last executing test programs: 1m14.243732787s ago: executing program 1 (id=325): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002500)=ANY=[@ANYBLOB="020505080a00000000000000fdffffff030006e5ffffffff01004e20ac1414aa000000000000000002000100000004d40040040c01000080030005000020008002"], 0x50}, 0x1, 0x7}, 0x20000040) 1m12.953165291s ago: executing program 1 (id=328): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000b80)={0x1, &(0x7f00000006c0)=[{}]}) 1m12.788113625s ago: executing program 1 (id=330): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m9.728056367s ago: executing program 1 (id=340): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1m8.818906851s ago: executing program 1 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) sendmsg$nl_route_sched(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 1m6.653444838s ago: executing program 1 (id=350): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b58b00000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000108"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) 14.460655744s ago: executing program 2 (id=498): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189acce7fa1111744e2b07828140640640e933358a56784c3f377b6cbaf4f72aa0d8e993eec8", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.395168765s ago: executing program 2 (id=500): write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001840)=@generic={&(0x7f0000001680)='./file0\x00'}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 12.116126826s ago: executing program 0 (id=509): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x0, 0x9, 0x1020, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xa}, 0x50) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11.299572188s ago: executing program 0 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.249074796s ago: executing program 0 (id=515): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000880)) 10.188270347s ago: executing program 3 (id=517): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r7, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) listen(0xffffffffffffffff, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r9, 0x4) write$6lowpan_enable(r0, &(0x7f0000000f40)='0', 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x1, 0x0, 0x1, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @loopback, {[@noop, @timestamp={0x44, 0xc, 0x2f, 0x0, 0x3, [0x7ff, 0x3]}, @timestamp={0x44, 0x24, 0x59, 0x0, 0x5, [0x2, 0x8, 0xae, 0x8e8d, 0x6c, 0x8, 0xffff, 0x1000]}]}}}}}) 8.737870106s ago: executing program 3 (id=519): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fffbffffffffffff000000000080400000"], 0xfc}}, 0x20000000) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x3, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000020a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8d69) pwritev2(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0xc34, 0xff, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) clock_settime(0x0, 0x0) 8.708574636s ago: executing program 0 (id=520): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x6, @raw_data="fe118e3eb2153c75a38df82fdddb48d44b40f31011ffaa89a41154dc8a67e6f26f676a463ec2bff394da4af3b21d29a45b6537d7abbb1c30e970088bb79be4846f03e3eff249ff5f21853999f15c984892417f2bf8f9901f99da5af3ac50d49dfc58186324f6bbe84b7b612abe39727b538c8019a136a34bcc16c07321ad3953add0c4004cb30293b970bcc4f61b81f206aaec9e3677aa70ad8abcfffe850d7ee9a4ecd5b9c4e518dd6aa7411735d22b2c63fdb218f766c569c8604691a0ebdfefdedd35b205afa0"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019300)=ANY=[@ANYBLOB="7000f8dbdf2500070000b076cbe93361ec114bf7f1ad2f0c526f6717291f77b716b8b066b6085391cb5d91200dd58876", @ANYRES32=0x0, @ANYRESDEC=r2], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket(0x2, 0x400000000002, 0x0) setsockopt(r7, 0x0, 0x20, &(0x7f0000000040)="07008d8a69d9e09c1c9be80e", 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000041) 8.647898088s ago: executing program 5 (id=521): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x0, 0x9, 0x1020, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xa}, 0x50) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.647659698s ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2100c0, 0x1b1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="010000007f8114cf8d45961200000000000000000000000000000000d87c21ea49530800000000000000f5a42c48743730ab74b75ff6e4e2693fdac96c74e28dd905c7a79d1371579cae6e29b3ea260970ed1fdbd6ddfaad41fdbd987fe84bd70f4180af839fa375", @ANYRES32=0x0, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1a, 0xd99, 0x8, 0xfffffe01, 0x4408f, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) 7.82938616s ago: executing program 3 (id=523): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.848202496s ago: executing program 2 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) unshare(0x60000000) 6.777064538s ago: executing program 3 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/139}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.776286948s ago: executing program 5 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0xff, r6}}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 5.683354787s ago: executing program 5 (id=529): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r7, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) listen(0xffffffffffffffff, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r9, 0x4) write$6lowpan_enable(r0, &(0x7f0000000f40)='0', 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x1, 0x0, 0x1, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @loopback, {[@noop, @timestamp={0x44, 0xc, 0x2f, 0x0, 0x3, [0x7ff, 0x3]}, @timestamp={0x44, 0x24, 0x59, 0x0, 0x5, [0x2, 0x8, 0xae, 0x8e8d, 0x6c, 0x8, 0xffff, 0x1000]}]}}}}}) 5.665299417s ago: executing program 0 (id=530): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x89dd, 0x80, 0xfefffffc, 0xfffffffd}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x1000)=nil, 0x2000, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.672065244s ago: executing program 4 (id=531): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784b", 0x4a}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04a", 0x3c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 4.216545817s ago: executing program 5 (id=532): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x1b, 0x1, @thr={&(0x7f0000000640), &(0x7f0000000780)}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a40)="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", 0x13d) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000840)="57eb38a8024257430600000000000000b1ee195e50040074e61a5339c4920b402f4fa494bdb42d5b0d6efcb69ad727cde0b0df010000003b7ac4c012502c6e32c947015767b6ee86a7be8551db0200000000005d4966be3b53cf21132da038f50d23ac50ccd349fb440c43eba42d388a80b15403d5c0e0efefb9b7fb2101319bb759dff89a1e42964c99b4ad292d012baee883bb32eb9872642ac5b34de53eb86b6f8fb1f345445cbfe6086a3881a6f30da45e93b1e43b75be8430100be66b1a5a15fb448bbbfce8a27b179d41fa9ec7bc2cd14b6f345547828f9f1b8e84fedfdad03c77d4a8e7f58f5948e5f4341571d5035679f5d9aa4b8e1cf1820cd8641f07866c39d881041216f65e059d7b12155a9bfeb99ff4fa174bcd10aa66fcb0287006141c8b3d730de19b06019b08f3a6df64638df668afdf2ec84a307c58b2eb848d52f8bbb82c811b4a21af7d82b19506f625dcfc9679d07a8e57aceb03d6a0b674b6cd384f0439190658a112ada93679e9fff9a237a09dcc1ad73d5bca9ba79dc351222157ac599cdd4e92b883565e1c797bcd092ac72ca7a3c776f9d51b84615ce901a71d66e6e984a9fe8dea83dc63df2083c2099b079b75fa206bf41a714127c7f120d5253c4fe3dda9a1ceaef0aa400cfda564649c687b418d31a9308952e733be81224d3d799e33e3495e0a", 0x1ef) socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x3, @local}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'wlan0\x00', 0x1}, 0x18) 3.804205328s ago: executing program 4 (id=533): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fffbffffffffffff000000000080400000"], 0xfc}}, 0x20000000) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x3, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000020a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8d69) pwritev2(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0xc34, 0xff, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) clock_settime(0x0, 0x0) 3.792091528s ago: executing program 3 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) io_submit(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd3588a68d39da5d3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x23}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e1f, @loopback}, {0x20000010304, @local}, 0x6, {0x2, 0x4e21, @rand_addr=0x64010101}}) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x4}, 0x16, 0x2) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.761421159s ago: executing program 5 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2100c0, 0x1b1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="010000007f8114cf8d45961200000000000000000000000000000000d87c21ea49530800000000000000f5a42c48743730ab74b75ff6e4e2693fdac96c74e28dd905c7a79d1371579cae6e29b3ea260970ed1fdbd6ddfaad41fdbd987fe84bd70f4180af839fa375", @ANYRES32=0x0, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1a, 0xd99, 0x8, 0xfffffe01, 0x4408f, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) 1.87999078s ago: executing program 4 (id=536): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.338894624s ago: executing program 5 (id=537): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r1 = syz_open_dev$media(&(0x7f0000000780), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000f40)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000090601020000000000000000000000080500010007002edb599200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x2010, r1, 0xd1c7e000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102) close(r5) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x4, "155371e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.13535522s ago: executing program 4 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) sendmsg$nl_route_sched(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) 1.11864845s ago: executing program 0 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102000000080c20181040000102030109027e0003018160030904000000010100000a2401090028000201020924030205030106080924060604010100090c240204010206fa0800050c090401000001020000090401010101020000099505010910000703020725010cff040009040200000102000009040201010102000009058209000403f5050725010c03a400"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x101000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x22c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setresuid(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) 785.369809ms ago: executing program 4 (id=540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,errors=continue,discard=0x00000\x00\x00000000004,errors=continue,quota,discard,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) 545.277396ms ago: executing program 3 (id=541): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6(0xa, 0x805, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000540)={'nat\x00', 0x0, 0x4, 0xf9, [0x401, 0x7, 0x9, 0x8, 0x60f, 