz.1.86/4573 is trying to acquire lock: [ 120.976988][ T4573] ffff88807de29458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 120.995505][ T4573] [ 120.995505][ T4573] but task is already holding lock: [ 121.009460][ T4573] ffff88807de28120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 121.034138][ T4573] [ 121.034138][ T4573] which lock already depends on the new lock. [ 121.034138][ T4573] [ 121.052513][ T4573] [ 121.052513][ T4573] the existing dependency chain (in reverse order) is: [ 121.070200][ T4573] [ 121.070200][ T4573] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 121.080714][ T4573] lock_sock_nested+0x44/0x100 [ 121.087587][ T4573] smc_listen_out+0x105/0x3b0 [ 121.098269][ T4573] smc_listen_work+0x52a/0xd10 [ 121.108598][ T4573] process_one_work+0x867/0xff0 [ 121.117917][ T4573] worker_thread+0xad7/0x12a0 [ 121.132840][ T4573] kthread+0x42e/0x520 [ 121.144555][ T4573] ret_from_fork+0x1f/0x30 [ 121.156819][ T4573] [ 121.156819][ T4573] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 121.165952][ T4246] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 121.180448][ T4573] __lock_acquire+0x2c66/0x7b50 [ 121.203666][ T4573] lock_acquire+0x19e/0x400 [ 121.211815][ T4573] __flush_work+0x116/0x210 [ 121.222735][ T4573] __cancel_work_timer+0x3f4/0x560 [ 121.231185][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.240908][ T4573] smc_clcsock_release+0x5c/0xe0 [ 121.240935][ T4573] __smc_release+0x644/0x7b0 [ 121.240947][ T4573] smc_close_non_accepted+0xd1/0x1f0 [ 121.240959][ T4573] smc_close_active+0xae2/0xea0 [ 121.240971][ T4573] __smc_release+0x9c/0x7b0 [ 121.240981][ T4573] smc_release+0x2c1/0x520 [ 121.240992][ T4573] sock_close+0xbf/0x210 [ 121.267758][ T26] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.270163][ T4573] __fput+0x212/0x8c0 [ 121.291865][ T4246] usb 3-1: Product: syz [ 121.300027][ T4573] task_work_run+0x125/0x1a0 [ 121.300055][ T4573] exit_to_user_mode_loop+0x10f/0x130 [ 121.300068][ T4573] exit_to_user_mode_prepare+0xee/0x180 [ 121.300079][ T4573] syscall_exit_to_user_mode+0x16/0x40 [ 121.300093][ T4573] do_syscall_64+0x58/0xa0 [ 121.300103][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.300117][ T4573] [ 121.300117][ T4573] other info that might help us debug this: [ 121.300117][ T4573] [ 121.300122][ T4573] Possible unsafe locking scenario: [ 121.300122][ T4573] [ 121.330344][ T4246] usb 3-1: Manufacturer: syz [ 121.331357][ T4573] CPU0 CPU1 [ 121.331365][ T4573] ---- ---- [ 121.331369][ T4573] lock(sk_lock-AF_SMC/1); [ 121.331385][ T4573] lock((work_completion)(&new_smc->smc_listen_work)); [ 121.331398][ T4573] lock( [ 121.346811][ T4246] usb 3-1: SerialNumber: syz [ 121.347310][ T4573] sk_lock-AF_SMC/1 [ 121.468480][ T4246] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 121.469393][ T4573] ); [ 121.469399][ T4573] lock((work_completion)(&new_smc->smc_listen_work) [ 121.483159][ T4246] imon 3-1:155.0: unable to initialize intf0, err -19 [ 121.498575][ T4573] ); [ 121.498585][ T4573] [ 121.498585][ T4573] *** DEADLOCK *** [ 121.498585][ T4573] [ 121.498589][ T4573] 2 locks held by syz.1.86/4573: [ 121.498600][ T4573] #0: ffff88802554b810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 121.498649][ T4573] #1: ffff88807de28120 (sk_lock-AF_SMC/1){+.+.}-{0:0} [ 121.553347][ T4246] imon:imon_probe: failed to initialize context! [ 121.557570][ T4573] , at: smc_release+0x249/0x520 [ 121.557598][ T4573] [ 121.557598][ T4573] stack backtrace: [ 121.557621][ T4573] CPU: 0 PID: 4573 Comm: syz.1.86 Not tainted syzkaller #0 [ 121.557650][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.563709][ T4246] imon 3-1:155.0: unable to register, err -19 [ 121.572787][ T4573] Call Trace: [ 121.572803][ T4573] [ 121.572810][ T4573] dump_stack_lvl+0x188/0x250 [ 121.572841][ T4573] ? load_image+0x410/0x410 [ 121.572857][ T4573] ? show_regs_print_info+0x20/0x20 [ 121.794254][ T4573] ? print_circular_bug+0x12b/0x1a0 [ 121.805887][ T4573] check_noncircular+0x296/0x330 [ 121.812832][ T4573] ? look_up_lock_class+0x71/0x110 [ 121.830727][ T4573] ? add_chain_block+0x9b0/0x9b0 [ 121.845626][ T4573] ? lockdep_lock+0xf1/0x1f0 [ 121.853171][ T4573] ? lock_release+0xb5/0x8a0 [ 121.860649][ T4573] ? mark_lock+0x94/0x320 [ 121.869148][ T4573] ? _find_first_zero_bit+0xd1/0xf0 [ 121.883346][ T4573] __lock_acquire+0x2c66/0x7b50 [ 121.899480][ T4573] ? hlock_conflict+0x59/0x1f0 [ 121.905928][ T4573] ? __bfs+0x27a/0x560 [ 121.912303][ T4573] ? verify_lock_unused+0x140/0x140 [ 121.923870][ T4573] ? mark_lock+0x94/0x320 [ 121.928309][ T4573] ? __lock_acquire+0x13dc/0x7b50 [ 121.937884][ T4573] ? lockdep_unlock+0x143/0x2e0 [ 121.946717][ T26] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 121.947000][ T4573] lock_acquire+0x19e/0x400 [ 121.983382][ T4573] ? __flush_work+0xfa/0x210 [ 121.990795][ T4573] ? read_lock_is_recursive+0x10/0x10 [ 121.999872][ T4573] __flush_work+0x116/0x210 [ 122.006571][ T4573] ? __flush_work+0xfa/0x210 [ 122.018050][ T4573] ? flush_work+0x20/0x20 [ 122.025405][ T4573] ? try_to_grab_pending+0xfb/0x820 [ 122.035006][ T4573] ? mark_lock+0x94/0x320 [ 122.051406][ T4573] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.060986][ T4573] ? lock_chain_count+0x20/0x20 [ 122.075485][ T4573] ? mark_lock+0x94/0x320 [ 122.083443][ T4573] ? __cancel_work_timer+0x36a/0x560 [ 122.096441][ T4573] __cancel_work_timer+0x3f4/0x560 [ 122.107131][ T4573] ? cancel_work_sync+0x20/0x20 [ 122.116601][ T4573] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.125483][ T4573] ? lockdep_hardirqs_on+0x94/0x140 [ 122.132287][ T4573] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.144346][ T4573] ? _local_bh_enable+0xa0/0xa0 [ 122.151271][ T4573] smc_clcsock_release+0x5c/0xe0 [ 122.159310][ T4573] __smc_release+0x644/0x7b0 [ 122.169986][ T4573] smc_close_non_accepted+0xd1/0x1f0 [ 122.180735][ T4573] smc_close_active+0xae2/0xea0 [ 122.191119][ T4573] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 122.202425][ T4573] __smc_release+0x9c/0x7b0 [ 122.215196][ T4573] smc_release+0x2c1/0x520 [ 122.222490][ T4573] sock_close+0xbf/0x210 [ 122.229020][ T4573] ? sock_mmap+0x90/0x90 [ 122.235142][ T4573] __fput+0x212/0x8c0 [ 122.243365][ T4573] task_work_run+0x125/0x1a0 [ 122.249317][ T4573] exit_to_user_mode_loop+0x10f/0x130 [ 122.258342][ T4573] exit_to_user_mode_prepare+0xee/0x180 [ 122.269495][ T4573] syscall_exit_to_user_mode+0x16/0x40 [ 122.280573][ T4573] do_syscall_64+0x58/0xa0 [ 122.291451][ T4573] ? clear_bhb_loop+0x30/0x80 [ 122.303481][ T4573] ? clear_bhb_loop+0x30/0x80 [ 122.309492][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.321934][ T4573] RIP: 0033:0x7f50096e8e99 [ 122.335869][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.356478][ T26] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 122.381271][ T4573] RSP: 002b:00007ffc3af9fc58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.381298][ T4573] RAX: 0000000000000000 RBX: 00007ffc3af9fd40 RCX: 00007f50096e8e99 [ 122.381307][ T4573] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 122.381316][ T4573] RBP: 000000000001d754 R08: 0000000000000001 R09: 0000000000000000 [ 122.381324][ T4573] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007ffc3af9fd80 [ 122.381334][ T4573] R13: 00007f5009970fac R14: 000000000001d790 R15: 00007f5009970fa0 [ 122.381352][ T4573] [ 122.408468][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.495496][ T2256] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.497988][ T26] usb 4-1: Product: syz [ 122.523182][ T26] usb 4-1: Manufacturer: syz [ 122.531249][ T26] usb 4-1: SerialNumber: syz [ 122.545590][ T26] usb 4-1: config 0 descriptor?? [ 122.566125][ T4572] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 122.596807][ T26] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 122.745542][ T2256] usb 5-1: Using ep0 maxpacket: 8 [ 122.822321][ T4273] usb 4-1: USB disconnect, device number 2 [ 122.865678][ T2256] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 122.880107][ T2256] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.907836][ T2256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.926109][ T2256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.942474][ T2256] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.975996][ T2256] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.990389][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.265572][ T2256] usb 5-1: GET_CAPABILITIES returned 0 [ 123.273847][ T2256] usbtmc 5-1:16.0: can't read capabilities [ 123.484893][ T26] usb 3-1: USB disconnect, device number 3 [ 123.513067][ T4250] usb 5-1: USB disconnect, device number 5