last executing test programs: 6.029004513s ago: executing program 1 (id=600): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) unshare(0x22020600) unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}}, 0x0) 5.908382764s ago: executing program 1 (id=603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 5.803845385s ago: executing program 1 (id=604): openat$kvm(0x0, &(0x7f0000000040), 0x11ec41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 4.075788925s ago: executing program 1 (id=625): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030100000921050000012205000905810300"], 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 3.817203397s ago: executing program 3 (id=626): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x2, 0x3c, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x1, [{@rand_addr=0x64010102, 0x9}, {@multicast1, 0x2}, {@private=0xa010100}]}]}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 3.623764427s ago: executing program 3 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.556435078s ago: executing program 3 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 3.27134667s ago: executing program 3 (id=632): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.16219648s ago: executing program 3 (id=635): openat$kvm(0x0, &(0x7f0000000040), 0x11ec41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3.137434471s ago: executing program 0 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8204"]) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000049000000090a010400000000000000000f00000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001408000ffff1400000010000100000000e0ff0000000084"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4080000000000006106650000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r5, 0x0, 0x0, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100200086dd63269fe000143aff20010000000000000000000000000001ff020000000000000000f0000000000587009078ff020000000000000000000000000001"], 0x0) 2.987754592s ago: executing program 2 (id=639): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.946774522s ago: executing program 0 (id=640): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) unshare(0x28000600) fsmount(0xffffffffffffffff, 0x0, 0x8e) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.121547787s ago: executing program 2 (id=642): unshare(0x2c020400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)="718322484854ac0985e6b1060f70c10ce9d029bfe9851026d77001aac39a85a70b8919248b8bf72fd71ba1ca831f3fb1d0eefc3501e3035f3d5f937d67448ff6a38237de7d3b667291cbb768660dda9be2b7b890b90b574c99a71f43cb465722223a", 0x62}, {&(0x7f00000000c0)="950a1e730a2ffc4c7ac54ad868022e9bc81ab82d069fdb918df92f1b6953e9192afc8bc90eb0eaedca63f4c6c0b7611a98d030699da89ad6796ced70a89ad89c8521c0341fb5932bde9d1bb0b41f16923ddbb101d769158a3958121bbbde0fb22a98ae07ff99b9420215d2", 0x6b}, {&(0x7f0000000140)}, {&(0x7f0000001580)="813090d37e4fa8e41e0a7869f69680946dc1115c0387a23e68897941feacc0d5f5fbea7d14316a11d03ff279807279f79ce1a6e358bcd618361e3c2cf34c4fc07fa7d0b849677d736db01b7aab8ef98164a6033f24be70a177f042a387255f4c0c385cb5c8e49741b5c62f2d2d24ae1c6a329259e80820a92208ae23dc792bd39ac104448bac4a0b45a1501fac8a9f517b20b6f8843a3ec5dfbfc39f4b99077c6dd3dfcdea7f94bbe0fa90cc05d847b4b774a40d3ece0e494e02c0694852c118d5", 0xc1}, {&(0x7f0000000280)="b0e378c23ce6842811433135695fc1e4218b039eedc63af0b3421fa05179b3881e68e7ac5e5c966c534c1a2a5af5e9c3899281f0ce1f05d9594df6595f96aabd2b3f6bcd5a6dff2f5fc73c0aa8c8cb275800eae6bdc517a1da26b573f06e", 0x5e}, {&(0x7f0000000300)="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", 0xff0}, {&(0x7f0000000140)="1c77ac95bfbb96", 0x7}, {&(0x7f0000001300)="e797908c1e63d3d3cd71c41cb25563242dd53618470bcf21dff19f17bb0fc9bf2a496ed46623066406000000", 0x2c}, {0x0}], 0x9, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x20008010) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 2.027856507s ago: executing program 1 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 2.011725137s ago: executing program 0 (id=644): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) unshare(0x22020600) unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000df16dc28a7476b727f78e7501fe2b0ddb68dff2807b3b2756b4ae1f9c034d64301f4e8332a5cea0a3fbfbaae3cfbef9d923d3aeca867a91db3a51d62cdea398a2df49af37aeeaad602fa58f59936c2c1e438f1"], 0x4c}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}}, 0x0) 1.979912178s ago: executing program 2 (id=646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x210}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.875360808s ago: executing program 0 (id=648): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) socket(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000300), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.715093449s ago: executing program 4 (id=649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) 1.66344345s ago: executing program 4 (id=650): socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.641718439s ago: executing program 0 (id=651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x390}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.62618041s ago: executing program 2 (id=652): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getrlimit(0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000a80)=[@out_dx={0xaa, 0x28, {0xcdae, 0x6, 0x4}}, @wrmsr={0x1e, 0x20, {0xb8d, 0xfffffffffffffe01}}, @wrmsr={0x1e, 0x20, {0x926, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}, @in_dx={0x82, 0x20, {0x15cb}}, @in_dx={0x82, 0x20, {0x2b56, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @in_dx={0x82, 0x20, {0xce1e, 0x3}}, @code={0xa, 0x51, {"c4618565053e000000b805000000b9adcdbab40f01d941d1e9f0408020050f01f82e66400f3a416f01cc640fc73a3e66440f38820766b81c008ec8c4a2795823"}}, @wrmsr={0x1e, 0x20, {0x96c, 0xf9a3}}, @wr_drn={0x6e, 0x20, {0x7, 0x80000000}}, @out_dx={0xaa, 0x28, {0x40000000000ead1, 0x1, 0x4}}, @out_dx={0xaa, 0x28, {0xe1a0, 0x2, 0x7}}, @cpuid={0x14, 0xfec1, {0x40, 0x800}}, @in_dx={0x82, 0x20, {0x9504}}, @cpuid={0x14, 0x18, {0x302, 0x4}}, @rdmsr={0x32, 0x18, {0x864}}, @wr_drn={0x6e, 0x20, {0x4, 0xf4}}], 0x291}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.59369603s ago: executing program 3 (id=653): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406000504020002000a000900010a24050201039fcc79120924060502010600000924030303030505f50904010000010200000904010101010200000905018e0120009301090725010003480f0904020000010200000904020101010200000905820920000d0204072501260803000c54532ac0ec8f058bad73bbbbbc6042f6d0f6788b99f688eb"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x8079) write$dsp(r0, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r4 = inotify_init() r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r7}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r3}, 0xc) 1.5580348s ago: executing program 4 (id=654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.238465202s ago: executing program 2 (id=655): openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 270.276328ms ago: executing program 2 (id=656): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r6, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 163.376768ms ago: executing program 4 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 162.747378ms ago: executing program 0 (id=658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x1, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x4000001, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xf001, 0x8, 0x2, 0xb676, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x3, 0x9, 0x8, 0x0, 0x4, 0x8}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e, 0x6, 0x0, 0xc, {0x4e20, 0x4e21, [0x5, 0xa216, 0x9, 0xe], [0x3, 0x8, 0xc1e4, 0xfffffff6], r6, [0x3ff, 0x3b5b]}, 0x4b, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "9b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e5c6ed1c11b02afa601"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, r9, 0x0) getdents64(r11, 0x0, 0x20000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) syz_usb_connect(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xd4, 0xc0, 0x39, 0x10, 0x1604, 0x8007, 0x6511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x4, 0x2, 0x2, 0x70, 0xec, [{{0x9, 0x4, 0x20, 0x10, 0x0, 0x1, 0x6c, 0x6c, 0x3}}, {{0x9, 0x4, 0x0, 0x9, 0x0, 0xd5, 0x3c, 0x64, 0x6a}}, {{0x9, 0x4, 0x37, 0x1, 0x0, 0xd, 0x92, 0x7d, 0x2}}, {{0x9, 0x4, 0xc4, 0xf9, 0x0, 0x73, 0x1, 0x1c, 0xf}}]}}]}}, 0x0) 157.966878ms ago: executing program 4 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 99.455499ms ago: executing program 4 (id=660): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @local, @local, {[@hopopts={0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}]}}}}}, 0x0) 0s ago: executing program 1 (id=661): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0xe7, {0x1, 0x1, 0x101c, 0x9, 0x0, 0x0, 0x5, 0x3}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 56.931762][ T4171] cgroup: Unknown subsys name 'net' [ 57.041407][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.327945][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.812160][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 59.871312][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 59.927919][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.970367][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.001679][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.045546][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.055301][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.064269][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.099181][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.106894][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.115987][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.126640][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.135055][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.143582][ T4197] device bridge_slave_0 entered promiscuous mode [ 60.181465][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.189102][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.198037][ T4197] device bridge_slave_1 entered promiscuous mode [ 60.225038][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.254357][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.263573][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.271719][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.280887][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.309314][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.327735][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.334941][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.343384][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.368327][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.400920][ T4182] team0: Port device team_slave_0 added [ 60.408665][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.416153][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.425190][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.442052][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.449504][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.459626][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.476558][ T4182] team0: Port device team_slave_1 added [ 60.484356][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.494448][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.502020][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.509850][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.519642][ T4197] team0: Port device team_slave_0 added [ 60.526313][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.533487][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.541122][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.558727][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.576152][ T4197] team0: Port device team_slave_1 added [ 60.626265][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.634061][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.663791][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.685003][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.705423][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.716127][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.724888][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.760845][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.774963][ T4188] team0: Port device team_slave_0 