0x100000000], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000380)=""/249}, &(0x7f00000005c0)=0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xec, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffdd2, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4b1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000018490000fdffffff000000000000000018010000786c6c2500000000002020207b1a050000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000800)='syzkaller\x00'}, 0x94) 0s ago: executing program 4 (id=542): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) listen(0xffffffffffffffff, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) write$6lowpan_enable(r0, &(0x7f0000000f40)='0', 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x1, 0x0, 0x1, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @loopback, {[@noop, @timestamp={0x44, 0xc, 0x2f, 0x0, 0x3, [0x7ff, 0x3]}, @timestamp={0x44, 0x24, 0x59, 0x0, 0x5, [0x2, 0x8, 0xae, 0x8e8d, 0x6c, 0x8, 0xffff, 0x1000]}]}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 46.990728][ T4171] cgroup: Unknown subsys name 'net' [ 47.116973][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.315345][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.516871][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 49.617929][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 49.628324][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 49.688715][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 49.713159][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.720307][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.729021][ T4183] device bridge_slave_0 entered promiscuous mode [ 49.763653][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.770727][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.779143][ T4183] device bridge_slave_1 entered promiscuous mode [ 49.786843][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.831225][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.847931][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.867727][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.874909][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.882992][ T4185] device bridge_slave_0 entered promiscuous mode [ 49.895643][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.902961][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.910591][ T4185] device bridge_slave_1 entered promiscuous mode [ 49.918048][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.925145][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.933251][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.968392][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.976078][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.984207][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.993410][ T4183] team0: Port device team_slave_0 added [ 49.999361][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.006550][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.014580][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.025259][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.032586][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.040216][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.055113][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.070753][ T4183] team0: Port device team_slave_1 added [ 50.093487][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.129502][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.136951][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.144714][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.153567][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.170707][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.187977][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.197712][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.205175][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.231117][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.242863][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.249915][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.258337][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.267110][ T4185] team0: Port device team_slave_0 added [ 50.275301][ T4185] team0: Port device team_slave_1 added [ 50.287932][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.297392][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.304439][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.330834][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.371652][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.378648][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.404748][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.416935][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.424024][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.449986][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.473246][ T4184] team0: Port device team_slave_0 added [ 50.499060][ T4183] device hsr_slave_0 entered promiscuous mode [ 50.506135][ T4183] device hsr_slave_1 entered promiscuous mode [ 50.519532][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.530069][ T4184] team0: Port device team_slave_1 added [ 50.543851][ T4189] team0: Port device team_slave_0 added [ 50.558486][ T4185] device hsr_slave_0 entered promiscuous mode [ 50.566120][ T4185] device hsr_slave_1 entered promiscuous mode [ 50.573450][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.581151][ T4185] Cannot create hsr debugfs directory [ 50.588594][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.612162][ T4189] team0: Port device team_slave_1 added [ 50.630892][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.638482][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.664608][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.715813][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.722981][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.749072][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.763452][ T4191] team0: Port device team_slave_0 added [ 50.773715][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.780664][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.806706][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.821216][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.828267][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.854471][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.875613][ T4191] team0: Port device team_slave_1 added [ 50.919186][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.926418][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.933250][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.940875][ T4189] Cannot create hsr debugfs directory [ 50.986877][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.993938][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.000426][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.008123][ T4184] Cannot create hsr debugfs directory [ 51.014283][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.021235][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.047317][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.082894][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.089865][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.115992][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.248010][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.254855][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.261311][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.269185][ T4191] Cannot create hsr debugfs directory [ 51.272905][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 51.296493][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.309817][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.340905][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.352185][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 51.362014][ T24] Bluetooth: hci0: command 0x0409 tx timeout [ 51.365308][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 51.375571][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 51.390552][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.461162][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.473051][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.488957][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.504366][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.536040][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.545093][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.567477][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.590911][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.630777][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.640669][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.649645][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.659754][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.695483][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.747923][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.768273][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.780876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.790381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.801289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.808973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.819396][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.834242][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.848119][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.856817][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.866701][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.875620][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.882939][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.891354][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.914539][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.924326][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.936423][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.943560][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.953943][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.963476][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.970518][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.978667][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.987585][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.996603][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.003779][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.011504][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.021570][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.030563][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.038973][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.046029][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.053785][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.062774][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.071676][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.088186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.097890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.107235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.117379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.131060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.141126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.157933][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.168887][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.187562][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