last executing test programs: 1m5.436744395s ago: executing program 4 (id=194): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m5.257831082s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x101, 0xffffffffffffffff, 0x0, 0x100000008, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x24004045, &(0x7f0000000200)={0x11, 0xf6, r6, 0x1, 0xff}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 1m3.908736571s ago: executing program 4 (id=205): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, 0xffffffffffffffff, 0xdd0bb000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000480)={0x2, {0x3ff, 0xd352, 0x5, 0xd143}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x4a, "4b721b782a17a7b6a00d96363f7fdafd95073830fb8cfb34eb7cbd173ef6f0710ef2264f4cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f305010caca7450a7e310aee20c7960c"}}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000000080), 0x0, 0x4000840) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x8) 1m2.792332478s ago: executing program 4 (id=216): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000200)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f000007c000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0xec776000) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_open_dev$I2C(0x0, 0x1, 0x402) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0x5, 0x9) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x2, 0x0}) 1m0.925233186s ago: executing program 4 (id=229): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x8000}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe4) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3403f82981ac", @ANYRES16=r6, @ANYBLOB="010000000000000000020700000014000800000000000000000000000000000000000c0016000500000000000000"], 0x34}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0xa8952994e6c0b2f2, 0x0, 0x0) 59.588158275s ago: executing program 4 (id=234): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x3, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/287, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @remote}, "ffff07718e9bf703"}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) fremovexattr(r8, &(0x7f0000000540)=@known='system.posix_acl_access\x00') sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 44.563141843s ago: executing program 32 (id=234): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x3, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00002cda7cf79d11d3d800000000e764010101000000000000000000000000000107144e2300ce39c7baad5c82dc8c5b756091b74db471ce83b1e4d1a6cd9da78cc7418c1cc51e11e234dd44aae3dc359ddec285fe90946a2914a9a488998cf0ae587dfd66156f3d4ff2c43a50e2469f5112f3d53a7ae21d49667f8d39442e0f923dfa4bc542a8d804dd84e08d4f35d1830c34473a022bbb5df8ae805ced8e3fbda65e1e32bbc51f313c011120634ee77194df6e9a928b51c4947393c720087c7e17b7629d6c6236cb89ef4b6d24a829136b122334c929ea39cf9ba14ac975c6984e0a9b7ba828224ec7976ed3493a9d2603d73e945d6020cf5e026046c438cc9abe2a00"/287, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @remote}, "ffff07718e9bf703"}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) fremovexattr(r8, &(0x7f0000000540)=@known='system.posix_acl_access\x00') sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 5.833316181s ago: executing program 0 (id=557): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 5.713538203s ago: executing program 0 (id=558): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0xc, @local, 0x4e21, 0x0, 'lblc\x00', 0x10, 0x7, 0x40}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000c00)=""/78, 0x4e}], 0x1, 0x611, 0x1) 5.239430548s ago: executing program 5 (id=565): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x3, 0xfffffffc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2040010}, 0x4) 5.025186518s ago: executing program 5 (id=567): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) 4.778847442s ago: executing program 2 (id=570): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x40}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 4.710832719s ago: executing program 0 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/181, 0xb5}, 0x8001}], 0x4000000000001c7, 0x10140, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 4.601231429s ago: executing program 2 (id=573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_open_dev$ptys(0xc, 0x3, 0x0) 4.599013249s ago: executing program 0 (id=574): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x3}) setpriority(0x4, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x3, &(0x7f0000000080)={0x2b, "c6c1f7b51030c4a4c54bf28fac0200000000000000bc117b5452b3b94bce47509d"}}) 3.641803911s ago: executing program 2 (id=582): mq_open(0x0, 0xa8952994e6c0b2f2, 0x0, 0x0) unlink(0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.316780422s ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="000030e6d640000024001280110001006272696467655f736c617665000000000c000580080003"], 0x44}}, 0x0) 3.220760761s ago: executing program 5 (id=586): openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix={0x1c, 0x28, 0x32314752, 0x50424752, 0x0, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "53ba09"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 3.195481744s ago: executing program 3 (id=587): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) 3.02209353s ago: executing program 3 (id=590): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r3 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000c80)={0x0, 0x11, 0x0, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) pipe2$9p(&(0x7f00000027c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 3.007702882s ago: executing program 5 (id=591): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x10, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.696844051s ago: executing program 0 (id=593): openat$sysfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000840e0ffff0fcea07d43bd0b43990cca90402e9842aa04ab3bb2fae79734e01b2ae65bb1e6f61ed2"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000030000000000000000aa1800148014000240fc000300000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.276755412s ago: executing program 5 (id=596): connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1e2002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_setup(0xffff, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 2.276430802s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 1.596174087s ago: executing program 3 (id=598): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x20, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x40000) 1.35065239s ago: executing program 2 (id=599): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000007060500000000000000000005000005050001000700000008000640000000050900020073797a31"], 0x30}, 0x1, 0x0, 0x0, 0x44011}, 0x10) 1.280841547s ago: executing program 3 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc60007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 1.25204874s ago: executing program 3 (id=601): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001380)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 910.545073ms ago: executing program 1 (id=602): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) 809.061782ms ago: executing program 1 (id=603): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) readv(r2, &(0x7f0000000200), 0x10000000000000ba) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 539.940678ms ago: executing program 1 (id=604): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 503.082302ms ago: executing program 1 (id=605): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'bond0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 443.202337ms ago: executing program 5 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x400a0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 437.447458ms ago: executing program 1 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x3f}}}}}, 0x36) 299.328411ms ago: executing program 1 (id=608): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x48081) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='0', 0x1}], 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) 172.957633ms ago: executing program 2 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x4, 0xe}, {0xfff1}}}, 0x24}}, 0x74000800) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 49.836217][ T4171] cgroup: Unknown subsys name 'net' [ 49.967734][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.198584][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.621550][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.711891][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.814124][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.821208][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.829952][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.841849][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.849124][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.856947][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.888440][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.911653][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.918866][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.927085][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.950326][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.970636][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.978180][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.985987][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.009129][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.060188][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.076912][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 53.090289][ T4182] team0: Port device team_slave_0 added [ 53.097741][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.120733][ T4182] team0: Port device team_slave_1 added [ 53.160095][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.167982][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.175859][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.189804][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.201016][ T4186] team0: Port device team_slave_0 added [ 53.212747][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.219810][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.227682][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.235459][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.242759][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.269026][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.284905][ T4186] team0: Port device team_slave_1 added [ 53.306461][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.313662][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.339656][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.394694][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.406199][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.427217][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.434300][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.460529][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.479825][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.487178][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.495023][ T4192] device bridge_slave_0 entered promiscuous mode [ 53.514394][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.521347][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.547473][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.566117][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.573370][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.581357][ T4192] device bridge_slave_1 entered promiscuous mode [ 53.590805][ T4188] team0: Port device team_slave_0 added [ 53.619089][ T4188] team0: Port device team_slave_1 added [ 53.631288][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.638732][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.646697][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.657513][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.665157][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.691748][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.698990][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.707242][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.725650][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.771891][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.781728][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.788868][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.814814][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.828833][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.835865][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.842965][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.850717][ T4186] Cannot create hsr debugfs directory [ 53.865414][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.880539][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.887575][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.913566][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.933839][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.986550][ T4192] team0: Port device team_slave_0 added [ 53.994289][ T4192] team0: Port device team_slave_1 added [ 54.014021][ T4190] team0: Port device team_slave_0 added [ 