added [ 60.787238][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.800880][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.808330][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.835193][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.848659][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.859327][ T4188] team0: Port device team_slave_1 added [ 60.882654][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.889877][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.916921][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.971206][ T4181] team0: Port device team_slave_0 added [ 60.977973][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.985165][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.012976][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.045291][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.052509][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.061901][ T4181] team0: Port device team_slave_1 added [ 61.069667][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.078024][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.111181][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.127371][ T4185] team0: Port device team_slave_0 added [ 61.163070][ T4185] team0: Port device team_slave_1 added [ 61.174424][ T4197] device hsr_slave_0 entered promiscuous mode [ 61.182502][ T4197] device hsr_slave_1 entered promiscuous mode [ 61.189603][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.197624][ T4197] Cannot create hsr debugfs directory [ 61.230437][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.238422][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.266888][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.278836][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.287240][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.318133][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.351048][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.358222][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.385110][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.397108][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.404549][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.432900][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.432931][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.462957][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.469778][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.476626][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.484282][ T4188] Cannot create hsr debugfs directory [ 61.501832][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 61.509292][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.512386][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 61.522566][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 61.583067][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.590599][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.598169][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.606257][ T4185] Cannot create hsr debugfs directory [ 61.674444][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.682450][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.689573][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.698444][ T4181] Cannot create hsr debugfs directory [ 61.929687][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.941173][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.952586][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.965677][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.016742][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.033686][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.049506][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.064246][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.119188][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.147236][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.157610][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.168443][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.202340][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.216807][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.231843][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.263575][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.271225][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.330642][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.341187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.351649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.385017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.395081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.408693][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.416082][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.432617][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.449789][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.459371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.470531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.479729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.489389][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.499607][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.512291][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.523850][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.546532][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.556185][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.566122][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.573610][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.584114][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.595525][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.607565][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.616610][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.631266][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.653667][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.665418][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.675178][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.705554][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.716432][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.726942][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.736098][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.747141][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.757482][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.770769][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.779359][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.788035][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.805242][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.815357][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.824971][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.845547][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.872706][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.882653][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.901149][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.913904][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.941213][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.950922][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.964949][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.972330][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.981202][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.992170][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.003731][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.014241][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.030287][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.039495][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.049303][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.058858][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.070941][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.081330][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.094398][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.106347][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.115517][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.127379][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.138069][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.169882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.184849][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.199465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.215187][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.230543][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.258519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.268553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.279123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.293909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.304720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.316396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.326710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.336485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.348137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.371348][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.405963][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.428956][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.443196][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.460336][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.474470][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.497562][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.509697][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 63.518386][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.531522][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.544215][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.554573][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.562678][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.570982][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.586853][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 63.604049][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 63.611109][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.624256][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 63.631256][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.643658][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.652067][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 63.660103][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.671806][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.680213][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.692069][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.704326][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.713289][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.736603][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.761365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.773411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.792582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.807872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.816682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.827584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.837715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.847965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.857504][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.866216][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.876002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.887965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.900750][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.920169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.930559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.941002][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.948607][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.967802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.979248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.009166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.021032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.030028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.043337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.053061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.066773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.084353][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.096927][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.113951][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.129584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.145254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.156391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.167119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.179538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.190097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.201987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.215295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.227267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.239155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.250977][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.260848][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.297358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.309123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.323084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.340022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.357247][ T4182] device veth0_vlan entered promiscuous mode [ 64.367961][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.386676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.396270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.408230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.417557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.448912][ T4182] device veth1_vlan entered promiscuous mode [ 64.456765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.473510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.485860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.511256][ T4188] device veth0_vlan entered promiscuous mode [ 64.533744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.551238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.561505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.570117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.579617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.594541][ T4181] device veth0_vlan entered promiscuous mode [ 64.609614][ T4188] device veth1_vlan entered promiscuous mode [ 64.622778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.631105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.640836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.649609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.658695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.667887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.677085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.697162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.705745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.713914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.723809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.737198][ T4181] device veth1_vlan entered promiscuous mode [ 64.746323][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.756006][ T4182] device veth0_macvtap entered promiscuous mode [ 64.772557][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.795666][ T4188] device veth0_macvtap entered promiscuous mode [ 64.828086][ T4182] device veth1_macvtap entered promiscuous mode [ 64.837022][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.847021][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.856523][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.866749][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.877774][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.886349][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.895982][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.907779][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.940307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.952512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.971105][ T4181] device veth0_macvtap entered promiscuous mode [ 64.985891][ T4188] device veth1_macvtap entered promiscuous mode [ 65.001511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.011498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.024308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.044883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.054621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.065209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.073356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.084865][ T4181] device veth1_macvtap entered promiscuous mode [ 65.095425][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.107901][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.123025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.131265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.143395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.153328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.163863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.182867][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.194467][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.208524][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.220588][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230282][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.240944][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.252706][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.267609][ T4197] device veth0_vlan entered promiscuous mode [ 65.280985][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.290558][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.302100][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.315865][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.328864][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.346700][ T4197] device veth1_vlan entered promiscuous mode [ 65.355874][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.365366][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.375639][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.389300][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.399116][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.410793][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.425050][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437692][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.451369][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.462933][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.474269][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.487824][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.520059][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.529092][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.539016][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.549189][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.559700][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.576279][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.582106][ T4186] Bluetooth: hci0: command 0x040f tx timeout [ 65.588769][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605745][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.617667][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.629853][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.640799][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.650461][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.660910][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.662014][ T4186] Bluetooth: hci1: command 0x040f tx timeout [ 65.671836][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685027][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 65.698022][ T4186] Bluetooth: hci2: command 0x040f tx timeout [ 65.705905][ T4186] Bluetooth: hci3: command 0x040f tx timeout [ 65.718971][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.736982][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.800229][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.812767][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.822783][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.832555][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.848946][ T4197] device veth0_macvtap entered promiscuous mode [ 65.864277][ T4185] device veth0_vlan entered promiscuous mode [ 65.876149][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.884262][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.893971][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.908540][ T4197] device veth1_macvtap entered promiscuous mode [ 65.975640][ T4185] device veth1_vlan entered promiscuous mode [ 66.021982][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.033823][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.044095][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.057246][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.068839][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.080154][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.094894][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.109591][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.122135][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.132195][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.145690][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.156741][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.168192][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.180070][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.192306][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.200964][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.210607][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.226528][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.236317][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.245803][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.255651][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.259564][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.272646][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.272678][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292551][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302603][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.312088][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.335376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.377944][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.388774][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.436478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.460235][ T4185] device veth0_macvtap entered promiscuous mode [ 66.486843][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.498918][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.501314][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.512753][ T4185] device veth1_macvtap entered promiscuous mode [ 66.526609][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.540778][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.540869][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.559418][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.573956][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.583722][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.593243][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.610764][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.627786][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.646320][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.658948][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.672985][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.687578][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.700012][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.714790][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.734374][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.755309][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.764529][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.784647][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.804504][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.816010][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.827333][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.838857][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.849787][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.860122][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.873161][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.885524][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.896719][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.906968][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.931448][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.946909][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.958489][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.972623][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.992749][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.010964][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.021126][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.059057][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.119640][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.154788][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.182369][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.191869][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.206501][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.238025][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.409021][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.441912][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.503924][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.530031][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.584170][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.616787][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.677028][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 