.210711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.218730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.228029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.237933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.246744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.255547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.263901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.273622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.281286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.289338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.297932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.306460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.315187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.324692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.336978][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.349561][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.369107][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.378073][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.402156][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.433964][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.442795][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.449858][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.463975][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.478433][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.488190][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.495305][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.506043][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.515614][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.543414][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.562832][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.581244][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.602706][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.611505][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.621055][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.630584][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.650341][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.663840][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.682728][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.703465][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.711726][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.725383][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.733121][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.752707][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.763795][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.778092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.787540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.796740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.811410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.829552][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.847157][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.886998][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.897035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.906486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.915332][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.922442][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.931557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.942493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.951285][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.958372][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.967186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.975816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.985294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.994133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.003584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.011190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.019223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.029909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.048964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.057992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.067226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.076309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.091471][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.107845][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.137767][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.149908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.158983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.169391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.177940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.186787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.196435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.205277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.215216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.223812][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.230872][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.238681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.247207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.255833][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.262918][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.270395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.280283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.291272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.300336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.309128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.317586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.325889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.349950][ T4189] device veth0_vlan entered promiscuous mode [ 53.362411][ T24] Bluetooth: hci1: command 0x041b tx timeout [ 53.400942][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.411577][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.422780][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.431082][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.440902][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.448471][ T24] Bluetooth: hci4: command 0x041b tx timeout [ 53.454327][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.467876][ T4189] device veth1_vlan entered promiscuous mode [ 53.472874][ T24] Bluetooth: hci3: command 0x041b tx timeout [ 53.482250][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.492270][ T24] Bluetooth: hci0: command 0x041b tx timeout [ 53.497123][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.502374][ T24] Bluetooth: hci2: command 0x041b tx timeout [ 53.508539][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.536402][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.551435][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.575765][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.584262][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.593957][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.603113][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.611507][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.619914][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.628638][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.637561][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.663085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.677413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.710888][ T4183] device veth0_vlan entered promiscuous mode [ 53.719656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.728172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.737090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.745392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.767430][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.780832][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.796602][ T4189] device veth0_macvtap entered promiscuous mode [ 53.808817][ T4183] device veth1_vlan entered promiscuous mode [ 53.823799][ T4185] device veth0_vlan entered promiscuous mode [ 53.830369][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.840278][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.850874][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.860945][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.872503][ T4189] device veth1_macvtap entered promiscuous mode [ 53.881076][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.898166][ T4185] device veth1_vlan entered promiscuous mode [ 53.905384][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.914557][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.922839][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.940305][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.961703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.969865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.979155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.990712][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.007808][ T4185] device veth0_macvtap entered promiscuous mode [ 54.018365][ T4185] device veth1_macvtap entered promiscuous mode [ 54.027067][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.037005][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.046677][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.056153][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.066104][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.076754][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.099653][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.114810][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.123993][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.133538][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142663][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.168367][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.175928][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.183670][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.192620][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.201650][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.210357][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.224693][ T4183] device veth0_macvtap entered promiscuous mode [ 54.233144][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.244722][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.255855][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.266473][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.277255][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.289022][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.323440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.331608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.343424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.353599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.363250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.375291][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.385515][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.394838][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.403651][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.417209][ T4183] device veth1_macvtap entered promiscuous mode [ 