54.038740][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.045711][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.052186][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.059874][ T4188] Cannot create hsr debugfs directory [ 54.067366][ T4190] team0: Port device team_slave_1 added [ 54.104685][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.111654][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.137828][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.155033][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.161986][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.188217][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.209706][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.216782][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.242997][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.259872][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.267205][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.293988][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.353206][ T2240] Bluetooth: hci0: command 0x0409 tx timeout [ 54.394899][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.401533][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.409335][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.417166][ T4192] Cannot create hsr debugfs directory [ 54.432419][ T2240] Bluetooth: hci2: command 0x0409 tx timeout [ 54.442303][ T1345] Bluetooth: hci1: command 0x0409 tx timeout [ 54.459753][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.466830][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.473539][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.481090][ T4190] Cannot create hsr debugfs directory [ 54.522450][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 54.528598][ T1345] Bluetooth: hci3: command 0x0409 tx timeout [ 54.648586][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.665670][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.677041][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.687156][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.744719][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.754871][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.778562][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.790941][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.837302][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.848741][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.878012][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.907966][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.935157][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.947617][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.958770][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.986298][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.995431][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.020364][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.029882][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.063514][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.074683][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.084554][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.095292][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.102591][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.111243][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.123813][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.143927][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.169001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.178470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.187426][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.194525][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.203800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.213179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.229626][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.242759][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.257197][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.270490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.279511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.289836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.297916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.306231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.315788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.328679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.336794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.345512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.354861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.363495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.377846][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.387643][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.397774][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.407387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.416725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.425480][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.432578][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.441040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.449681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.458116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.466942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.476265][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.483381][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.491128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.510658][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.543960][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.554724][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.564123][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.571157][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.580462][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.589054][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.597649][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.604747][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.613089][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.621594][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.630368][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.639541][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.648280][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.657496][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.666169][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.675914][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.684417][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.693486][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.701981][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.710767][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.719473][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.728648][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.737446][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.745724][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.753775][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.780559][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.807765][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.828739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.838431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.846955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.855862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.870478][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.883120][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.895899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.929458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.967688][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.992475][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.018530][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.031560][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.068241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.093492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.131887][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.141629][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.188721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.196897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.205873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.215017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.226242][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.233333][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.241083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.259584][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.273999][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.281577][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.289469][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.298821][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.308277][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.315407][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.323551][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.332884][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.340782][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.350674][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.360608][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.411606][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.424780][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.438406][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.442623][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 56.447965][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.462020][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.471037][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.480211][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.491145][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.499845][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.508450][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.515629][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.523638][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 56.526301][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.530949][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 56.541024][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.553124][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.560186][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.569435][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.578114][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.587307][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.596476][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.602633][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 56.605812][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.611474][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 56.624223][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.624929][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.640894][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.649267][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.657398][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.665770][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.706725][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.718492][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.736440][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.749012][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.759557][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.767826][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.781469][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.794155][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.803643][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.812786][ T4188] device veth0_vlan entered promiscuous mode [ 56.843570][ T4188] device veth1_vlan entered promiscuous mode [ 56.852748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.860790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.871805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.881099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.889995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.907163][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.918086][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.936614][ T4182] device veth0_vlan entered promiscuous mode [ 56.973432][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.981912][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.991276][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.000754][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.010881][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.020018][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.028326][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.035888][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.043988][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.051731][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.059824][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.075343][ T4186] device veth0_vlan entered promiscuous mode [ 57.096932][ T4182] device veth1_vlan entered promiscuous mode [ 