67.747519][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.775487][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 67.796430][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 67.816250][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.963681][ T4337] device syz_tun entered promiscuous mode [ 68.019821][ T4337] device syz_tun left promiscuous mode [ 68.110207][ T4343] binder: 4342:4343 ioctl 4018620d 0 returned -22 [ 68.274873][ T4224] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.368902][ T4224] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.531303][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 68.599659][ T4356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.746066][ T4356] syz.3.15 (4356) used greatest stack depth: 21152 bytes left [ 68.833260][ T4359] fido_id[4359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.028960][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.076379][ T26] audit: type=1326 audit(1761788020.719:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4365 comm="syz.1.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9991d9fc9 code=0x0 [ 69.119946][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.292869][ T4369] syz.4.18 (4369) used greatest stack depth: 21056 bytes left [ 69.311802][ T4372] device batadv_slave_1 entered promiscuous mode [ 69.597018][ T4380] sock: sock_timestamping_bind_phc: sock not bind to device [ 70.180571][ T4290] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.227282][ T4290] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.425861][ T4347] device batadv_slave_1 left promiscuous mode [ 71.595891][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.603567][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.647654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.742804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.444954][ T4448] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 72.575463][ T4449] Zero length message leads to an empty skb [ 73.136281][ T4456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36'. [ 73.171722][ T4224] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.402244][ T4458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.541924][ T4224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.570375][ T4224] usb 3-1: config 0 has no interfaces? [ 73.584310][ T4224] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 73.595858][ T4290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.639842][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.661930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.704120][ T4224] usb 3-1: config 0 descriptor?? [ 73.851713][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 74.062018][ T4224] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.071712][ T4290] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 74.087865][ T4290] usb 2-1: config 0 has no interface number 0 [ 74.154454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 74.477046][ T4224] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.490103][ T4290] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 74.520549][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.531151][ T4289] usb 3-1: USB disconnect, device number 2 [ 74.534585][ T4224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.561691][ T4290] usb 2-1: Product: syz [ 74.567309][ T4290] usb 2-1: Manufacturer: syz [ 74.578860][ T4224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.611050][ T4290] usb 2-1: SerialNumber: syz [ 74.627847][ T4224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.650452][ T4290] usb 2-1: config 0 descriptor?? [ 74.793213][ T4224] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.825512][ T4224] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.862691][ T4224] usb 5-1: Manufacturer: syz [ 74.916341][ T4224] usb 5-1: config 0 descriptor?? [ 75.054581][ T4489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.441136][ T4224] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 75.458391][ T4224] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 75.522444][ T4224] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 76.071867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.831782][ T4242] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 77.023307][ T4290] cp210x 2-1:0.79: cp210x converter detected [ 77.061799][ T4290] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 77.101770][ T4290] cp210x 2-1:0.79: querying part number failed [ 77.177560][ T4290] usb 2-1: cp210x converter now attached to ttyUSB0 [ 77.259903][ T4290] usb 2-1: USB disconnect, device number 2 [ 77.355942][ T4290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.416212][ T4290] cp210x 2-1:0.79: device disconnected [ 77.751628][ T4224] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.796172][ T7] usb 5-1: USB disconnect, device number 2 [ 77.861882][ T4290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.938430][ T4541] input: syz1 as /devices/virtual/input/input5 [ 78.121905][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 78.132718][ T4224] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 78.160651][ T4224] usb 4-1: config 0 has no interface number 0 [ 78.243101][ T4290] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 78.268872][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.327311][ T4290] usb 2-1: config 0 descriptor?? [ 78.342900][ T4224] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 78.361470][ T4224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.384986][ T4224] usb 4-1: Product: syz [ 78.398605][ T4224] usb 4-1: Manufacturer: syz [ 78.417826][ T4224] usb 4-1: SerialNumber: syz [ 78.457757][ T4224] usb 4-1: config 0 descriptor?? [ 78.542503][ T4224] hub 4-1:0.217: bad descriptor, ignoring hub [ 78.551868][ T4224] hub: probe of 4-1:0.217 failed with error -5 [ 78.611771][ T4290] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 78.660368][ T4290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.712163][ T4290] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 78.732529][ T4290] usb 2-1: media controller created [ 78.751881][ T4224] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 78.816537][ T4290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.850229][ T4224] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 78.911755][ T4224] dib0700: firmware download failed at 7 with -22 [ 78.952712][ T4290] az6027: usb out operation failed. (-71) [ 78.992777][ T4224] usb 4-1: USB disconnect, device number 2 [ 79.001974][ T4290] az6027: usb out operation failed. (-71) [ 79.008183][ T4290] stb0899_attach: Driver disabled by Kconfig [ 79.082657][ T4290] az6027: no front-end attached [ 79.082657][ T4290] [ 79.130762][ T4290] az6027: usb out operation failed. (-71) [ 79.152060][ T4290] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 79.206224][ T4290] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 79.309717][ T4290] dvb-usb: schedule remote query interval to 400 msecs. [ 79.372999][ T4290] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 79.466286][ T4290] usb 2-1: USB disconnect, device number 3 [ 79.635169][ T4290] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 80.165130][ T4577] input: syz1 as /devices/virtual/input/input7 [ 80.307391][ T26] audit: type=1326 audit(1761788031.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.368917][ T26] audit: type=1326 audit(1761788031.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.414079][ T26] audit: type=1326 audit(1761788031.979:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.516736][ T26] audit: type=1326 audit(1761788031.979:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.642970][ T4253] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 80.732796][ T26] audit: type=1326 audit(1761788031.979:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.777996][ T4289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.830185][ T26] audit: type=1326 audit(1761788031.979:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 80.864150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 81.011770][ T26] audit: type=1326 audit(1761788031.979:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 81.051789][ T4289] usb 3-1: Using ep0 maxpacket: 8 [ 81.061883][ T4253] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.120280][ T26] audit: type=1326 audit(1761788031.979:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 81.141928][ T4253] usb 2-1: not running at top speed; connect to a high speed hub [ 81.212176][ T4289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.275296][ T4253] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 81.289174][ T26] audit: type=1326 audit(1761788031.979:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 81.311824][ T4289] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 81.351873][ T4253] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 81.363254][ T4289] usb 3-1: config 4 has no interface number 0 [ 81.370765][ T4289] usb 3-1: config 4 interface 30 has no altsetting 0 [ 81.371636][ T26] audit: type=1326 audit(1761788031.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa3adcfc9 code=0x7ffc0000 [ 81.447050][ T4253] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.531453][ T4253] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 81.701788][ T4289] usb 3-1: string descriptor 0 read error: -22 [ 81.709536][ T4289] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 81.755171][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.794616][ T4253] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.826372][ T1324] cfg80211: failed to load regulatory.db [ 81.852927][ T4289] dw2102: su3000_identify_state [ 81.864110][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.895543][ T4612] netlink: 76 bytes leftover after parsing attributes in process `syz.4.89'. [ 81.927945][ T4289] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 81.941681][ T4253] usb 2-1: Product: syz [ 81.968243][ T4253] usb 2-1: Manufacturer: syz [ 81.975801][ T4289] dw2102: su3000_power_ctrl: 1, initialized 0 [ 81.986185][ T4253] usb 2-1: SerialNumber: syz [ 82.001500][ T4289] dvb-usb: bulk message failed: -22 (2/0) [ 82.089760][ T4289] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.146668][ T4289] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 82.169917][ T4289] usb 3-1: media controller created [ 82.188536][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.209753][ T4289] dw2102: i2c transfer failed. [ 82.232783][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.253074][ T4289] dw2102: i2c transfer failed. [ 82.275141][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.297817][ T4289] dw2102: i2c transfer failed. [ 82.317368][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.350001][ T4595] fuse: Bad value for 'fd' [ 82.369264][ T4289] dw2102: i2c transfer failed. [ 82.396655][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.424120][ T4289] dw2102: i2c transfer failed. [ 82.440129][ T4289] dvb-usb: bulk message failed: -22 (6/0) [ 82.485320][ T4289] dw2102: i2c transfer failed. [ 82.505239][ T4289] dvb-usb: MAC address: 02:02:02:02:02:02 [ 82.523555][ T4619] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET) [ 82.571430][ T4289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.660318][ T4289] dvb-usb: bulk message failed: -22 (3/0) [ 82.674135][ T4289] dw2102: command 0x0e transfer failed. [ 82.681465][ T4289] dvb-usb: bulk message failed: -22 (3/0) [ 82.693697][ T4289] dw2102: command 0x0e transfer failed. [ 82.757177][ T4621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.96'. [ 82.913052][ T4253] usb 2-1: 0:2 : does not exist [ 83.011766][ T4289] dvb-usb: bulk message failed: -22 (3/0) [ 83.046370][ T4289] dw2102: command 0x0e transfer failed. [ 83.070171][ T4289] dvb-usb: bulk message failed: -22 (3/0) [ 83.097221][ T4253] usb 2-1: USB disconnect, device number 4 [ 83.111823][ T4289] dw2102: command 0x0e transfer failed. [ 83.155247][ T4629] binder: 4628:4629 ioctl c0306201 0 returned -14 [ 83.170448][ T4289] dvb-usb: bulk message failed: -22 (1/0) [ 83.180301][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.204453][ T4289] dw2102: command 0x51 transfer failed. [ 83.207817][ T4629] binder: 4628:4629 ioctl 4090ae82 0 returned -22 [ 83.226339][ T4289] dvb-usb: bulk message failed: -22 (5/0) [ 83.238110][ T4289] dw2102: i2c probe for address 0x68 failed. [ 83.277458][ T4289] dvb-usb: bulk message failed: -22 (5/0) [ 83.291408][ T4289] dw2102: i2c probe for address 0x69 failed. [ 83.310217][ T4289] dvb-usb: bulk message failed: -22 (5/0) [ 83.318046][ T4289] dw2102: i2c probe for address 0x6a failed. [ 83.334029][ T4289] dw2102: probing for demodulator failed. Is the external power switched on? [ 83.390990][ T4289] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 83.536898][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 83.621893][ T4642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 83.631737][ T4289] rc_core: IR keymap rc-tt-1500 not found [ 83.631786][ T4289] Registered IR keymap rc-empty [ 83.633139][ T4289] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 83.843609][ T4289] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 83.968706][ T4289] dvb-usb: schedule remote query interval to 250 msecs. [ 84.000303][ T4289] dw2102: su3000_power_ctrl: 0, initialized 1 [ 84.014560][ T4651] mmap: syz.2.105 (4651) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 84.041229][ T4289] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 84.080253][ T4289] usb 3-1: USB disconnect, device number 3 [ 84.238304][ T4289] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 84.310035][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 86.266409][ T4670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 86.611741][ T4225] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 86.621889][ T4677] netlink: 68 bytes leftover after parsing attributes in process `syz.4.111'. [ 86.667932][ T4615] ODEBUG: Out of memory. ODEBUG disabled [ 86.708195][ T4680] process 'syz.0.115' launched '/dev/fd/3' with NULL argv: empty string added [ 86.893702][ T4687] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 86.896363][ T4686] IPVS: stopping master sync thread 4687 ... [ 87.050646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 87.051934][ T4225] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.060122][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 87.086664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 87.098081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 87.137628][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 87.236534][ T4225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.301664][ T4225] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 87.355726][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.427443][ T4225] usb 2-1: config 0 descriptor?? [ 87.466175][ T4695] netlink: 'syz.0.119': attribute type 5 has an invalid length. [ 87.518968][ T4695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 87.895210][ T4668] kvm [4667]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 87.912214][ T4668] kvm [4667]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 87.937809][ T4615] Set syz1 is full, maxelem 65536 reached [ 87.979167][ T4668] APIC base relocation is unsupported by KVM [ 88.091737][ T4225] usbhid 2-1:0.0: can't add hid device: -71 [ 88.128624][ T4225] usbhid: probe of 2-1:0.0 failed with error -71 [ 88.151650][ T4289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.173699][ T4225] usb 2-1: USB disconnect, device number 5 [ 88.651992][ T4289] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 89.131497][ T4289] usb 1-1: config 0 has no interface number 0 [ 89.257088][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 89.291817][ T4289] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 89.347740][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.541198][ T4289] usb 1-1: Product: syz [ 89.555987][ T4744] [U]  [ 89.559262][ T4744] [U] K{ [ 89.578051][ T4289] usb 1-1: Manufacturer: syz [ 89.588461][ T4744] [U] t 1ŠFfˊ`GJgo/mC [ 89.602768][ T4289] usb 1-1: SerialNumber: syz [ 89.620682][ T4744] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 89.637979][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.668317][ T4289] usb 1-1: config 0 descriptor?? [ 89.731474][ T4744] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 89.753640][ T4289] hub 1-1:0.217: bad descriptor, ignoring hub [ 89.776960][ T4289] hub: probe of 1-1:0.217 failed with error -5 [ 89.787250][ T4744] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 89.829773][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.901778][ T4744] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 89.927290][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.941945][ T4744] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 89.961896][ T4744] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 89.979484][ T4744] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 90.104336][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.114412][ T4744] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 90.125615][ T4744] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 90.141416][ T4744] [U] 22Ʃx?0;3u [ 90.148543][ T4744] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 90.177211][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.184807][ T4744] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 90.198037][ T4744] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 90.207590][ T4744] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 90.214465][ T4744] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 90.228319][ T4744] [U] ec [ 90.231615][ T4744] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 90.258390][ T4740] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 90.301799][ T4289] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 90.365035][ T4289] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.453479][ T4289] dib0700: firmware download failed at 7 with -22 [ 90.516658][ T4289] usb 1-1: USB disconnect, device number 2 [ 90.542066][ T4225] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 90.566642][ T4225] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.609698][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.624941][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.645293][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.743183][ T4225] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 91.700506][ T4566] udevd[4566]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.719588][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 91.719601][ T26] audit: type=1326 audit(1761788043.359:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 91.808032][ T26] audit: type=1326 audit(1761788043.399:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 91.882404][ T26] audit: type=1326 audit(1761788043.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 91.905653][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.951997][ T26] audit: type=1326 audit(1761788043.399:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 91.974780][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.982921][ T26] audit: type=1326 audit(1761788043.399:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.006020][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.026260][ T26] audit: type=1326 audit(1761788043.399:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.107893][ T26] audit: type=1326 audit(1761788043.399:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.212404][ T26] audit: type=1326 audit(1761788043.399:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.259014][ T26] audit: type=1326 audit(1761788043.399:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.342414][ T26] audit: type=1326 audit(1761788043.399:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 92.624761][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.673465][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.941374][ T4289] usb 3-1: USB disconnect, device number 4 [ 92.979803][ T4731] delete_channel: no stack [ 93.186066][ T4813] xt_hashlimit: size too large, truncated to 1048576 [ 93.217225][ T4816] ALSA: seq fatal error: cannot create timer (-22) [ 93.433133][ T4823] netlink: 'syz.0.167': attribute type 11 has an invalid length. [ 93.531752][ T4289] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 93.811631][ T4225] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.837913][ T4839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.173'. [ 93.931730][ T4289] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.940141][ T4289] usb 3-1: config 0 has no interface number 0 [ 93.983153][ T4253] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.072133][ T4225] usb 2-1: Using ep0 maxpacket: 8 [ 94.154382][ T4289] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 94.175190][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.193615][ T4225] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 94.207209][ T4289] usb 3-1: Product: syz [ 94.224200][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.250429][ T4289] usb 3-1: Manufacturer: syz [ 94.269597][ T4289] usb 3-1: SerialNumber: syz [ 94.306915][ T4289] usb 3-1: config 0 descriptor?? [ 94.325176][ T4225] pvrusb2: Hardware description: Terratec Grabster AV400 [ 94.349039][ T4225] pvrusb2: ********** [ 94.354117][ T4289] hub 3-1:0.132: bad descriptor, ignoring hub [ 94.361777][ T4253] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 94.379285][ T4289] hub: probe of 3-1:0.132 failed with error -5 [ 94.395001][ T4289] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input9 [ 94.404659][ T4225] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 94.415438][ T4253] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.436259][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.451530][ T4225] pvrusb2: Important functionality might not be entirely working. [ 94.521429][ T4225] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 94.550798][ T4225] pvrusb2: ********** [ 94.596104][ T4253] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 94.626102][ T2421] pvrusb2: Invalid write control endpoint [ 94.678752][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.766792][ T2421] pvrusb2: Invalid write control endpoint [ 94.779366][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 94.848305][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 94.869868][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 94.884149][ T1106] usb 2-1: USB disconnect, device number 6 [ 94.912561][ T4289] usb 1-1: USB disconnect, device number 3 [ 94.913435][ T2421] pvrusb2: Device being rendered inoperable [ 94.926940][ T4836] delete_channel: no stack [ 94.947267][ T4829] pvrusb2: Attempted to execute control transfer when device not ok [ 94.968760][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 94.989880][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 95.061701][ T2421] pvrusb2: Attached sub-driver cx25840 [ 95.083123][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 95.112139][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.291809][ T4225] usb 3-1: USB disconnect, device number 5 [ 96.972671][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 97.963506][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 98.030265][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 98.131706][ T4289] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.391774][ T4289] usb 3-1: Using ep0 maxpacket: 32 [ 98.511797][ T4289] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 98.533451][ T4289] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 98.568839][ T4289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 98.598512][ T4289] usb 3-1: config 1 has no interface number 0 [ 98.624189][ T4289] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.677286][ T4289] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.709489][ T4289] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 98.767929][ T4289] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 98.778370][ T4912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.831723][ T4289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.869846][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 98.890423][ T4940] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 98.912620][ T4289] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 99.194398][ T4289] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 99.214807][ T4289] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 99.227452][ T4289] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 99.732750][ T1106] usb 3-1: USB disconnect, device number 6 [ 100.301844][ T4253] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.471889][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 100.571915][ T4253] usb 5-1: Using ep0 maxpacket: 8 [ 100.712022][ T4253] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.720583][ T4253] usb 5-1: config 179 has no interface number 0 [ 100.755998][ T4253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.800510][ T4253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.857632][ T4253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.894178][ T4253] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.936228][ T4253] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.957604][ T4253] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.977655][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.071955][ T4977] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.330827][ T4948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.375901][ T4253] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 101.525685][ T4948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.701117][ T5015] usb 5-1: USB disconnect, device number 3 [ 101.711604][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.720986][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.736790][ T5015] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 102.470649][ T4948] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.480687][ T4948] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.496208][ T4948] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.506741][ T4948] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.632437][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 102.632650][ T4948] syz.3.212 (4948) used greatest stack depth: 19520 bytes left [ 102.669958][ T4950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.701604][ T4950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.725371][ T4950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.739336][ T4950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.750791][ T4950] device geneve2 entered promiscuous mode [ 102.882514][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 102.931774][ T4253] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.179146][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 103.211625][ T4253] usb 3-1: Using ep0 maxpacket: 16 [ 103.347686][ T4253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.363977][ T4253] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.393591][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.409054][ T4253] usb 3-1: config 0 descriptor?? [ 103.448071][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 103.767576][ T5116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 103.905039][ T4253] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 104.326413][ T4232] usb 3-1: USB disconnect, device number 7 [ 104.335657][ T5139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.381341][ T5139] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.695601][ T5169] netlink: 136 bytes leftover after parsing attributes in process `syz.0.270'. [ 105.881832][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.101718][ T5033] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.161995][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 106.291839][ T4232] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 106.317608][ T4232] usb 3-1: config 0 has no interface number 0 [ 106.337951][ T4232] usb 3-1: config 0 interface 29 has no altsetting 0 [ 106.361722][ T5033] usb 1-1: Using ep0 maxpacket: 32 [ 106.542064][ T5033] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.561736][ T4232] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 106.592905][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.604689][ T5033] usb 1-1: config 0 has no interface number 0 [ 106.631636][ T5033] usb 1-1: config 0 interface 184 has no altsetting 0 [ 106.640264][ T4232] usb 3-1: Product: syz [ 106.660588][ T4232] usb 3-1: Manufacturer: syz [ 106.668616][ T4232] usb 3-1: SerialNumber: syz [ 106.712015][ T4232] usb 3-1: config 0 descriptor?? [ 106.833806][ T5033] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.858800][ T5033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.894587][ T5033] usb 1-1: Product: syz [ 106.933772][ T5033] usb 1-1: Manufacturer: syz [ 106.939539][ T5033] usb 1-1: SerialNumber: syz [ 106.950440][ T5033] usb 1-1: config 0 descriptor?? [ 106.981837][ T4232] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 106.992808][ T5033] smsc75xx v1.0.0 [ 107.131695][ T4224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.191872][ T4232] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 107.216901][ T4232] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 107.234954][ T4232] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 107.321189][ T5203] syz.3.282 (5203): drop_caches: 2 [ 107.354335][ T4232] peak_usb: probe of 3-1:0.29 failed with error -22 [ 107.401751][ T4224] usb 2-1: Using ep0 maxpacket: 16 [ 107.551726][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.570142][ T4224] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.581228][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.608854][ T4224] usb 2-1: config 0 descriptor?? [ 107.651828][ T5033] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.700057][ T5033] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.084610][ T4224] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 108.287285][ T4232] usb 2-1: USB disconnect, device number 7 [ 108.596406][ T4232] usb 3-1: USB disconnect, device number 8 [ 108.721772][ T5032] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.821715][ T5033] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 108.851185][ T5033] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 108.882445][ T5033] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.922678][ T5033] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 108.963412][ T5033] usb 1-1: USB disconnect, device number 4 [ 108.981899][ T5032] usb 4-1: Using ep0 maxpacket: 16 [ 109.591870][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 110.371660][ T4253] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.621860][ T4253] usb 3-1: Using ep0 maxpacket: 8 [ 110.741839][ T4253] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.759410][ T4253] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.784157][ T4253] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.830992][ T4253] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.862055][ T4253] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.872763][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 110.881289][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.972294][ T5282] device batadv0 entered promiscuous mode [ 110.994578][ T5282] device macvtap1 entered promiscuous mode [ 111.037697][ T5282] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.078523][ T5286] device batadv0 left promiscuous mode [ 111.351760][ T4253] usb 3-1: GET_CAPABILITIES returned 0 [ 111.360193][ T4253] usbtmc 3-1:16.0: can't read capabilities [ 111.623134][ T5015] usb 3-1: USB disconnect, device number 9 [ 112.061707][ T5032] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.119975][ T5311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.320'. [ 112.191864][ T5032] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 112.331151][ T5032] usb 4-1: can't read configurations, error -71 [ 113.941817][ T5345] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 114.741654][ T5031] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.965469][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.989999][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.127760][ T5031] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.171655][ T5031] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.221685][ T5031] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.282298][ T5031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.342952][ T5352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.560185][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 115.561225][ T5386] netlink: 52 bytes leftover after parsing attributes in process `syz.0.347'. [ 115.657213][ T5384] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.667945][ T5384] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.683330][ T5384] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.699402][ T5384] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.769202][ T5384] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.779207][ T5384] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.789734][ T5384] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.800988][ T5384] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.022817][ T5352] fuse: Unknown parameter 'rootmod' [ 116.030433][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 116.218255][ T5384] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.228915][ T5384] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.240185][ T5384] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.252589][ T5384] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.273427][ T5384] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.282935][ T5384] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.293428][ T5384] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.303938][ T5384] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.357217][ T5352] device bond_slave_0 entered promiscuous mode [ 116.364696][ T5352] device bond_slave_1 entered promiscuous mode [ 116.471928][ T5352] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.568668][ T5352] device bond_slave_0 left promiscuous mode [ 116.575677][ T5352] device bond_slave_1 left promiscuous mode [ 118.488032][ T5032] usb 2-1: USB disconnect, device number 8 [ 119.011681][ T4224] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.151704][ T5032] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.311609][ T4224] usb 4-1: Using ep0 maxpacket: 8 [ 119.411657][ T5032] usb 2-1: Using ep0 maxpacket: 32 [ 119.456943][ T4224] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 119.470578][ T4224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.523858][ T4224] usb 4-1: config 0 descriptor?? [ 119.531764][ T5032] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.571653][ T5032] usb 2-1: config 0 has no interface number 0 [ 119.751932][ T5032] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 119.772660][ T5032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.787642][ T5032] usb 2-1: Product: syz [ 119.797850][ T5032] usb 2-1: Manufacturer: syz [ 119.807346][ T5032] usb 2-1: SerialNumber: syz [ 119.828237][ T5032] usb 2-1: config 0 descriptor?? [ 119.883950][ T5032] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 119.918726][ T5032] usb 2-1: selecting invalid altsetting 1 [ 119.924883][ T5032] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 119.952464][ T5032] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.974377][ T5032] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 120.000878][ T5032] usb 2-1: media controller created [ 120.022188][ T5032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.101855][ T5036] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.501884][ T5036] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 120.531093][ T5036] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.585540][ T5036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.688860][ T5036] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 120.752701][ T4487] udevd[4487]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.881734][ T4224] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.906531][ T4224] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 120.957573][ T5469] netlink: 1 bytes leftover after parsing attributes in process `syz.2.371'. [ 120.976616][ T4224] asix: probe of 4-1:0.0 failed with error -71 [ 121.000267][ T4224] usb 4-1: USB disconnect, device number 5 [ 121.050097][ T5459] delete_channel: no stack [ 121.055681][ T4253] usb 5-1: USB disconnect, device number 4 [ 121.191700][ T5032] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 121.203103][ T5032] zl10353_read_register: readreg error (reg=127, ret==-110) [ 121.252675][ T5439] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 121.374214][ T5032] usb 2-1: USB disconnect, device number 9 [ 121.930875][ T5491] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 122.066931][ T5496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 122.908791][ T5525] futex_wake_op: syz.3.390 tries to shift op by 32; fix this program [ 123.408514][ T5542] netlink: 'syz.4.400': attribute type 12 has an invalid length. [ 123.460398][ T5542] netlink: 'syz.4.400': attribute type 29 has an invalid length. [ 123.511831][ T5542] netlink: 148 bytes leftover after parsing attributes in process `syz.4.400'. [ 123.535765][ T5542] netlink: 59 bytes leftover after parsing attributes in process `syz.4.400'. [ 125.464692][ T5568] kvm [5567]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 125.491977][ T5568] kvm [5567]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 125.524137][ T5568] kvm [5567]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 125.554971][ T5568] kvm [5567]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800 [ 125.641813][ T4224] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.871824][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 126.011838][ T4224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.028319][ T4224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.068979][ T4224] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.130274][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.157285][ T4224] usb 5-1: config 0 descriptor?? [ 126.224464][ T4224] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 126.625618][ T5609] vivid-008: disconnect [ 127.349384][ T5606] vivid-008: reconnect [ 128.115546][ T5657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.254338][ T5032] usb 5-1: USB disconnect, device number 5 [ 128.709143][ T5678] bond0: (slave bond_slave_1): Releasing backup interface [ 128.898357][ T5680] bridge0: port 3(macsec0) entered blocking state [ 128.919930][ T5680] bridge0: port 3(macsec0) entered disabled state [ 128.931687][ T5032] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.005774][ T5680] device macsec0 entered promiscuous mode [ 129.318026][ T5032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.361909][ T5032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.386603][ T5032] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.400888][ T5032] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.426843][ T5032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.448677][ T5032] usb 4-1: config 0 descriptor?? [ 129.461646][ T5015] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.701733][ T5015] usb 1-1: Using ep0 maxpacket: 16 [ 129.895857][ T5015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.964841][ T5032] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 130.008373][ T5032] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.025937][ T5015] usb 1-1: config 128 has an invalid interface number: 202 but max is 1 [ 130.040079][ T5015] usb 1-1: config 128 has an invalid interface number: 204 but max is 1 [ 130.083096][ T5015] usb 1-1: config 128 has no interface number 0 [ 130.096298][ T5015] usb 1-1: config 128 has no interface number 1 [ 130.114091][ T5015] usb 1-1: config 128 interface 202 altsetting 97 has an invalid endpoint with address 0x0, skipping [ 130.145828][ T5015] usb 1-1: config 128 interface 202 altsetting 97 has a duplicate endpoint with address 0x2, skipping [ 130.180168][ T5015] usb 1-1: config 128 interface 202 has no altsetting 0 [ 130.190747][ T5015] usb 1-1: config 128 interface 204 has no altsetting 0 [ 130.337454][ T4224] usb 4-1: USB disconnect, device number 6 [ 130.365230][ T5676] usb 4-1: string descriptor 0 read error: -19 [ 130.421794][ T5015] usb 1-1: New USB device found, idVendor=19d2, idProduct=0083, bcdDevice=a7.ec [ 130.461652][ T5015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.481781][ T5015] usb 1-1: Product: syz [ 130.486731][ T5015] usb 1-1: Manufacturer: syz [ 130.492110][ T5015] usb 1-1: SerialNumber: syz [ 130.862927][ T5015] option 1-1:128.202: GSM modem (1-port) converter detected [ 130.950256][ T5015] usb 1-1: USB disconnect, device number 5 [ 130.970195][ T5015] option 1-1:128.202: device disconnected [ 131.379488][ T5753] device bridge1 entered promiscuous mode [ 132.702004][ T4224] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.784205][ T5791] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 132.851811][ T5791] device bond1 entered promiscuous mode [ 132.875019][ T5791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.971602][ T4224] usb 4-1: Using ep0 maxpacket: 32 [ 133.023255][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032183][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091925][ T4224] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 133.110083][ T4224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.136845][ T4224] usb 4-1: config 0 descriptor?? [ 133.152870][ T5797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.182685][ T5797] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 133.211847][ T5797] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 133.235424][ T5797] bond1: (slave gre1): making interface the new active one [ 133.250010][ T5797] device gre1 entered promiscuous mode [ 133.269189][ T5797] bond1: (slave gre1): Enslaving as an active interface with an up link [ 133.349183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 133.426495][ T4224] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 133.443634][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.475726][ T4224] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 133.504955][ T4224] usb 4-1: media controller created [ 133.565067][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.631785][ T5032] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 133.684960][ T4224] DVB: Unable to find symbol dib7000p_attach() [ 133.702779][ T4224] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 133.801647][ T4253] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.851701][ T4224] rc_core: IR keymap rc-dib0700-rc5 not found [ 133.870720][ T4224] Registered IR keymap rc-empty [ 133.896765][ T4224] dvb-usb: could not initialize remote control. [ 133.912856][ T4224] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 133.936091][ T4224] usb 4-1: USB disconnect, device number 7 [ 134.001938][ T5032] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 134.050619][ T4224] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 134.051222][ T5032] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 134.093724][ T5032] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.172109][ T4253] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.188162][ T4253] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.217190][ T4253] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.226562][ T4253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.259838][ T4253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.292015][ T5032] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 134.307809][ T5032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.320258][ T5032] usb 3-1: Product: syz [ 134.337443][ T5032] usb 3-1: Manufacturer: syz [ 134.345436][ T5032] usb 3-1: SerialNumber: syz [ 134.359578][ T5032] usb 3-1: config 0 descriptor?? [ 134.401918][ T4253] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.430391][ T4253] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.449066][ T4253] usb 1-1: Product: syz [ 134.454590][ T4253] usb 1-1: Manufacturer: syz [ 134.502721][ T4253] cdc_wdm 1-1:1.0: skipping garbage [ 134.512270][ T4253] cdc_wdm 1-1:1.0: skipping garbage [ 134.531920][ T4253] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.541867][ T4253] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.616821][ T5803] udc-core: couldn't find an available UDC or it's busy [ 134.630741][ T5803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 134.683083][ T4253] usb 3-1: USB disconnect, device number 10 [ 135.111658][ T5033] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.171591][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 135.258331][ T5858] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 135.270450][ T5858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.320245][ T4253] usb 1-1: USB disconnect, device number 6 [ 135.471883][ T5033] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 135.491730][ T5033] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.528383][ T5033] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.553964][ T5033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.576928][ T5033] usb 5-1: config 0 descriptor?? [ 135.611649][ T5038] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.625886][ T5033] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 136.034680][ T5038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.069432][ T5038] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 136.080842][ T5038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.111212][ T5038] usb 3-1: config 0 descriptor?? [ 136.603351][ T5038] elecom 0003:056E:00FF.0007: item fetching failed at offset 0/3 [ 136.619715][ T5038] elecom: probe of 0003:056E:00FF.0007 failed with error -22 [ 136.856334][ T5038] usb 3-1: USB disconnect, device number 11 [ 137.301683][ T5033] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.703676][ T5033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.725128][ T5033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.752755][ T5033] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.793835][ T5033] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.815077][ T5033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.844001][ T5033] usb 1-1: config 0 descriptor?? [ 137.896768][ T4253] usb 5-1: USB disconnect, device number 6 [ 138.333447][ T5033] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 138.424641][ T5033] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.724267][ T4232] usb 1-1: USB disconnect, device number 7 [ 138.742210][ T5893] usb 1-1: string descriptor 0 read error: -71 [ 139.971382][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.980754][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.163695][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 142.163716][ T26] audit: type=1326 audit(1761788093.809:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.319910][ T26] audit: type=1326 audit(1761788093.809:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.472535][ T26] audit: type=1326 audit(1761788093.849:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.565514][ T26] audit: type=1326 audit(1761788093.849:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.672605][ T26] audit: type=1326 audit(1761788093.849:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.781509][ T26] audit: type=1326 audit(1761788093.849:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.868527][ T26] audit: type=1326 audit(1761788093.849:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 142.956674][ T26] audit: type=1326 audit(1761788093.849:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 143.037579][ T26] audit: type=1326 audit(1761788093.859:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 143.094468][ T26] audit: type=1326 