54.449185][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.457215][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.469058][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.478123][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.487198][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.495872][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.504038][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.513754][ T4184] device veth0_vlan entered promiscuous mode [ 54.530349][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.541638][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.551785][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.564088][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.576190][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.601490][ T4184] device veth1_vlan entered promiscuous mode [ 54.612047][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.620350][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.630192][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.642667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.650916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.663904][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.675572][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.687441][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.698115][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.709481][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.722165][ T608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.730123][ T608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.744064][ T4191] device veth0_vlan entered promiscuous mode [ 54.750614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.763765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.771368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.779098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.787776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.804315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.825193][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.834052][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.843053][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851742][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.895164][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.905716][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.921760][ T4191] device veth1_vlan entered promiscuous mode [ 54.933488][ T4184] device veth0_macvtap entered promiscuous mode [ 54.950666][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.961861][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.970345][ T4184] device veth1_macvtap entered promiscuous mode [ 54.992938][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.001199][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.005158][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.010860][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.026100][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.034785][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.051816][ T4191] device veth0_macvtap entered promiscuous mode [ 55.075091][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.088000][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.102815][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.137772][ T4191] device veth1_macvtap entered promiscuous mode [ 55.197683][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.209985][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.216281][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.244838][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.254324][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.265109][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.276267][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.286956][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.303946][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.316020][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.327243][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.337753][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.348582][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.360693][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.371256][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.384316][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.402510][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.403875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.410379][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.426332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.434672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.442744][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 55.450127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.459098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.468369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.481093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.494567][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.505830][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.516637][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.528048][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 55.532421][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.534370][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 55.548511][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.550139][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 55.561581][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.576344][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.589583][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.600486][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 55.613854][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.621206][ T4267] tipc: Started in network mode [ 55.630984][ T4267] tipc: Node identity 6a9a68a69d42, cluster identity 4711 [ 55.640187][ T4267] tipc: Enabled bearer , priority 0 [ 55.658744][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.667772][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.678705][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.688226][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.703456][ T4265] device syzkaller0 entered promiscuous mode [ 55.720519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.729124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.739987][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.750849][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.761278][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.773382][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.783707][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.795028][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.804920][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.815482][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.827203][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.860810][ T4267] tipc: Resetting bearer [ 55.889812][ T4264] tipc: Resetting bearer [ 55.905791][ T4264] tipc: Disabling bearer [ 56.011063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.062684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.370639][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.418338][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.745780][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809259][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.897090][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.903729][ T4281] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.906078][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.933800][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.196655][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.241913][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.261301][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.301960][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.312869][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.335841][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.349343][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.367250][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.383946][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.413196][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.421505][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.460412][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.482909][ T4288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.524296][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 57.641162][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 57.708620][ T4301] Zero length message leads to an empty skb [ 57.881716][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 57.966165][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 58.012574][ T4288] usb 5-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 58.078230][ T4288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14952, setting to 1024 [ 58.218908][ T4288] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.308318][ T4288] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 58.362056][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 58.452353][ T4288] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 58.477467][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.559032][ T4288] usb 5-1: SerialNumber: syz [ 58.628196][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.671902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.710916][ T4310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.728740][ T4310] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 59.484878][ T4288] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 59.518591][ T4288] usbtest: probe of 5-1:1.0 failed with error -22 [ 59.616363][ T4288] usb 5-1: USB disconnect, device number 2 [ 60.252720][ T4322] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13'. [ 60.967329][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 60.976608][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 61.582764][ T4352] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 61.809222][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 63.881881][ C0] sched: RT throttling activated [ 66.721482][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 69.101958][ T4288] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.807983][ T4288] usb 5-1: Using ep0 maxpacket: 8 [ 70.062557][ T4288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.146092][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 70.903040][ T4288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.000634][ T4288] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.182290][ T4288] usb 5-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 71.200259][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.206393][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214770][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.219050][ T4288] usb 5-1: Product: syz [ 71.275602][ T4288] usb 5-1: Manufacturer: syz [ 71.280248][ T4288] usb 5-1: SerialNumber: syz [ 72.062310][ T4288] usb 5-1: unit 5 not found! [ 72.089411][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.122827][ T4288] usb 5-1: USB disconnect, device number 3 [ 