57.116925][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.124105][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.132853][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.141230][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.150844][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.159703][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.170481][ T4188] device veth0_macvtap entered promiscuous mode [ 57.192576][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.200608][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.209324][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.217779][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.226722][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.234354][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.246008][ T4186] device veth1_vlan entered promiscuous mode [ 57.254466][ T4188] device veth1_macvtap entered promiscuous mode [ 57.266046][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.280644][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.290498][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.298861][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.308848][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.331148][ T4182] device veth0_macvtap entered promiscuous mode [ 57.360675][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.369185][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.379104][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.387786][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.397272][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.406673][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.414999][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.424663][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.433281][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.440946][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.451183][ T4182] device veth1_macvtap entered promiscuous mode [ 57.474977][ T4192] device veth0_vlan entered promiscuous mode [ 57.493268][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.501737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.510863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.519584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.530312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.539064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.549864][ T4186] device veth0_macvtap entered promiscuous mode [ 57.560005][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.570800][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.583876][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.596786][ T4186] device veth1_macvtap entered promiscuous mode [ 57.607989][ T4192] device veth1_vlan entered promiscuous mode [ 57.615526][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.625963][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.635068][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.643526][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.651947][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.663392][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.673059][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.684760][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.696159][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.707124][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.717301][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.726138][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.734867][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.751580][ T4190] device veth0_vlan entered promiscuous mode [ 57.765964][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.775083][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.784435][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.795814][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.807850][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.816566][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.825598][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.834320][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.842909][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.851109][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.859808][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.869098][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.879290][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.891058][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.900975][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.911827][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.923227][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.941783][ T4192] device veth0_macvtap entered promiscuous mode [ 57.965561][ T4190] device veth1_vlan entered promiscuous mode [ 57.973837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.982944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.991759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.001424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.010161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.023195][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.034182][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.044747][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.055760][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.066782][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.077599][ T4192] device veth1_macvtap entered promiscuous mode [ 58.093665][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.101575][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.110461][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.124291][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.133366][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.143005][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.152159][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.191702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.202740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.218317][ T4190] device veth0_macvtap entered promiscuous mode [ 58.235826][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.248836][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.259155][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.269657][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.279785][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.290446][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.301392][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.325413][ T4190] device veth1_macvtap entered promiscuous mode [ 58.334310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.342425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.350319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.361743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.372974][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.384722][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.394827][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.405637][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.415785][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.426456][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.438773][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.453264][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.461978][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.473056][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.481928][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.491895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.500663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.512835][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 58.530409][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.541540][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.554826][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.565655][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.575539][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.586892][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.597899][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.602602][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 58.608661][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.621081][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 58.626188][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.666890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.678229][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 58.686070][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 58.690880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.704590][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.718401][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.728388][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.738946][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.754649][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.765394][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.775465][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.785978][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.798009][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.807302][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.811819][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.824468][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.830394][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.841042][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.849856][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.872530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.881185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.891935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.928510][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.942542][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.958432][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.994254][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.012778][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.014000][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.043057][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.065296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.075636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.113001][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.117994][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.142160][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.148215][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.150236][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.151594][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.175223][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.181453][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.193310][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.227986][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.238247][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.252146][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.327359][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.368261][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.437916][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.497663][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.673044][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.727401][ T4300] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 59.742074][ T4300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 60.024649][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.139400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.622332][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 60.650898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.684372][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 60.691150][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 60.752971][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 60.761633][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 60.888609][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.942907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 61.784716][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.793812][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.803013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.853386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.865770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.644321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.563414][ T4289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.672426][ T4345] program syz.3.