audit(1761788093.859:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500dda2fc9 code=0x7ffc0000 [ 143.464846][ T6057] netlink: 1 bytes leftover after parsing attributes in process `syz.4.582'. [ 144.431694][ T5038] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.523247][ T6093] netlink: 1 bytes leftover after parsing attributes in process `syz.3.595'. [ 144.731714][ T5038] usb 3-1: Using ep0 maxpacket: 32 [ 144.861915][ T5038] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 144.878978][ T5038] usb 3-1: config 0 has no interface number 0 [ 144.909823][ T5038] usb 3-1: config 0 interface 29 has no altsetting 0 [ 145.081713][ T5038] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 145.097249][ T5038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.125320][ T5038] usb 3-1: Product: syz [ 145.135382][ T5038] usb 3-1: Manufacturer: syz [ 145.145059][ T5038] usb 3-1: SerialNumber: syz [ 145.164657][ T5038] usb 3-1: config 0 descriptor?? [ 145.432009][ T5038] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 145.661788][ T5038] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 145.676601][ T5038] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 145.687239][ T6130] netlink: 1 bytes leftover after parsing attributes in process `syz.0.609'. [ 145.706121][ T5038] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 145.802743][ T5038] peak_usb: probe of 3-1:0.29 failed with error -22 [ 145.876088][ T4253] usb 3-1: USB disconnect, device number 12 [ 146.590147][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.2.623'. [ 147.131610][ T4224] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.391612][ T4224] usb 2-1: Using ep0 maxpacket: 16 [ 147.521871][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.542270][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.555904][ T4224] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.566054][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.583914][ T4224] usb 2-1: config 0 descriptor?? [ 147.788524][ T6200] netlink: 1 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.084104][ T4224] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.098434][ T4224] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.111618][ T4224] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.126141][ T4224] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.140060][ T4224] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 148.156034][ T4224] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 148.285781][ T4224] usb 2-1: USB disconnect, device number 10 [ 149.696538][ T5032] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 150.212118][ T5032] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.292450][ T5032] usb 4-1: not running at top speed; connect to a high speed hub [ 150.462473][ T5032] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.611793][ T5032] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 150.622532][ T5032] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.631814][ T5032] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 150.811936][ T5032] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.821015][ T5032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.845411][ T5032] usb 4-1: Product: syz [ 150.849612][ T5032] usb 4-1: Manufacturer: syz [ 150.868571][ T5032] usb 4-1: SerialNumber: syz [ 150.901715][ T4196] ================================================================== [ 150.910183][ T4196] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 150.918032][ T4196] Read of size 1 at addr ffff88807ce66405 by task kworker/u5:7/4196 [ 150.926370][ T4196] [ 150.928714][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 150.936269][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.946333][ T4196] Workqueue: hci3 hci_rx_work [ 150.951044][ T4196] Call Trace: [ 150.954323][ T4196] [ 150.957237][ T4196] dump_stack_lvl+0x168/0x230 [ 150.961911][ T4196] ? show_regs_print_info+0x20/0x20 [ 150.967116][ T4196] ? load_image+0x3b0/0x3b0 [ 150.971608][ T4196] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 150.977334][ T4196] print_address_description+0x60/0x2d0 [ 150.982869][ T4196] ? hci_le_meta_evt+0x12db/0x3b80 [ 150.987970][ T4196] kasan_report+0xdf/0x130 [ 150.992376][ T4196] ? hci_le_meta_evt+0x12db/0x3b80 [ 150.997524][ T4196] hci_le_meta_evt+0x12db/0x3b80 [ 151.002447][ T4196] ? hci_event_packet+0x2a0/0x12f0 [ 151.007549][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 151.013597][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 151.019220][ T4196] ? mark_lock+0x94/0x320 [ 151.023566][ T4196] ? mutex_unlock+0x10/0x10 [ 151.028076][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.031628][ T5038] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.034049][ T4196] ? lock_chain_count+0x20/0x20 [ 151.046447][ T4196] ? __rwlock_init+0x140/0x140 [ 151.051198][ T4196] hci_event_packet+0xe05/0x12f0 [ 151.056125][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.061322][ T4196] ? rcu_lock_release+0x20/0x20 [ 151.066196][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 151.071388][ T4196] hci_rx_work+0x255/0xa10 [ 151.075797][ T4196] process_one_work+0x863/0x1000 [ 151.080856][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 151.086507][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 151.091792][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 151.096814][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 151.102199][ T4196] ? wq_worker_running+0x97/0x170 [ 151.107231][ T4196] worker_thread+0xaa8/0x12a0 [ 151.111929][ T4196] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 151.117837][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.123060][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.128275][ T4196] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.134197][ T4196] kthread+0x436/0x520 [ 151.138275][ T4196] ? rcu_lock_release+0x20/0x20 [ 151.143121][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 151.147719][ T4196] ret_from_fork+0x1f/0x30 [ 151.152159][ T4196] [ 151.155183][ T4196] [ 151.157516][ T4196] Allocated by task 6276: [ 151.161854][ T4196] __kasan_kmalloc+0xb5/0xf0 [ 151.166475][ T4196] __alloc_skb+0x22c/0x750 [ 151.170902][ T4196] vhci_write+0xbc/0x450 [ 151.175154][ T4196] vfs_write+0x712/0xd00 [ 151.179475][ T4196] ksys_write+0x14d/0x250 [ 151.183815][ T4196] do_syscall_64+0x4c/0xa0 [ 151.188233][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.194142][ T4196] [ 151.196454][ T4196] The buggy address belongs to the object at ffff88807ce66000 [ 151.196454][ T4196] which belongs to the cache kmalloc-1k of size 1024 [ 151.210507][ T4196] The buggy address is located 5 bytes to the right of [ 151.210507][ T4196] 1024-byte region [ffff88807ce66000, ffff88807ce66400) [ 151.224288][ T4196] The buggy address belongs to the page: [ 151.229909][ T4196] page:ffffea0001f39800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ce60 [ 151.240044][ T4196] head:ffffea0001f39800 order:3 compound_mapcount:0 compound_pincount:0 [ 151.248352][ T4196] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 151.256321][ T4196] raw: 00fff00000010200 ffffea00008c1000 0000000300000003 ffff888016841dc0 [ 151.264885][ T4196] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 151.273450][ T4196] page dumped because: kasan: bad access detected [ 151.279850][ T4196] page_owner tracks the page as allocated [ 151.285715][ T4196] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4073, ts 46783719629, free_ts 46768005412 [ 151.304789][ T4196] get_page_from_freelist+0x1b77/0x1c60 [ 151.310327][ T4196] __alloc_pages+0x1e1/0x470 [ 151.314902][ T4196] new_slab+0xc0/0x4b0 [ 151.318951][ T4196] ___slab_alloc+0x81e/0xdf0 [ 151.323556][ T4196] __kmalloc+0x1cd/0x330 [ 151.327781][ T4196] load_elf_phdrs+0x132/0x230 [ 151.332442][ T4196] load_elf_binary+0x954/0x2890 [ 151.337292][ T4196] bprm_execve+0xa92/0x17d0 [ 151.341782][ T4196] do_execveat_common+0x51e/0x6d0 [ 151.346784][ T4196] __x64_sys_execve+0x8e/0xa0 [ 151.351438][ T4196] do_syscall_64+0x4c/0xa0 [ 151.351955][ T5038] usb 3-1: Using ep0 maxpacket: 16 [ 151.355839][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.366831][ T4196] page last free stack trace: [ 151.371496][ T4196] free_unref_page_prepare+0x637/0x6c0 [ 151.376948][ T4196] free_unref_page+0x94/0x280 [ 151.381612][ T4196] __unfreeze_partials+0x1a5/0x200 [ 151.386707][ T4196] put_cpu_partial+0x12d/0x190 [ 151.391450][ T4196] qlist_free_all+0x35/0x90 [ 151.395947][ T4196] kasan_quarantine_reduce+0x150/0x160 [ 151.401389][ T4196] __kasan_slab_alloc+0x2f/0xd0 [ 151.406220][ T4196] slab_post_alloc_hook+0x4c/0x380 [ 151.411314][ T4196] kmem_cache_alloc+0x100/0x290 [ 151.416141][ T4196] getname_flags+0xb5/0x500 [ 151.420624][ T4196] do_sys_openat2+0xcf/0x4a0 [ 151.425198][ T4196] __x64_sys_openat+0x135/0x160 [ 151.430031][ T4196] do_syscall_64+0x4c/0xa0 [ 151.434430][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.440325][ T4196] [ 151.442645][ T4196] Memory state around the buggy address: [ 151.448285][ T4196] ffff88807ce66300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 151.456352][ T4196] ffff88807ce66380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 151.464421][ T4196] >ffff88807ce66400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.472483][ T4196] ^ [ 151.476548][ T4196] ffff88807ce66480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.484610][ T4196] ffff88807ce66500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.492648][ T4196] ================================================================== [ 151.500687][ T4196] Disabling lock debugging due to kernel taint [ 151.501781][ T5038] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 151.510610][ T4196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.521757][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 151.530754][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.540820][ T4196] Workqueue: hci3 hci_rx_work [ 151.545502][ T4196] Call Trace: [ 151.548764][ T4196] [ 151.551675][ T4196] dump_stack_lvl+0x168/0x230 [ 151.556334][ T4196] ? show_regs_print_info+0x20/0x20 [ 151.561518][ T4196] ? load_image+0x3b0/0x3b0 [ 151.566017][ T4196] panic+0x2c9/0x7f0 [ 151.569892][ T4196] ? bpf_jit_dump+0xd0/0xd0 [ 151.574377][ T4196] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 151.580253][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 151.585105][ T4196] ? hci_le_meta_evt+0x12db/0x3b80 [ 151.590215][ T4196] check_panic_on_warn+0x80/0xa0 [ 151.595139][ T4196] ? hci_le_meta_evt+0x12db/0x3b80 [ 151.600243][ T4196] end_report+0x6d/0xf0 [ 151.604387][ T4196] kasan_report+0x102/0x130 [ 151.608971][ T4196] ? hci_le_meta_evt+0x12db/0x3b80 [ 151.614070][ T4196] hci_le_meta_evt+0x12db/0x3b80 [ 151.618994][ T4196] ? hci_event_packet+0x2a0/0x12f0 [ 151.624089][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 151.630136][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 151.635750][ T4196] ? mark_lock+0x94/0x320 [ 151.640064][ T4196] ? mutex_unlock+0x10/0x10 [ 151.644547][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.650518][ T4196] ? lock_chain_count+0x20/0x20 [ 151.655353][ T4196] ? __rwlock_init+0x140/0x140 [ 151.660099][ T4196] hci_event_packet+0xe05/0x12f0 [ 151.665028][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.670338][ T4196] ? rcu_lock_release+0x20/0x20 [ 151.675175][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 151.680354][ T4196] hci_rx_work+0x255/0xa10 [ 151.684774][ T4196] process_one_work+0x863/0x1000 [ 151.689701][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 151.695411][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 151.700681][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 151.705709][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 151.711061][ T4196] ? wq_worker_running+0x97/0x170 [ 151.716066][ T4196] worker_thread+0xaa8/0x12a0 [ 151.720724][ T4196] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 151.726602][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.731796][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 151.736984][ T4196] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.742877][ T4196] kthread+0x436/0x520 [ 151.746928][ T4196] ? rcu_lock_release+0x20/0x20 [ 151.751785][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 151.756357][ T4196] ret_from_fork+0x1f/0x30 [ 151.760758][ T4196] [ 151.763866][ T4196] Kernel Offset: disabled [ 151.768188][ T4196] Rebooting in 86400 seconds..