72.506875][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.702969][ T13] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 72.912178][ T13] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 73.099336][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.61'. [ 73.711892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.721908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.731894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.741892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.751891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 74.032142][ T13] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 74.152702][ T13] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 74.272851][ T13] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 74.392501][ T13] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 74.627595][ T13] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 74.712069][ T13] usb 2-1: unable to read config index 6 descriptor/start: -71 [ 74.733677][ T13] usb 2-1: can't read configurations, error -71 [ 76.291890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.311893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.321892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.331891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.386180][ T7] cfg80211: failed to load regulatory.db [ 79.814376][ T4560] loop9: detected capacity change from 0 to 7 [ 81.029769][ T4560] Dev loop9: unable to read RDB block 7 [ 81.035581][ T4560] loop9: unable to read partition table [ 81.041484][ T4560] loop9: partition table beyond EOD, truncated [ 81.047734][ T4560] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 81.621948][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.821986][ T7] usb 3-1: device descriptor read/64, error -71 [ 81.873508][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.000935][ T4580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 82.122254][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.352015][ T7] usb 3-1: device descriptor read/64, error -71 [ 82.483140][ T7] usb usb3-port1: attempt power cycle [ 82.634064][ T4227] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.765091][ T4583] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.774454][ T4583] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.783257][ T4583] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.792009][ T4583] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.816794][ T4583] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.825828][ T4583] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.835027][ T4583] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.844003][ T4583] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.853311][ T4237] usb 1-1: config index 0 descriptor too short (expected 931, got 771) [ 82.873608][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.912026][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.921357][ T4237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.022417][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.054593][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.123713][ T4237] usb 1-1: New USB device found, idVendor=04e8, idProduct=662e, bcdDevice=99.06 [ 83.149250][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.172502][ T4227] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.193662][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.207858][ T4237] usb 1-1: Product: syz [ 83.230905][ T4237] usb 1-1: Manufacturer: syz [ 83.244504][ T4227] usb 5-1: SerialNumber: syz [ 83.258041][ T4237] usb 1-1: SerialNumber: syz [ 83.326723][ T4237] usb 1-1: config 0 descriptor?? [ 83.607970][ T4227] usb 5-1: invalid UAC_HEADER (v1) [ 83.675701][ T4237] usb 1-1: USB disconnect, device number 2 [ 83.900232][ T4227] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 83.990720][ T4227] usb 5-1: USB disconnect, device number 4 [ 84.402007][ T7] usb 3-1: device descriptor read/8, error -71 [ 84.414883][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.131989][ T4585] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.421971][ T4585] usb 4-1: Using ep0 maxpacket: 32 [ 88.455260][ T4624] netlink: 'syz.4.101': attribute type 1 has an invalid length. [ 88.808008][ T4230] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 88.815836][ T4585] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 89.273274][ T4585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.281408][ T4585] usb 4-1: Product: syz [ 89.286660][ T4585] usb 4-1: Manufacturer: syz [ 89.291323][ T4585] usb 4-1: SerialNumber: syz [ 89.298982][ T4585] usb 4-1: config 0 descriptor?? [ 89.778879][ T4641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 90.582135][ T4585] airspy 4-1:0.0: Board ID: 00 [ 90.586977][ T4585] airspy 4-1:0.0: Firmware version: [ 91.202291][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.332319][ T4230] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 91.347588][ T4230] usb 2-1: can't read configurations, error -71 [ 91.652067][ T4585] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 93.037609][ T4585] airspy 4-1:0.0: Registered as swradio24 [ 93.043461][ T4585] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 93.057601][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 93.064605][ T4585] usb 4-1: USB disconnect, device number 2 [ 95.242971][ T4691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.001963][ T21] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.362207][ T21] usb 4-1: config 251 has an invalid interface number: 26 but max is 0 [ 96.380850][ T21] usb 4-1: config 251 has no interface number 0 [ 96.401234][ T21] usb 4-1: config 251 interface 26 has no altsetting 0 [ 96.572332][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice= 3.9a [ 96.581453][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.613942][ T21] usb 4-1: Product: syz [ 96.622399][ T21] usb 4-1: Manufacturer: syz [ 96.627015][ T21] usb 4-1: SerialNumber: syz [ 97.779273][ T21] dw2102: su3000_identify_state [ 97.801938][ T21] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 97.810234][ T21] dw2102: su3000_power_ctrl: 1, initialized 0 [ 97.820755][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 97.857887][ T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.884950][ T21] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 error while loading driver (-19) [ 97.931813][ T21] usb 4-1: USB disconnect, device number 3 [ 99.036422][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 99.128988][ T4720] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 99.192337][ T4198] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 99.259596][ T4716] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 99.283174][ T4716] bond1 (unregistering): Released all slaves [ 99.307257][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 99.492456][ T21] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 99.862474][ T21] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 99.972366][ T21] usb 3-1: config 8 has no interface number 0 [ 100.212516][ T21] usb 3-1: string descriptor 0 read error: -22 [ 100.219936][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 100.242685][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.352465][ T21] ttusb_dec_send_command: command bulk message failed: error -22 [ 100.360586][ T21] ttusb-dec: probe of 3-1:8.137 failed with error -22 [ 100.618184][ T26] audit: type=1326 audit(1777477616.817:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 100.817715][ T26] audit: type=1326 audit(1777477616.817:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 100.949895][ T26] audit: type=1326 audit(1777477616.817:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 100.974991][ T26] audit: type=1326 audit(1777477616.817:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 100.997807][ T26] audit: type=1326 audit(1777477616.817:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.020737][ T26] audit: type=1326 audit(1777477616.817:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.063389][ T26] audit: type=1326 audit(1777477616.817:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.087886][ T26] audit: type=1326 audit(1777477616.817:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.111137][ T26] audit: type=1326 audit(1777477616.817:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.136442][ T26] audit: type=1326 audit(1777477616.837:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531a9d5dd9 code=0x7ffc0000 [ 101.891961][ T7] usb 3-1: USB disconnect, device number 6 [ 102.479147][ T4756] netlink: 68 bytes leftover after parsing attributes in process `syz.3.135'. [ 102.492728][ T4756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.350758][ T4760] tipc: Started in network mode [ 103.443763][ T4760] tipc: Node identity 4, cluster identity 4711 [ 103.449958][ T4760] tipc: Node number set to 4 [ 103.797101][ T4229] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.913194][ T4784] loop2: detected capacity change from 0 to 32768 [ 105.134271][ T4229] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.161160][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.229140][ T4229] usb 1-1: Product: syz [ 105.255500][ T4229] usb 1-1: Manufacturer: syz [ 105.283607][ T4229] usb 1-1: SerialNumber: syz [ 105.311406][ T4229] usb 1-1: config 0 descriptor?? [ 105.328997][ T4791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.362221][ T4791] read_mapping_page failed! [ 105.367171][ T4791] ERROR: (device loop2): txCommit: [ 105.367171][ T4791] [ 105.672173][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 105.712261][ T4229] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.797834][ T4797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.148'. [ 105.812352][ T4797] netlink: 44 bytes leftover after parsing attributes in process `syz.4.148'. [ 106.692339][ T24] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 106.708093][ T24] usb 4-1: config 8 has no interface number 0 [ 106.722223][ T24] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 106.744946][ T24] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 106.772134][ T24] usb 4-1: config 8 interface 177 has no altsetting 0 [ 106.781547][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 106.791028][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.982677][ T4790] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.990827][ T4790] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.042046][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 107.162047][ T4807] binder: 4802:4807 ioctl 400c620e 0 returned -14 [ 107.172159][ T4807] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.532223][ T24] ir_toy 4-1:8.177: could not write reset command: -110 [ 107.582843][ C1] ir_toy 4-1:8.177: failed to resubmit urb: -1 [ 107.590131][ T24] ir_toy: probe of 4-1:8.177 failed with error -110 [ 107.834702][ T24] usb 4-1: USB disconnect, device number 4 [ 108.692566][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 108.692601][ T26] audit: type=1326 audit(1777477624.637:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 109.241923][ T26] audit: type=1326 audit(1777477624.637:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 109.309489][ T26] audit: type=1326 audit(1777477624.637:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 