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.682316][ T4345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.788882][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.453818][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460354][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.880828][ T4383] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.892420][ T4383] exFAT-fs (loop0): unable to read boot sector [ 71.898754][ T4383] exFAT-fs (loop0): failed to read boot sector [ 71.904992][ T4383] exFAT-fs (loop0): failed to recognize exfat type [ 72.622471][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.991069][ T263] block nbd1: Attempted send on invalid socket [ 72.997832][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 73.010239][ T263] gfs2: error 10 reading superblock [ 74.043136][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 74.172621][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.363265][ T4234] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 74.373157][ T4234] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 74.385571][ T4234] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 74.442314][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.682877][ T4234] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 74.706003][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.720527][ T4234] usb 4-1: Product: syz [ 74.726894][ T4234] usb 4-1: Manufacturer: syz [ 74.876102][ T4234] usb 4-1: config 0 descriptor?? [ 74.882414][ T4338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.392208][ C1] sched: RT throttling activated [ 76.406525][ T13] cfg80211: failed to load regulatory.db [ 76.492395][ T4234] usb 4-1: can't set config #0, error -71 [ 76.521488][ T4234] usb 4-1: USB disconnect, device number 2 [ 76.652534][ T4338] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.695542][ T4338] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 77.686159][ T4338] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.702286][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.754096][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.862627][ T4338] usb 3-1: can't set config #27, error -71 [ 77.894908][ T4338] usb 3-1: USB disconnect, device number 2 [ 77.952277][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 79.532735][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.731882][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.742398][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.752169][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.773833][ T4234] usb 4-1: config 0 descriptor?? [ 79.792355][ T4234] usb 4-1: can't set config #0, error -71 [ 79.822761][ T4234] usb 4-1: USB disconnect, device number 3 [ 80.091697][ T4426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.694098][ T4436] program syz.1.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.703466][ T4436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 81.982144][ T4446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 83.135146][ T4453] input: syz0 as /devices/virtual/input/input6 [ 83.275296][ T4453] loop9: detected capacity change from 0 to 7 [ 83.286308][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.297444][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.332411][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.343317][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.420891][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.431862][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.440895][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.451876][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.510362][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.521312][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.711066][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.722025][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.815583][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.826547][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.834473][ T4453] ldm_validate_partition_table(): Disk read failed. [ 83.843826][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.854753][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.134541][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.145524][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.166409][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.177325][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.188453][ T4453] Dev loop9: unable to read RDB block 0 [ 84.354773][ T4453] loop9: unable to read partition table [ 84.360727][ T4453] loop9: partition table beyond EOD, truncated [ 84.367698][ T4453] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 84.367698][ T4453] ) failed (rc=-5) [ 84.382216][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.502489][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 85.622435][ T1107] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.640775][ T1107] usb 2-1: config 179 has no interface number 0 [ 85.661015][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.706847][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.725773][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.740939][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.753302][ T1107] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.768305][ T1107] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 85.793623][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.843242][ T4462] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.188247][ T1107] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 86.356988][ T4486] ubi31: attaching mtd0 [ 86.390625][ T4486] ubi31: scanning is finished [ 86.398491][ T4486] ubi31: empty MTD device detected [ 86.525670][ T4327] usb 2-1: USB disconnect, device number 2 [ 86.552246][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 86.563430][ T4327] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 86.950909][ T4486] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 87.196108][ T4497] exFAT-fs (loop4): unable to read boot sector [ 87.202364][ T4497] exFAT-fs (loop4): failed to read boot sector [ 87.208516][ T4497] exFAT-fs (loop4): failed to recognize exfat type [ 87.542373][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.263108][ T4226] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.434964][ T4226] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.465722][ T4226] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.604733][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.064469][ T4495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.387927][ T4226] usb 2-1: can't set config #27, error -71 [ 90.436042][ T4226] usb 2-1: USB disconnect, device number 3 [ 95.600886][ T4566] tipc: Invalid UDP bearer configuration [ 95.600924][ T4566] tipc: Enabling of bearer rejected, failed to enable media [ 95.679128][ T4567] print_req_error: 5 callbacks suppressed [ 95.679143][ T4567] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.695873][ T4567] exFAT-fs (loop4): unable to read boot sector [ 95.702026][ T4567] exFAT-fs (loop4): failed to read boot sector [ 95.708209][ T4567] exFAT-fs (loop4): failed to recognize exfat type [ 95.885190][ T4561] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.602358][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.738916][ T4185] Bluetooth: Wrong link type (-57) [ 96.794362][ T4586] binder: BINDER_SET_CONTEXT_MGR already set [ 96.841633][ T4586] binder: 4583:4586 ioctl 4018620d 2000000002c0 returned -16 [ 97.182480][ T1107] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.198788][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.218451][ T1107] usb 5-1: Product: syz [ 97.225490][ T1107] usb 5-1: Manufacturer: syz [ 97.235888][ T1107] usb 5-1: SerialNumber: syz [ 97.341835][ T4561] syz.0.64 (4561) used greatest stack depth: 20448 bytes left [ 97.712460][ T1107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 97.992375][ T1107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 98.029819][ T1107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 98.042674][ T1107] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 98.054095][ T1107] lan78xx: probe of 5-1:1.0 failed with error -71 [ 98.074809][ T1107] usb 5-1: USB disconnect, device number 2 [ 98.632319][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.960308][ T4618] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.971465][ T4618] exFAT-fs (loop3): unable to read boot sector [ 98.977766][ T4618] exFAT-fs (loop3): failed to read boot sector [ 98.983955][ T4618] exFAT-fs (loop3): failed to recognize exfat type [ 99.172543][ T4226] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 99.193767][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.216321][ T4226] usb 1-1: Product: syz [ 99.220705][ T4226] usb 1-1: Manufacturer: syz [ 99.231337][ T4226] usb 1-1: SerialNumber: syz [ 99.503811][ T26] audit: type=1326 audit(1766745871.189:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03dc6b5749 code=0x7ffc0000 [ 99.549201][ T26] audit: type=1326 audit(1766745871.209:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03dc6b5749 code=0x7ffc0000 [ 99.581129][ T26] audit: type=1326 audit(1766745871.209:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f03dc6b5749 code=0x7ffc0000 [ 99.610658][ T26] audit: type=1326 audit(1766745871.229:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03dc6b5749 code=0x7ffc0000 [ 99.634332][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.665003][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 99.671435][ T26] audit: type=1326 audit(1766745871.229:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03dc6b5749 code=0x7ffc0000 [ 99.711788][ T4632] tmpfs: Unknown parameter 'usrquota' [ 99.733185][ T4605] dlm: dev_write: no op 0 74000000000000 [ 99.739447][ T4605] udc-core: couldn't find an available UDC or it's busy [ 99.758337][ T4605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.783260][ T4634] binder: 4633:4634 unknown command 1074553619 [ 99.789919][ T4634] binder: 4633:4634 ioctl c0306201 200000000540 returned -22 [ 100.026427][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 100.064513][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 100.076257][ T1107] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.084397][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.093296][ T1107] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 100.110455][ T1107] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 100.114606][ T4226] lan78xx: probe of 1-1:1.0 failed with error -71 [ 100.122338][ T1107] usb 3-1: config 220 has no interface number 2 [ 100.139512][ T1107] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.158422][ T1107] usb 3-1: config 220 interface 0 has no altsetting 0 [ 100.172835][ T4226] usb 1-1: USB disconnect, device number 3 [ 100.178140][ T1107] usb 3-1: config 220 interface 76 has no altsetting 0 [ 100.201969][ T1107] usb 3-1: config 220 interface 1 has no altsetting 0 [ 100.418081][ T1107] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.445554][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.485493][ T1107] usb 3-1: Product: syz [ 100.495136][ T1107] usb 3-1: Manufacturer: syz [ 100.499921][ T1107] usb 3-1: SerialNumber: syz [ 100.954368][ T1107] uvcvideo 3-1:220.1: Unknown video format 04000000-0000-0000-0000-001000000000 [ 100.993615][ T1107] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 101.027620][ T1107] usb 3-1: No valid video chain found. [ 101.052126][ T1107] usb 3-1: selecting invalid altsetting 0 [ 101.173394][ T1107] usb 3-1: selecting invalid altsetting 0 [ 101.179169][ T1107] usbtest: probe of 3-1:220.1 failed with error -22 [ 101.248634][ T1107] usb 3-1: USB disconnect, device number 3 [ 102.431221][ T4668] loop6: detected capacity change from 0 to 4095 [ 102.494243][ T4669] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 102.528069][ C0] blk_update_request: I/O error, dev loop6, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 102.567359][ C0] blk_update_request: I/O error, dev loop6, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.578538][ C0] buffer_io_error: 4 callbacks suppressed [ 102.578550][ C0] Buffer I/O error on dev loop6, logical block 480, async page read [ 102.597843][ C1] blk_update_request: I/O error, dev loop6, sector 1160 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 102.609659][ C1] blk_update_request: I/O error, dev loop6, sector 2192 op 0x0:(READ) flags 0x80700 phys_seg 46 prio class 0 [ 102.678207][ T1107] Bluetooth: hci2: command 0x6e00 tx timeout [ 102.722775][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.733699][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.282289][ T4227] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.534315][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 109.539595][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.556941][ T4749] Zero length message leads to an empty skb [ 109.618081][ T4752] binder: 4751:4752 unknown command 0 [ 109.624129][ T4752] binder: 4751:4752 ioctl c0306201 200000000080 returned -22 [ 109.654003][ T4753] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.675678][ T4227] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.704420][ T4227] usb 2-1: config 0 has no interface number 0 [ 109.710764][ T4227] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.723067][ T4227] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.733213][ T4227] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 109.742357][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.760949][ T4753] exFAT-fs (loop3): unable to read boot sector [ 109.771732][ T4227] usb 2-1: config 0 descriptor?? [ 109.791311][ T4753] exFAT-fs (loop3): failed to read boot sector [ 109.811371][ T4753] exFAT-fs (loop3): failed to recognize exfat type [ 109.932892][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.046217][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.141051][ T4759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 110.170278][ T1107] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 110.297827][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.460284][ T1107] usb 5-1: config 0 descriptor?? [ 110.472759][ T4227] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 110.510714][ T4227] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 110.535295][ T4227] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 110.550827][ T4227] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 110.571018][ T4227] uclogic: probe of 0003:28BD:0071.0001 failed with error -71 [ 110.599033][ T4227] usb 2-1: USB disconnect, device number 4 [ 111.039626][ T1107] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 111.095573][ T1107] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 111.223275][ T1107] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 112.096852][ T1107] usb 5-1: USB disconnect, device number 3 [ 112.325906][ T4798] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.337214][ T4798] exFAT-fs (loop2): unable to read boot sector [ 112.343802][ T4798] exFAT-fs (loop2): failed to read boot sector [ 112.350287][ T4798] exFAT-fs (loop2): failed to recognize exfat type [ 112.397238][ T4800] tipc: Started in network mode [ 112.407476][ T4800] tipc: Node identity 821be04033d2, cluster identity 4711 [ 112.415375][ T4800] tipc: Enabled bearer , priority 0 [ 112.428698][ T4800] device syzkaller0 entered promiscuous mode [ 112.479025][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 112.506444][ T4800] tipc: Resetting bearer [ 112.543145][ T4799] tipc: Resetting bearer [ 112.565544][ T4799] tipc: Disabling bearer [ 112.826902][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 113.262267][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.584434][ T1107] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.652390][ T4226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.735095][ T4226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.749326][ T4226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.772282][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.972367][ T1107] usb 1-1: not running at top speed; connect to a high speed hub [ 114.031627][ T4820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.093632][ T1107] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.113176][ T1107] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.130139][ T1107] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.150399][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.202572][ T4227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.354422][ T1107] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.378687][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.431547][ T1107] usb 1-1: Product: syz [ 114.447444][ T1107] usb 1-1: Manufacturer: syz [ 114.466631][ T1107] usb 1-1: SerialNumber: syz [ 114.492404][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 114.645252][ T4227] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 114.668241][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.711609][ T4227] usb 3-1: config 0 descriptor?? [ 114.972418][ T4227] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 115.007915][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.038385][ T4227] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 115.058211][ T4227] usb 3-1: media controller created [ 115.068426][ T1107] usb 1-1: 0:2 : does not exist [ 115.108256][ T1107] usb 1-1: USB disconnect, device number 4 [ 115.140649][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.212501][ T4227] az6027: usb out operation failed. (-71) [ 115.242293][ T4227] az6027: usb out operation failed. (-71) [ 115.248498][ T4227] stb0899_attach: Driver disabled by Kconfig [ 115.259328][ T4227] az6027: no front-end attached [ 115.259328][ T4227] [ 115.284624][ T4227] az6027: usb out operation failed. (-71) [ 115.290515][ T4227] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 115.338506][ T4227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 115.373762][ T4227] dvb-usb: schedule remote query interval to 400 msecs. [ 115.381015][ T4227] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.398547][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 115.421845][ T4227] usb 3-1: USB disconnect, device number 4 [ 115.542093][ T4227] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.772066][ T4870] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.783036][ T4870] exFAT-fs (loop0): unable to read boot sector [ 115.789193][ T4870] exFAT-fs (loop0): failed to read boot sector [ 115.795401][ T4870] exFAT-fs (loop0): failed to recognize exfat type [ 116.833639][ T4227] usb 5-1: USB disconnect, device number 4 [ 116.840018][ T4817] delete_channel: no stack [ 116.950846][ T4895] netlink: 52 bytes leftover after parsing attributes in process `syz.1.176'. [ 116.965317][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 117.082275][ T2240] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.462532][ T2240] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 117.538313][ T4908] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.549542][ T4908] exFAT-fs (loop2): unable to read boot sector [ 117.556217][ T4908] exFAT-fs (loop2): failed to read boot sector [ 117.562440][ T4908] exFAT-fs (loop2): failed to recognize exfat type [ 118.322666][ T2240] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.335413][ T2240] usb 1-1: can't read configurations, error -61 [ 118.502324][ T2240] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.812467][ T2240] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 118.992451][ T2240] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.026331][ T2240] usb 1-1: can't read configurations, error -61 [ 119.096153][ T2240] usb usb1-port1: attempt power cycle [ 119.532832][ T2240] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.672938][ T2240] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 119.802400][ T2240] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 119.816871][ T2240] usb 1-1: can't read configurations, error -71 [ 119.910381][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 119.942540][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 119.978602][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.024491][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.067885][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.112678][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.169735][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.193666][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.190'. [ 120.437521][ T4952] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 120.550575][ T4952] syz.1.195 (4952) used greatest stack depth: 19488 bytes left [ 120.941330][ T4972] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.019652][ T4972] exFAT-fs (loop0): unable to read boot sector [ 121.072343][ T4972] exFAT-fs (loop0): failed to read boot sector [ 121.140472][ T4972] exFAT-fs (loop0): failed to recognize exfat type [ 123.093009][ T4249] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.354493][ T4249] usb 5-1: Using ep0 maxpacket: 32 [ 123.472393][ T4249] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.486322][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.600084][ T4249] usb 5-1: config 0 descriptor?? [ 123.862458][ T4249] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.941469][ T4249] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.035790][ T4249] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 124.049159][ T4249] usb 5-1: media controller created [ 124.064215][ T5006] udc-core: couldn't find an available UDC or it's busy [ 124.080121][ T5006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.089434][ T4249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.172424][ T4249] az6027: usb out operation failed. (-71) [ 124.252724][ T4249] az6027: usb out operation failed. (-71) [ 124.282443][ T4249] stb0899_attach: Driver disabled by Kconfig [ 124.289674][ T4249] az6027: no front-end attached [ 124.289674][ T4249] [ 124.322416][ T4249] az6027: usb out operation failed. (-71) [ 124.336226][ T4249] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 124.365420][ T4249] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 124.389788][ T4249] dvb-usb: schedule remote query interval to 400 msecs. [ 124.399572][ T4249] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.438807][ T4249] usb 5-1: USB disconnect, device number 5 [ 124.509394][ T4249] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 124.529071][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.652928][ T5038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.822425][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 124.870315][ T5047] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.934730][ T5049] device batadv_slave_1 entered promiscuous mode [ 124.961644][ T5047] exFAT-fs (loop1): unable to read boot sector [ 124.973604][ T5048] device batadv_slave_1 left promiscuous mode [ 124.985069][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.001324][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.017484][ T5047] exFAT-fs (loop1): failed to read boot sector [ 125.047773][ T5047] exFAT-fs (loop1): failed to recognize exfat type [ 125.212583][ T1107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.227398][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.239977][ T1107] usb 4-1: Product: syz [ 125.253900][ T1107] usb 4-1: Manufacturer: syz [ 125.261398][ T1107] usb 4-1: SerialNumber: syz [ 125.622744][ T1107] usb 4-1: 0:2 : does not exist [ 125.685084][ T1107] usb 4-1: USB disconnect, device number 4 [ 126.493598][ T5066] IPv4: Oversized IP packet from 127.202.26.0 [ 126.660497][ T5015] syz.2.217 (5015): drop_caches: 1 [ 127.390011][ T5084] tipc: Enabled bearer , priority 10 [ 127.828890][ T5098] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.871868][ T5098] exFAT-fs (loop1): unable to read boot sector [ 127.899802][ T5098] exFAT-fs (loop1): failed to read boot sector [ 127.928837][ T5098] exFAT-fs (loop1): failed to recognize exfat type [ 128.504563][ T1107] tipc: Node number set to 2982797376 [ 129.183418][ T4227] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 129.351685][ T5133] __nla_validate_parse: 19 callbacks suppressed [ 129.351700][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 129.535376][ T5147] syz.3.266 uses obsolete (PF_INET,SOCK_PACKET) [ 129.545888][ T5147] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 129.554907][ T4227] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 129.572111][ T4227] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 129.584055][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 129.596233][ T4227] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 129.607387][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 129.620386][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.630420][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 129.648147][ T5150] fuse: Bad value for 'rootmode' [ 129.912975][ T4227] usb 1-1: string descriptor 0 read error: -22 [ 129.926827][ T4227] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 129.958903][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.991500][ T4227] usb 1-1: config 0 descriptor?? [ 130.052971][ T4227] hub 1-1:0.0: bad descriptor, ignoring hub [ 130.064974][ T4227] hub: probe of 1-1:0.0 failed with error -5 [ 130.077124][ T4227] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 130.309955][ T5164] udc-core: couldn't find an available UDC or it's busy [ 130.324096][ T5164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.465570][ T5168] device syzkaller0 entered promiscuous mode [ 130.652273][ T4227] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.752108][ T5172] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.763161][ T5172] exFAT-fs (loop3): unable to read boot sector [ 130.769322][ T5172] exFAT-fs (loop3): failed to read boot sector [ 130.775528][ T5172] exFAT-fs (loop3): failed to recognize exfat type [ 131.122418][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 131.133247][ T5178] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.142532][ T5178] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.151241][ T5178] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.160063][ T5178] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.262413][ T4227] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 131.271597][ T4227] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 131.283052][ T4227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.293429][ T4227] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 131.305007][ T4227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 131.316002][ T4227] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.329424][ T4227] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.338686][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.612485][ T4227] usb 2-1: GET_CAPABILITIES returned 0 [ 131.621554][ T4227] usbtmc 2-1:16.0: can't read capabilities [ 131.818142][ T4227] usb 2-1: USB disconnect, device number 5 [ 131.936751][ T4327] usb 1-1: USB disconnect, device number 9 [ 132.674405][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.680856][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989171][ T5213] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.000127][ T5213] exFAT-fs (loop1): unable to read boot sector [ 133.006339][ T5213] exFAT-fs (loop1): failed to read boot sector [ 133.012525][ T5213] exFAT-fs (loop1): failed to recognize exfat type [ 134.492311][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.753979][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 134.982360][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 135.008180][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.084878][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 135.102370][ T13] pvrusb2: ********** [ 135.106382][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 135.147495][ T13] pvrusb2: Important functionality might not be entirely working. [ 135.180332][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.213289][ T13] pvrusb2: ********** [ 135.232272][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.325539][ T2422] pvrusb2: Invalid write control endpoint [ 135.436625][ T2422] pvrusb2: Invalid write control endpoint [ 135.446908][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 135.470383][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 135.485329][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 135.538052][ T5254] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.549213][ T5254] exFAT-fs (loop3): unable to read boot sector [ 135.556021][ T5254] exFAT-fs (loop3): failed to read boot sector [ 135.562234][ T5254] exFAT-fs (loop3): failed to recognize exfat type [ 135.622456][ T4227] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 135.635993][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 135.646260][ T4227] usb 1-1: config 0 has no interface number 0 [ 135.652554][ T4227] usb 1-1: config 0 interface 196 has no altsetting 0 [ 135.705307][ T2422] pvrusb2: Device being rendered inoperable [ 135.746805][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 135.757220][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 135.781962][ T2422] pvrusb2: Attached sub-driver cx25840 [ 135.788794][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 135.800268][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 135.832379][ T4227] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 135.865509][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.892378][ T4227] usb 1-1: Product: syz [ 135.896700][ T4227] usb 1-1: Manufacturer: syz [ 135.901295][ T4227] usb 1-1: SerialNumber: syz [ 135.941210][ T4227] usb 1-1: config 0 descriptor?? [ 136.194267][ T5246] udc-core: couldn't find an available UDC or it's busy [ 136.229606][ T5246] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.263391][ T5246] 8021q: VLANs not supported on vcan0 [ 136.313749][ T4227] ipheth 1-1:0.196: Unable to find endpoints [ 136.341255][ T4227] usb 1-1: USB disconnect, device number 10 [ 136.408267][ T5256] tipc: Started in network mode [ 136.419499][ T5256] tipc: Node identity ee202f293811, cluster identity 4711 [ 136.440067][ T5256] tipc: Enabled bearer , priority 0 [ 136.459876][ T5257] device syzkaller0 entered promiscuous mode [ 136.491914][ T5256] tipc: Resetting bearer [ 136.506966][ T5255] tipc: Resetting bearer [ 136.527765][ T5255] tipc: Disabling bearer [ 136.877003][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 137.330747][ T4327] usb 2-1: USB disconnect, device number 6 [ 139.530733][ T5352] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.597733][ T5352] exFAT-fs (loop3): unable to read boot sector [ 139.623814][ T5352] exFAT-fs (loop3): failed to read boot sector [ 139.647411][ T5352] exFAT-fs (loop3): failed to recognize exfat type [ 141.235136][ T5399] IPv4: Oversized IP packet from 172.20.20.24 [ 141.242940][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 141.249296][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 141.830024][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 141.919056][ T5429] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.938891][ T5429] exFAT-fs (loop3): unable to read boot sector [ 141.947317][ T5429] exFAT-fs (loop3): failed to read boot sector [ 141.977518][ T5429] exFAT-fs (loop3): failed to recognize exfat type [ 142.138592][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.170684][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.198430][ T5403] device bridge_slave_0 entered promiscuous mode [ 142.231375][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.268771][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.318168][ T5403] device bridge_slave_1 entered promiscuous mode [ 142.466920][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.599499][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.690670][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.758890][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.850717][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.948518][ T5403] team0: Port device team_slave_0 added [ 142.971464][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.011981][ T5403] team0: Port device team_slave_1 added [ 143.056391][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.069990][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.122264][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.146900][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.162267][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.232349][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.302266][ T4448] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.409618][ T5403] device hsr_slave_0 entered promiscuous mode [ 143.420889][ T5403] device hsr_slave_1 entered promiscuous mode [ 143.430508][ T5403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.440659][ T5403] Cannot create hsr debugfs directory [ 143.473047][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 143.752690][ T4448] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.780129][ T4448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.814410][ T4448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.843374][ T5403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.859399][ T4448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.896039][ T5403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.992692][ T4448] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 144.035530][ T4448] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 144.102674][ T4448] usb 2-1: Manufacturer: syz [ 144.124210][ T5403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.140698][ T4448] usb 2-1: config 0 descriptor?? [ 144.271863][ T5403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.643685][ T4448] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 144.659046][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.673186][ T4448] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 144.711451][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.731724][ T4448] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 144.731853][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.827703][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.916153][ T13] usb 2-1: USB disconnect, device number 7 [ 144.974617][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.001496][ T5497] fido_id[5497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.004257][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.069008][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.076121][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.094175][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.117028][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.129050][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.142991][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.150090][ T5331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.186284][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.239505][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.260291][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.294833][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.318359][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.359245][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.403159][ T5403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.507195][ T5403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.520722][ T5514] program syz.3.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.552355][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 145.576616][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.586806][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.605553][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.627502][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.646340][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.859767][ T4448] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.867608][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.018091][ T5537] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.068323][ T5537] exFAT-fs (loop0): unable to read boot sector [ 146.090609][ T5537] exFAT-fs (loop0): failed to read boot sector [ 146.098911][ T9] device hsr_slave_0 left promiscuous mode [ 146.111616][ T5537] exFAT-fs (loop0): failed to recognize exfat type [ 146.126304][ T9] device hsr_slave_1 left promiscuous mode [ 146.147076][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.154721][ T4448] usb 2-1: Using ep0 maxpacket: 32 [ 146.160574][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.176751][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.193744][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.202076][ T9] device bridge_slave_1 left promiscuous mode [ 146.217245][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.238322][ T9] device bridge_slave_0 left promiscuous mode [ 146.244881][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.271217][ T9] device veth1_macvtap left promiscuous mode [ 146.278044][ T9] device veth0_macvtap left promiscuous mode [ 146.284351][ T4448] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.293548][ T9] device veth1_vlan left promiscuous mode [ 146.300768][ T4448] usb 2-1: config 0 has no interface number 0 [ 146.307415][ T9] device veth0_vlan left promiscuous mode [ 146.492463][ T4448] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 146.506124][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.517957][ T4448] usb 2-1: Product: syz [ 146.522274][ T4448] usb 2-1: Manufacturer: syz [ 146.527387][ T4448] usb 2-1: SerialNumber: syz [ 146.547666][ T4448] usb 2-1: config 0 descriptor?? [ 146.594083][ T4448] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 146.625453][ T4448] usb 2-1: selecting invalid altsetting 1 [ 146.631457][ T4448] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 146.641902][ T4448] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.652485][ T4448] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 146.660957][ T4448] usb 2-1: media controller created [ 146.677879][ T4448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.836401][ T9] team0 (unregistering): Port device team_slave_1 removed [ 146.856317][ T9] team0 (unregistering): Port device team_slave_0 removed [ 146.874349][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.891700][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.996698][ T9] bond0 (unregistering): Released all slaves [ 147.121584][ T5557] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 147.168494][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 147.430036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.438499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.481533][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.643368][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 147.817589][ T4448] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 147.839144][ T4448] zl10353_read_register: readreg error (reg=127, ret==-110) [ 147.882395][ T5512] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 147.973655][ T4448] usb 2-1: USB disconnect, device number 8 [ 148.136922][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.153132][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.261682][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.301263][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.339957][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.387254][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.463126][ T5403] device veth0_vlan entered promiscuous mode [ 148.537676][ T5403] device veth1_vlan entered promiscuous mode [ 148.678474][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.716766][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.765080][ T5403] device veth0_macvtap entered promiscuous mode [ 148.823875][ T5403] device veth1_macvtap entered promiscuous mode [ 148.888002][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.174666][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.237340][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.318078][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.448885][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.469956][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.525196][ T5651] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.536503][ T5651] exFAT-fs (loop0): unable to read boot sector [ 149.542753][ T5651] exFAT-fs (loop0): failed to read boot sector [ 149.548902][ T5651] exFAT-fs (loop0): failed to recognize exfat type [ 150.196491][ T2240] Bluetooth: hci0: command 0x0419 tx timeout [ 150.326085][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.387623][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.438025][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.502778][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.524232][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.571856][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.597440][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.658463][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.686172][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.696625][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.713541][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.728368][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.740509][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.768477][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.798932][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.824064][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.838715][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.851998][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.862316][ T4327] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.876073][ T5403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.898989][ T5403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.917177][ T5403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.927870][ T5403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.132300][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 151.162997][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.187651][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.258446][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.272672][ T4327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.286127][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.310153][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.387417][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.444604][ T5685] usb usb8: usbfs: process 5685 (syz.0.400) did not claim interface 0 before use [ 151.502450][ T4327] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.511521][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.562235][ T4327] usb 2-1: Product: syz [ 151.566686][ T4327] usb 2-1: Manufacturer: syz [ 151.571296][ T4327] usb 2-1: SerialNumber: syz [ 151.614040][ T4327] usb 2-1: config 0 descriptor?? [ 151.684315][ T4327] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.734413][ T4327] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 151.925021][ T5699] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.936104][ T5699] exFAT-fs (loop2): unable to read boot sector [ 151.942320][ T5699] exFAT-fs (loop2): failed to read boot sector [ 151.948471][ T5699] exFAT-fs (loop2): failed to recognize exfat type [ 152.681327][ T5674] ODEBUG: Out of memory. ODEBUG disabled [ 152.721045][ T5704] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 152.742486][ T5704] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.403'. [ 152.765419][ T4327] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 153.327962][ T4327] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.342306][ T4327] em28xx 2-1:0.0: board has no eeprom [ 153.494374][ T4327] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.512217][ T4327] em28xx 2-1:0.0: dvb set to bulk mode. [ 153.525499][ T4327] usb 2-1: USB disconnect, device number 9 [ 153.540082][ T4327] em28xx 2-1:0.0: Disconnecting em28xx [ 153.554805][ T4234] em28xx 2-1:0.0: Binding DVB extension [ 153.639322][ T4234] em28xx 2-1:0.0: Registering input extension [ 153.646511][ T4327] em28xx 2-1:0.0: Closing input extension [ 153.684766][ T4327] em28xx 2-1:0.0: Freeing device [ 153.906530][ T5749] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 154.014964][ T5749] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 154.026417][ T5749] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 154.038362][ T5749] bond1: (slave ip6gre1): making interface the new active one [ 154.047568][ T5749] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.058161][ T5749] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 154.282282][ T4249] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 154.407059][ T5765] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.418280][ T5765] exFAT-fs (loop0): unable to read boot sector [ 154.424536][ T5765] exFAT-fs (loop0): failed to read boot sector [ 154.430734][ T5765] exFAT-fs (loop0): failed to recognize exfat type [ 154.447690][ T4327] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.217269][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.248541][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.272234][ T4327] usb 2-1: Using ep0 maxpacket: 32 [ 155.384566][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.415381][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.432534][ T4327] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 155.442276][ T4327] usb 2-1: config 0 has no interface number 0 [ 155.461655][ T4327] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.512336][ T4327] usb 2-1: config 0 interface 85 has no altsetting 0 [ 155.532478][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.552417][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.687609][ T4327] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 155.712548][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.712852][ T4249] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 155.724960][ T4327] usb 2-1: Product: syz [ 155.768749][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.777037][ T4327] usb 2-1: Manufacturer: syz [ 155.807227][ T4327] usb 2-1: SerialNumber: syz [ 155.822068][ T4249] usb 3-1: Product: syz [ 155.830493][ T4327] usb 2-1: config 0 descriptor?? [ 155.842277][ T4249] usb 3-1: Manufacturer: syz [ 155.878278][ T4249] usb 3-1: SerialNumber: syz [ 155.911734][ T4249] usb 3-1: config 0 descriptor?? [ 155.964227][ T4249] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 155.980050][ T4249] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 156.082747][ T5793] loop6: detected capacity change from 0 to 524288000 [ 156.102291][ T4185] Bluetooth: hci2: hardware error 0x04 [ 156.122571][ T4327] appletouch 2-1:0.85: Failed to read mode from device. [ 156.129629][ T4327] appletouch: probe of 2-1:0.85 failed with error -5 [ 156.202445][ T5674] Set syz1 is full, maxelem 65536 reached [ 156.216505][ T4327] usb 2-1: USB disconnect, device number 10 [ 157.228649][ T4289] usb 3-1: USB disconnect, device number 5 [ 157.560911][ T5829] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.571978][ T5829] exFAT-fs (loop3): unable to read boot sector [ 157.578274][ T5829] exFAT-fs (loop3): failed to read boot sector [ 157.584535][ T5829] exFAT-fs (loop3): failed to recognize exfat type [ 158.534624][ T26] audit: type=1326 audit(1766745930.219:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5833 comm="syz.5.432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a3c6a6749 code=0x0 [ 158.798920][ T5861] mmap: syz.2.436 (5861) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 160.822097][ T5909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.445'. [ 161.095724][ T5922] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.106955][ T5922] exFAT-fs (loop2): unable to read boot sector [ 161.113204][ T5922] exFAT-fs (loop2): failed to read boot sector [ 161.119399][ T5922] exFAT-fs (loop2): failed to recognize exfat type [ 162.322240][ T4249] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.732399][ T4249] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.762208][ T4249] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.907293][ T4249] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.936865][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.988818][ T4249] usb 3-1: SerialNumber: syz [ 163.297185][ T4249] usb 3-1: 0:2 : does not exist [ 163.409439][ T4249] usb 3-1: USB disconnect, device number 6 [ 163.824570][ T5990] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.835740][ T5990] exFAT-fs (loop3): unable to read boot sector [ 163.841943][ T5990] exFAT-fs (loop3): failed to read boot sector [ 163.848189][ T5990] exFAT-fs (loop3): failed to recognize exfat type [ 164.782307][ T4227] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 165.092449][ T4419] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.172329][ T4227] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 165.182343][ T4227] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.194545][ T4227] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.292448][ T4227] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 165.317501][ T4227] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.366662][ T6034] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 165.428104][ T4227] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.532596][ T6047] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:19491 [ 165.592730][ T4227] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 165.600159][ T4227] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.632425][ T4419] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 165.669905][ T4227] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.731335][ T4419] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 165.852327][ T4419] usb 2-1: Product: syz [ 165.856722][ T4419] usb 2-1: Manufacturer: syz [ 165.861521][ T4419] usb 2-1: SerialNumber: syz [ 165.900471][ T4419] usb 2-1: config 0 descriptor?? [ 165.962634][ T4227] usb 6-1: string descriptor 0 read error: -22 [ 165.985581][ T4227] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.005786][ T4419] ch341 2-1:0.0: ch341-uart converter detected [ 166.032256][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.052233][ T4327] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.104375][ T4227] adutux 6-1:168.0: interrupt endpoints not found [ 166.263965][ T4448] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 166.303975][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 166.385580][ T4227] usb 6-1: USB disconnect, device number 2 [ 166.432513][ T4327] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 166.455813][ T4327] usb 1-1: config 0 has no interface number 0 [ 166.476169][ T4327] usb 1-1: config 0 interface 196 has no altsetting 0 [ 166.632419][ T4448] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 166.642363][ T4327] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 166.702445][ T4448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.729075][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.749245][ T4327] usb 1-1: Product: syz [ 166.762352][ T4448] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.779368][ T4327] usb 1-1: Manufacturer: syz [ 166.792357][ T4327] usb 1-1: SerialNumber: syz [ 166.797186][ T4448] usb 4-1: config 0 has no interface number 0 [ 166.812354][ T4327] usb 1-1: config 0 descriptor?? [ 166.817560][ T4448] usb 4-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.096033][ T4448] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 167.117195][ T4448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.126354][ T4448] usb 4-1: Product: syz [ 167.130514][ T4448] usb 4-1: Manufacturer: syz [ 167.135261][ T4448] usb 4-1: SerialNumber: syz [ 167.141464][ T4448] usb 4-1: config 0 descriptor?? [ 167.147150][ T4327] ipheth 1-1:0.196: Unable to find endpoints [ 167.161487][ T4327] usb 1-1: USB disconnect, device number 11 [ 167.215264][ T6091] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.226439][ T6091] exFAT-fs (loop2): unable to read boot sector [ 167.232673][ T6091] exFAT-fs (loop2): failed to read boot sector [ 167.238833][ T6091] exFAT-fs (loop2): failed to recognize exfat type [ 167.368813][ T4448] snd-usb-audio: probe of 4-1:0.151 failed with error -2 [ 167.842468][ T4419] usb 2-1: failed to send control message: -110 [ 167.915918][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.933286][ T4419] ch341-uart: probe of ttyUSB0 failed with error -110 [ 168.042242][ T4419] usb 2-1: USB disconnect, device number 11 [ 168.069678][ T4419] ch341 2-1:0.0: device disconnected [ 168.305521][ T6116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.440776][ T6120] device syzkaller0 entered promiscuous mode [ 168.828150][ T6132] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.839110][ T6132] exFAT-fs (loop0): unable to read boot sector [ 168.845349][ T6132] exFAT-fs (loop0): failed to read boot sector [ 168.851505][ T6132] exFAT-fs (loop0): failed to recognize exfat type [ 169.660382][ T6141] input: syz1 as /devices/virtual/input/input13 [ 170.333958][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 170.352392][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 170.386088][ T6148] device bridge0 entered promiscuous mode [ 170.419714][ T6148] device ip6gretap0 entered promiscuous mode [ 170.440862][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 170.616535][ T4419] usb 4-1: USB disconnect, device number 5 [ 170.988564][ T6180] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.999786][ T6180] exFAT-fs (loop3): unable to read boot sector [ 171.006022][ T6180] exFAT-fs (loop3): failed to read boot sector [ 171.012207][ T6180] exFAT-fs (loop3): failed to recognize exfat type [ 173.022385][ T4327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.472443][ T4327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.592462][ T4327] usb 2-1: config 13 has an invalid interface number: 177 but max is 0 [ 173.732738][ T6242] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.743788][ T6242] exFAT-fs (loop2): unable to read boot sector [ 173.749928][ T6242] exFAT-fs (loop2): failed to read boot sector [ 173.756086][ T6242] exFAT-fs (loop2): failed to recognize exfat type [ 173.803988][ T4327] usb 2-1: config 13 has no interface number 0 [ 173.810197][ T4327] usb 2-1: config 13 interface 177 altsetting 4 has an invalid endpoint with address 0x99, skipping [ 173.822237][ T4327] usb 2-1: config 13 interface 177 has no altsetting 0 [ 174.022308][ T4327] usb 2-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=ef.b8 [ 174.108799][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.142499][ T4327] usb 2-1: Product: syz [ 174.146696][ T4327] usb 2-1: Manufacturer: syz [ 174.171528][ T4327] usb 2-1: SerialNumber: syz [ 174.533618][ T4327] imon 2-1:13.177: unable to register, err -19 [ 174.543947][ T4327] usbhid 2-1:13.177: couldn't find an input interrupt endpoint [ 174.590142][ T4327] usb 2-1: USB disconnect, device number 12 [ 174.812734][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 175.125636][ T4327] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.126411][ T6271] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.144263][ T6271] exFAT-fs (loop2): unable to read boot sector [ 175.150421][ T6271] exFAT-fs (loop2): failed to read boot sector [ 175.156739][ T6271] exFAT-fs (loop2): failed to recognize exfat type [ 175.432264][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 175.475222][ T6290] netlink: 'syz.5.528': attribute type 4 has an invalid length. [ 175.572420][ T4327] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.604736][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.635885][ T4327] usb 4-1: config 0 descriptor?? [ 175.727463][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 175.738856][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 175.925029][ T4327] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 175.935989][ T4327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.975444][ T4327] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.006141][ T4327] usb 4-1: media controller created [ 176.049478][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.132272][ T4327] az6027: usb out operation failed. (-71) [ 176.152313][ T4327] az6027: usb out operation failed. (-71) [ 176.158100][ T4327] stb0899_attach: Driver disabled by Kconfig [ 176.187808][ T4327] az6027: no front-end attached [ 176.187808][ T4327] [ 176.232269][ T4327] az6027: usb out operation failed. (-71) [ 176.238137][ T4327] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.268561][ T4327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 176.290847][ T4327] dvb-usb: schedule remote query interval to 400 msecs. [ 176.298243][ T4327] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.337335][ T4327] usb 4-1: USB disconnect, device number 6 [ 176.442348][ T4327] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 176.791485][ T6317] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.802456][ T6317] exFAT-fs (loop3): unable to read boot sector [ 176.808615][ T6317] exFAT-fs (loop3): failed to read boot sector [ 176.814880][ T6317] exFAT-fs (loop3): failed to recognize exfat type [ 178.202241][ T4289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.252598][ T6355] netlink: 364 bytes leftover after parsing attributes in process `syz.0.548'. [ 178.630328][ T6375] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.641393][ T6375] exFAT-fs (loop0): unable to read boot sector [ 178.647619][ T6375] exFAT-fs (loop0): failed to read boot sector [ 178.653824][ T6375] exFAT-fs (loop0): failed to recognize exfat type [ 178.781578][ T4289] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 178.818380][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.839278][ T4289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 178.853460][ T4289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.872793][ T4289] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 178.896618][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.916686][ T4289] usb 4-1: config 0 descriptor?? [ 178.976341][ T4289] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 178.986960][ T4289] hdpvr: probe of 4-1:0.0 failed with error -12 [ 180.031321][ T6410] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 180.940392][ T4227] usb 4-1: USB disconnect, device number 7 [ 181.302323][ T4448] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.562298][ T4448] usb 1-1: Using ep0 maxpacket: 16 [ 181.642084][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 181.682381][ T4448] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.701997][ T4448] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.720118][ T6480] device bridge_slave_1 left promiscuous mode [ 181.742506][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.754698][ T4448] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.779354][ T4448] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 181.819126][ T4448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.839721][ T4448] usb 1-1: config 0 descriptor?? [ 181.864307][ T6480] device bridge_slave_0 left promiscuous mode [ 181.878995][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.960597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.086230][ T6498] device veth1_to_team entered promiscuous mode [ 182.161189][ T6498] device macvlan1 entered promiscuous mode [ 182.174430][ T6498] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 182.201273][ T6498] Cannot create hsr debugfs directory [ 182.251802][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 182.392386][ T4448] usbhid 1-1:0.0: can't add hid device: -71 [ 182.398397][ T4448] usbhid: probe of 1-1:0.0 failed with error -71 [ 182.477163][ T4448] usb 1-1: USB disconnect, device number 12 [ 182.914721][ T6540] netlink: 56 bytes leftover after parsing attributes in process `syz.5.591'. [ 183.557032][ T6560] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.567991][ T6560] exFAT-fs (loop2): unable to read boot sector [ 183.574216][ T6560] exFAT-fs (loop2): failed to read boot sector [ 183.580365][ T6560] exFAT-fs (loop2): failed to recognize exfat type [ 184.692302][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.721222][ T6588] capability: warning: `syz.1.602' uses deprecated v2 capabilities in a way that may be insecure [ 185.082428][ T1107] usb 4-1: config 0 has no interfaces? [ 185.167649][ T1107] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.200545][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.233194][ T1107] usb 4-1: SerialNumber: syz [ 185.239455][ T1107] usb 4-1: config 0 descriptor?? [ 185.415255][ T1107] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 185.459966][ T1107] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.729065][ T6605] ------------[ cut here ]------------ [ 185.744791][ T6605] WARNING: CPU: 0 PID: 6605 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470 [ 185.762490][ T6605] Modules linked in: [ 185.768389][ T6605] CPU: 1 PID: 6605 Comm: syz.2.609 Not tainted syzkaller #0 [ 185.802819][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.898304][ T6605] RIP: 0010:__alloc_pages+0x391/0x470 [ 186.019619][ T6605] Code: 31 ff e9 b2 fe ff ff e8 ed 5f ef 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d d5 8d 4f 7e 41 83 fd 08 [ 186.121282][ T6605] RSP: 0018:ffffc900041efa60 EFLAGS: 00010246 [ 186.128916][ T6605] RAX: ffffc900041efaa0 RBX: 1ffff9200083df50 RCX: 0000000000000000 [ 186.156035][ T6605] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900041efac8 [ 186.164319][ T6605] RBP: ffffc900041efb58 R08: dffffc0000000000 R09: ffffc900041efaa0 [ 186.172992][ T6605] R10: fffff5200083df59 R11: 1ffff9200083df54 R12: dffffc0000000000 [ 186.182263][ T6605] R13: 0000000000000000 R14: 0000000000040cc0 R15: 000000000000000e [ 186.190369][ T6605] FS: 00007f2bc29ad6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 186.201721][ T6605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.224579][ T6605] CR2: 00007f2bc296af98 CR3: 000000004e527000 CR4: 00000000003506e0 [ 186.239039][ T6605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.247334][ T6605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 186.255728][ T6605] Call Trace: [ 186.259218][ T6605] [ 186.262298][ T6605] ? zone_statistics+0x170/0x170 [ 186.267391][ T6605] ? alloc_pages+0x438/0x550 [ 186.272262][ T6605] kmalloc_order+0x40/0x150 [ 186.276908][ T6605] ? __might_fault+0xb3/0x110 [ 186.281714][ T6605] kmalloc_order_trace+0x14/0xf0 [ 186.288346][ T6605] raw_ioctl+0x1636/0x3560 [ 186.292910][ T6605] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 186.298752][ T6605] ? verify_lock_unused+0x140/0x140 [ 186.306331][ T6605] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 186.314879][ T6605] ? make_qualifier+0x3b0/0x3b0 [ 186.319921][ T6605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 186.327582][ T6605] ? security_file_ioctl+0x7c/0xa0 [ 186.332868][ T6605] ? make_qualifier+0x3b0/0x3b0 [ 186.337918][ T6605] __se_sys_ioctl+0xfa/0x170 [ 186.342886][ T6605] do_syscall_64+0x4c/0xa0 [ 186.347435][ T6605] ? clear_bhb_loop+0x30/0x80 [ 186.352994][ T6605] ? clear_bhb_loop+0x30/0x80 [ 186.359584][ T6605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.368093][ T6605] RIP: 0033:0x7f2bc4746749 [ 186.372676][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.392926][ T6605] RSP: 002b:00007f2bc29ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.401599][ T6605] RAX: ffffffffffffffda RBX: 00007f2bc499cfa0 RCX: 00007f2bc4746749 [ 186.409841][ T6605] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000005 [ 186.419717][ T6605] RBP: 00007f2bc47caf91 R08: 0000000000000000 R09: 0000000000000000 [ 186.429991][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.438664][ T6605] R13: 00007f2bc499d038 R14: 00007f2bc499cfa0 R15: 00007ffc455497e8 [ 186.447038][ T6605] [ 186.450255][ T6605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.457532][ T6605] CPU: 1 PID: 6605 Comm: syz.2.609 Not tainted syzkaller #0 [ 186.464836][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.474904][ T6605] Call Trace: [ 186.478192][ T6605] [ 186.481126][ T6605] dump_stack_lvl+0x168/0x230 [ 186.485816][ T6605] ? show_regs_print_info+0x20/0x20 [ 186.491020][ T6605] ? load_image+0x3b0/0x3b0 [ 186.495546][ T6605] panic+0x2c9/0x7f0 [ 186.499450][ T6605] ? bpf_jit_dump+0xd0/0xd0 [ 186.503966][ T6605] ? __alloc_pages+0x391/0x470 [ 186.508741][ T6605] __warn+0x248/0x2b0 [ 186.512731][ T6605] ? __alloc_pages+0x391/0x470 [ 186.517501][ T6605] report_bug+0x1b7/0x2e0 [ 186.521839][ T6605] handle_bug+0x3a/0x70 [ 186.526002][ T6605] exc_invalid_op+0x16/0x40 [ 186.530508][ T6605] asm_exc_invalid_op+0x16/0x20 [ 186.535357][ T6605] RIP: 0010:__alloc_pages+0x391/0x470 [ 186.540822][ T6605] Code: 31 ff e9 b2 fe ff ff e8 ed 5f ef 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d d5 8d 4f 7e 41 83 fd 08 [ 186.560430][ T6605] RSP: 0018:ffffc900041efa60 EFLAGS: 00010246 [ 186.566504][ T6605] RAX: ffffc900041efaa0 RBX: 1ffff9200083df50 RCX: 0000000000000000 [ 186.574665][ T6605] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900041efac8 [ 186.582647][ T6605] RBP: ffffc900041efb58 R08: dffffc0000000000 R09: ffffc900041efaa0 [ 186.590636][ T6605] R10: fffff5200083df59 R11: 1ffff9200083df54 R12: dffffc0000000000 [ 186.598614][ T6605] R13: 0000000000000000 R14: 0000000000040cc0 R15: 000000000000000e [ 186.606603][ T6605] ? zone_statistics+0x170/0x170 [ 186.611559][ T6605] ? alloc_pages+0x438/0x550 [ 186.616165][ T6605] kmalloc_order+0x40/0x150 [ 186.620669][ T6605] ? __might_fault+0xb3/0x110 [ 186.625347][ T6605] kmalloc_order_trace+0x14/0xf0 [ 186.630286][ T6605] raw_ioctl+0x1636/0x3560 [ 186.634711][ T6605] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 186.640355][ T6605] ? verify_lock_unused+0x140/0x140 [ 186.645544][ T6605] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 186.650991][ T6605] ? make_qualifier+0x3b0/0x3b0 [ 186.655869][ T6605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 186.660900][ T6605] ? security_file_ioctl+0x7c/0xa0 [ 186.665991][ T6605] ? make_qualifier+0x3b0/0x3b0 [ 186.670821][ T6605] __se_sys_ioctl+0xfa/0x170 [ 186.675398][ T6605] do_syscall_64+0x4c/0xa0 [ 186.679814][ T6605] ? clear_bhb_loop+0x30/0x80 [ 186.684471][ T6605] ? clear_bhb_loop+0x30/0x80 [ 186.689126][ T6605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.695002][ T6605] RIP: 0033:0x7f2bc4746749 [ 186.699421][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.719010][ T6605] RSP: 002b:00007f2bc29ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.727410][ T6605] RAX: ffffffffffffffda RBX: 00007f2bc499cfa0 RCX: 00007f2bc4746749 [ 186.735370][ T6605] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000005 [ 186.743349][ T6605] RBP: 00007f2bc47caf91 R08: 0000000000000000 R09: 0000000000000000 [ 186.751317][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.759271][ T6605] R13: 00007f2bc499d038 R14: 00007f2bc499cfa0 R15: 00007ffc455497e8 [ 186.767234][ T6605] [ 186.770340][ T6605] Kernel Offset: disabled [ 186.774666][ T6605] Rebooting in 86400 seconds..