109.340595][ T4423] read_mapping_page failed! [ 109.346745][ T4423] ERROR: (device loop2): txCommit: [ 109.346745][ T4423] [ 109.382011][ T4423] jfs_write_inode: jfs_commit_inode failed! [ 109.422210][ T4229] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 109.438052][ T4229] usb 1-1: USB disconnect, device number 3 [ 109.584958][ T4836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.160'. [ 109.597960][ T4836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 109.766127][ T26] audit: type=1326 audit(1777477624.637:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 109.976479][ T26] audit: type=1326 audit(1777477624.637:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 110.302658][ T26] audit: type=1326 audit(1777477624.637:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 110.355281][ T26] audit: type=1326 audit(1777477624.637:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 110.419797][ T26] audit: type=1326 audit(1777477624.637:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 110.564599][ T26] audit: type=1326 audit(1777477624.637:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 113.349779][ T4879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.173'. [ 114.187430][ T4886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.259407][ T4886] device batadv_slave_0 entered promiscuous mode [ 114.411168][ T4865] loop3: detected capacity change from 0 to 32768 [ 114.862242][ T4899] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.871461][ T4899] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.880363][ T4899] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.889106][ T4899] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.908926][ T4899] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.917957][ T4899] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.926953][ T4899] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.935861][ T4899] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.207687][ T4900] ======================================================= [ 115.207687][ T4900] WARNING: The mand mount option has been deprecated and [ 115.207687][ T4900] and is ignored by this kernel. Remove the mand [ 115.207687][ T4900] option from the mount to silence this warning. [ 115.207687][ T4900] ======================================================= [ 116.853547][ T4915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.185'. [ 118.422060][ T4635] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 119.332306][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.412311][ T4635] usb 2-1: device descriptor read/all, error -71 [ 119.741866][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 119.892305][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.913926][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.936379][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.006164][ T4945] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.014950][ T4945] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.023752][ T4945] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.032473][ T4945] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.817136][ T7] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 120.829089][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.847339][ T7] usb 3-1: config 0 descriptor?? [ 120.859925][ T4945] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.868899][ T4945] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.877960][ T4945] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.886892][ T4945] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.357425][ T4958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.198'. [ 123.032665][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 123.060569][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 123.088621][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 123.103954][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 123.136526][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 123.169044][ T7] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 123.200248][ T7] usb 3-1: USB disconnect, device number 7 [ 123.678762][ T4967] fido_id[4967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.138087][ T4985] block device autoloading is deprecated and will be removed. [ 124.230701][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 126.704017][ T4995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.211'. [ 131.257439][ T5033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.222'. [ 131.999295][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 132.634047][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640568][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.912541][ T4585] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.031486][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 137.522355][ T4585] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 137.550060][ T4585] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.616866][ T4585] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.689476][ T4585] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.746551][ T4585] usb 3-1: config 1 has no interface number 1 [ 137.778133][ T4585] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.182601][ T4585] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.244454][ T4585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.117097][ T4585] usb 3-1: Product: syz [ 139.151676][ T4585] usb 3-1: Manufacturer: syz [ 139.213094][ T4585] usb 3-1: SerialNumber: syz [ 139.836915][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 140.552261][ T4585] usb 3-1: MIDIStreaming interface descriptor not found [ 140.637885][ T4585] usb 3-1: USB disconnect, device number 8 [ 141.220657][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.511512][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.724471][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 142.733543][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 142.759527][ T5139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.768731][ T5139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.777608][ T5139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.786425][ T5139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.092077][ T4229] usb 4-1: string descriptor 0 read error: -71 [ 144.098366][ T4229] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 144.244882][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.380052][ T4229] usb 4-1: config 0 descriptor?? [ 144.522549][ T4229] usb 4-1: can't set config #0, error -71 [ 144.558356][ T4229] usb 4-1: USB disconnect, device number 5 [ 145.846979][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.966075][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 146.982328][ T4229] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.041043][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.089918][ T4229] usb 4-1: Product: syz [ 147.105583][ T4229] usb 4-1: Manufacturer: syz [ 147.120431][ T4229] usb 4-1: SerialNumber: syz [ 147.194475][ T4229] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.282436][ T4229] usb 4-1: USB disconnect, device number 6 [ 147.325366][ T13] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 147.383538][ T4229] usb 4-1: ath9k_htc: USB layer deinitialized [ 148.789339][ T5180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.831403][ T5180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.900963][ T5180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.466484][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 150.475675][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 150.497509][ T5206] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.507081][ T5206] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.515971][ T5206] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.524716][ T5206] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.403606][ T5239] process 'syz.4.285' launched './file0' with NULL argv: empty string added [ 157.521627][ T5256] trusted_key: encrypted_key: insufficient parameters specified [ 158.973912][ T5254] Cannot find del_set index 2 as target [ 159.238110][ T5269] vivid-002: ================= START STATUS ================= [ 159.246679][ T5269] vivid-002: Radio HW Seek Mode: Bounded [ 159.252728][ T5269] vivid-002: Radio Programmable HW Seek: false [ 159.258987][ T5269] vivid-002: RDS Rx I/O Mode: Block I/O [ 159.264676][ T5269] vivid-002: Generate RBDS Instead of RDS: false [ 159.271110][ T5269] vivid-002: RDS Reception: true [ 159.276219][ T5269] vivid-002: RDS Program Type: 0 inactive [ 159.282119][ T5269] vivid-002: RDS PS Name: inactive [ 159.287464][ T5269] vivid-002: RDS Radio Text: inactive [ 159.293110][ T5269] vivid-002: RDS Traffic Announcement: false inactive [ 159.300034][ T5269] vivid-002: RDS Traffic Program: false inactive [ 159.306552][ T5269] vivid-002: RDS Music: false inactive [ 159.312182][ T5269] vivid-002: ================== END STATUS ================== [ 159.832396][ T21] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.192692][ T21] usb 5-1: device descriptor read/all, error -71 [ 166.502616][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 166.513935][ T4227] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.783126][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 167.902030][ T4227] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 167.949284][ T4227] usb 5-1: config 2 has no interface number 0 [ 168.043555][ T4227] usb 5-1: config 2 interface 31 has no altsetting 0 [ 168.292394][ T4237] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.300708][ T4227] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 168.356013][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.461525][ T4227] usb 5-1: Product: syz [ 168.512891][ T4227] usb 5-1: Manufacturer: syz [ 168.572200][ T4237] usb 2-1: Using ep0 maxpacket: 8 [ 168.580649][ T4227] usb 5-1: SerialNumber: syz [ 168.692647][ T4237] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 168.932350][ T4237] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 168.947292][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.979636][ T4237] usb 2-1: Product: syz [ 168.984470][ T4237] usb 2-1: Manufacturer: syz [ 169.001991][ T4237] usb 2-1: SerialNumber: syz [ 169.022160][ T4237] usb 2-1: config 0 descriptor?? [ 169.074700][ T4237] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 169.283436][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 169.500278][ T4237] usb 2-1: USB disconnect, device number 8 [ 169.806248][ T4227] ch9200: probe of 5-1:2.31 failed with error -22 [ 171.074574][ T4227] usb 5-1: USB disconnect, device number 7 [ 173.986298][ T4839] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 174.808797][ T4656] Bluetooth: hci5: Frame reassembly failed (-84) [ 175.672224][ T24] Bluetooth: hci3: command 0x0406 tx timeout [ 176.147955][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 176.154398][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 176.160826][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 176.166972][ T4277] Bluetooth: hci5: command 0x1003 tx timeout [ 176.173119][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 176.230013][ T5412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 176.322818][ T5412] device ip6gre1 entered promiscuous mode [ 176.452490][ T5412] netlink: 'syz.1.340': attribute type 6 has an invalid length. [ 176.678073][ T5412] netlink: 72 bytes leftover after parsing attributes in process `syz.1.340'. [ 178.612487][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 178.782058][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 181.003485][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.018859][ T24] Bluetooth: hci5: command 0x1009 tx timeout [ 181.372183][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 181.501132][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.939597][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.953194][ T4227] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 181.983137][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.002536][ T4227] usb 4-1: config 0 descriptor?? [ 182.054016][ T4227] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.214379][ T4229] usb 4-1: USB disconnect, device number 7 [ 184.389997][ T5484] ucma_write: process 211 (syz.0.364) changed security contexts after opening file descriptor, this is not allowed. [ 186.248446][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 189.318281][ T5527] comedi comedi0: Minor 3 could not be opened [ 191.083319][ T26] audit: type=1326 audit(1777477707.287:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 192.452390][ T26] audit: type=1326 audit(1777477707.287:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 192.479816][ T26] audit: type=1326 audit(1777477707.287:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 192.509094][ T26] audit: type=1326 audit(1777477707.287:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 193.839928][ T4237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.075048][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.081416][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.173307][ T4237] Bluetooth: hci0: Injecting HCI hardware error event [ 194.297474][ T4198] Bluetooth: hci0: hardware error 0x00 [ 194.322829][ T26] audit: type=1326 audit(1777477707.287:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 194.438066][ T26] audit: type=1326 audit(1777477707.307:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 194.687356][ T26] audit: type=1326 audit(1777477707.307:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 194.721227][ T26] audit: type=1326 audit(1777477707.307:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 194.751961][ T26] audit: type=1326 audit(1777477707.307:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 194.827048][ T26] audit: type=1326 audit(1777477707.307:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f1ed4dd9 code=0x7ffc0000 [ 195.317946][ T4839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.348932][ T4839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.132165][ T4839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.181496][ T4839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.432414][ T5581] IPVS: sed: FWM 3 0x00000003 - no destination available [ 197.209297][ T5582] loop4: detected capacity change from 0 to 32768 [ 197.220136][ T4635] Bluetooth: hci1: command 0x0409 tx timeout [ 197.261597][ T4839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.817500][ T4839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.994066][ T5559] chnl_net:caif_netlink_parms(): no params data found [ 198.180820][ T4839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.230000][ T4839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.214723][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.311937][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 199.372262][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.415659][ T5559] device bridge_slave_0 entered promiscuous mode [ 199.446463][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.461697][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.470222][ T5559] device bridge_slave_1 entered promiscuous mode [ 199.742497][ T5191] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.231667][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.292364][ T5191] usb 4-1: Using ep0 maxpacket: 32 [ 200.339555][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.447587][ T5559] team0: Port device team_slave_0 added [ 200.472397][ T5191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.490936][ T5559] team0: Port device team_slave_1 added [ 200.546101][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.572172][ T5191] usb 4-1: config 255 has an invalid interface number: 216 but max is 0 [ 200.591558][ T5191] usb 4-1: config 255 has no interface number 0 [ 200.618670][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.654743][ T5191] usb 4-1: config 255 interface 216 has no altsetting 0 [ 200.704769][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.775161][ T5635] netlink: 124 bytes leftover after parsing attributes in process `syz.2.406'. [ 201.367541][ T4635] Bluetooth: hci1: command 0x040f tx timeout [ 201.483520][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.499318][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.571398][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.689369][ T5639] loop2: detected capacity change from 0 to 32768 [ 201.742276][ T5191] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=77.cf [ 201.761772][ T5191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.777371][ T5191] usb 4-1: Product: syz [ 201.781556][ T5191] usb 4-1: Manufacturer: syz [ 201.839622][ T5191] usb 4-1: SerialNumber: syz [ 201.920726][ T5191] usb 4-1: active config #255 != 1 ?? [ 201.932797][ T5191] usbhid 4-1:255.216: couldn't find an input interrupt endpoint [ 201.995050][ T5559] device hsr_slave_0 entered promiscuous mode [ 202.023461][ T5559] device hsr_slave_1 entered promiscuous mode [ 202.129925][ T5191] usb 4-1: USB disconnect, device number 8 [ 202.232427][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.240027][ T5559] Cannot create hsr debugfs directory [ 202.333888][ T5658] read_mapping_page failed! [ 202.338526][ T5658] ERROR: (device loop2): txCommit: [ 202.338526][ T5658] [ 202.763699][ T4278] read_mapping_page failed! [ 202.768239][ T4278] ERROR: (device loop2): txCommit: [ 202.768239][ T4278] [ 202.847835][ T4278] jfs_write_inode: jfs_commit_inode failed! [ 204.132865][ T24] Bluetooth: hci1: command 0x0419 tx timeout [ 204.391503][ T5673] futex_wake_op: syz.2.410 tries to shift op by -1; fix this program [ 205.219249][ T5559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.297705][ T5559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.329026][ T5559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.430103][ T5559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.511901][ T5191] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 205.660707][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.789733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.810922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.856281][ T5559] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.884774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.910767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.985826][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.992994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.125239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.164977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.182229][ T5191] usb 1-1: Using ep0 maxpacket: 16 [ 206.314281][ T5191] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.319640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.342009][ T5191] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.346541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.360482][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.368598][ T5191] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.375337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.064060][ T5191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.262030][ T5191] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 207.281339][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.298574][ T5191] usb 1-1: config 0 descriptor?? [ 207.385064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.414303][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.444288][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.523399][ T4839] device hsr_slave_0 left promiscuous mode [ 207.535324][ T4839] device hsr_slave_1 left promiscuous mode [ 207.543302][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.557629][ T4839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.573648][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.597525][ T4839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.612783][ T4839] device bridge_slave_1 left promiscuous mode [ 207.627853][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.661412][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.676568][ T4839] device bridge_slave_0 left promiscuous mode [ 207.688962][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.710339][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.732951][ T4839] device veth1_macvtap left promiscuous mode [ 207.743906][ T4839] device veth0_macvtap left promiscuous mode [ 207.750066][ T4839] device veth1_vlan left promiscuous mode [ 207.762529][ T4839] device veth0_vlan left promiscuous mode [ 207.793819][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.818120][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.861187][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.883807][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.912339][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.922112][ T5191] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 207.950296][ T5191] pantherlord 0003:0810:0001.0002: unexpected long global item [ 207.981157][ T5191] pantherlord 0003:0810:0001.0002: parse failed [ 208.001156][ T5191] pantherlord: probe of 0003:0810:0001.0002 failed with error -22 [ 208.016837][ T5191] usb 1-1: USB disconnect, device number 4 [ 208.473429][ T4839] team0 (unregistering): Port device team_slave_1 removed [ 208.491160][ T4839] team0 (unregistering): Port device team_slave_0 removed [ 208.509132][ T4839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.529734][ T4839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.676619][ T4839] bond0 (unregistering): Released all slaves [ 209.036574][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.057000][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.085622][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.109471][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.145544][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.179365][ T5559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.208514][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.325082][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.335737][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.748111][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.796202][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.283842][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.916068][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.953047][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.016601][ T5559] device veth0_vlan entered promiscuous mode [ 213.373460][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.383776][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.411440][ T5802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.420355][ T5802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.429223][ T5802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.438169][ T5802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.471361][ T5802] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.480743][ T5802] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.489938][ T5802] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.498900][ T5802] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.809860][ T5559] device veth1_vlan entered promiscuous mode [ 216.819282][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.827860][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.957211][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.967369][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.994003][ T5559] device veth0_macvtap entered promiscuous mode [ 217.086178][ T5559] device veth1_macvtap entered promiscuous mode [ 217.126862][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.284212][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.370126][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.636730][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.930321][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.251243][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.272718][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.641366][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.656650][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.669528][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.711111][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.155571][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.254034][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.274693][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.405993][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.473479][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.651474][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.832696][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.377431][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.388663][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.406754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.428611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.445645][ T5559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.466280][ T5559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.492476][ T5559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.543004][ T5559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.127921][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.136541][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.185192][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 221.439597][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 221.562501][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.587755][ T24] usb 1-1: config 0 has no interface number 0 [ 221.601097][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.810027][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.826524][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.839721][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.406009][ T5868] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.451557][ T5868] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.464615][ T5868] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.477487][ T5868] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.479872][ T24] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 222.571312][ T24] usb 1-1: Product: syz [ 222.587871][ T24] usb 1-1: config 0 descriptor?? [ 222.642793][ T24] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 222.722151][ T5868] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.731096][ T5868] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.740076][ T5868] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.749405][ T5868] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.802739][ T5879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.457'. [ 222.827333][ T5868] syz.3.455 (5868) used greatest stack depth: 20112 bytes left [ 222.983890][ T4232] usb 1-1: USB disconnect, device number 5 [ 223.035040][ T5915] loop3: detected capacity change from 0 to 32768 [ 223.063096][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.071656][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.089151][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.127935][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.346980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.432093][ T5922] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.659656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.069198][ T5935] vivid-003: ================= START STATUS ================= [ 224.076997][ T5935] vivid-003: Radio HW Seek Mode: Bounded [ 224.082817][ T5935] vivid-003: Radio Programmable HW Seek: false [ 224.089076][ T5935] vivid-003: RDS Rx I/O Mode: Block I/O [ 224.094784][ T5935] vivid-003: Generate RBDS Instead of RDS: false [ 224.101226][ T5935] vivid-003: RDS Reception: true [ 224.106232][ T5935] vivid-003: RDS Program Type: 0 inactive [ 224.112115][ T5935] vivid-003: RDS PS Name: inactive [ 224.117467][ T5935] vivid-003: RDS Radio Text: inactive [ 224.123086][ T5935] vivid-003: RDS Traffic Announcement: false inactive [ 224.130021][ T5935] vivid-003: RDS Traffic Program: false inactive [ 224.136536][ T5935] vivid-003: RDS Music: false inactive [ 224.142168][ T5935] vivid-003: ================== END STATUS ================== [ 226.200528][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.477'. [ 226.852711][ T5978] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 227.031991][ T4277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 227.051734][ T5978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.175322][ T5984] comedi comedi0: Minor 3 could not be opened [ 227.205237][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.253523][ T5978] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 227.289103][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 227.302782][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 227.462072][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 227.612659][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.101594][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.112214][ T4277] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.168226][ T4230] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.178069][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.201552][ T4230] usb 4-1: config 0 descriptor?? [ 228.203138][ T4277] usb 1-1: config 179 has no interface number 0 [ 228.213412][ T4277] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.229830][ T4277] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 228.241560][ T4277] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.261856][ T4277] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 228.290791][ T4277] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 228.310181][ T4277] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 228.321019][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.372216][ T5976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.642336][ T5191] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 229.082394][ T5191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.140504][ T4230] hub 4-1:0.0: USB hub found [ 229.181974][ T4230] hub 4-1:0.0: 1 port detected [ 229.244271][ T4277] usb 1-1: USB disconnect, device number 6 [ 229.271869][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.352912][ T5191] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 229.369267][ T5191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.383553][ T5191] usb 6-1: Product: syz [ 229.387850][ T5191] usb 6-1: Manufacturer: syz [ 229.408146][ T5191] usb 6-1: SerialNumber: syz [ 229.475495][ T5191] usb 6-1: selecting invalid altsetting 1 [ 229.490625][ T5191] usb 6-1: unit 6 not found! [ 229.682109][ T4237] hub 4-1:0.0: activate --> -90 [ 230.461952][ T5191] usb 6-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 230.489959][ T4230] usb 4-1: USB disconnect, device number 9 [ 231.042636][ T5191] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 231.102324][ T5191] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 231.502737][ T5191] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 231.515455][ T5191] usb 6-1: selecting invalid altsetting 1 [ 231.521697][ T5191] usb 6-1: unit 6 not found! [ 231.552014][ T5191] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 231.587884][ T5191] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 231.651943][ T5191] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 231.666295][ T5191] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 231.686823][ T5191] usb 6-1: selecting invalid altsetting 1 [ 231.705438][ T5191] usb 6-1: unit 6 not found! [ 231.832878][ T5191] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 231.866446][ T5191] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 232.052213][ T5191] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 232.661498][ T5191] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 232.676441][ T5191] usb 6-1: USB disconnect, device number 2 [ 233.425873][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.503982][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.519'. [ 238.232465][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 239.891101][ T6176] overlayfs: missing 'lowerdir' [ 242.469072][ T6211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'. [ 244.921994][ T4230] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 245.161922][ T4230] usb 6-1: Using ep0 maxpacket: 8 [ 245.282046][ T4230] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 245.309442][ T4230] usb 6-1: config 2 has no interface number 0 [ 245.335066][ T4230] usb 6-1: config 2 interface 31 has no altsetting 0 [ 245.408273][ T6233] loop4: detected capacity change from 0 to 32768 [ 245.581062][ T6243] netlink: 'syz.3.541': attribute type 39 has an invalid length. [ 245.647330][ T6244] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.686427][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 245.702262][ T4230] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 245.933733][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.944006][ T4230] usb 6-1: Product: syz [ 245.948286][ T4230] usb 6-1: Manufacturer: syz [ 245.954935][ T4230] usb 6-1: SerialNumber: syz [ 245.985001][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 246.033226][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 246.052641][ T6246] tc_dump_action: action bad kind [ 246.162571][ T4175] [ 246.164942][ T4175] ====================================================== [ 246.171938][ T4175] WARNING: possible circular locking dependency detected [ 246.178966][ T4175] syzkaller #0 Not tainted [ 246.183361][ T4175] ------------------------------------------------------ [ 246.190355][ T4175] udevd/4175 is trying to acquire lock: [ 246.195870][ T4175] ffff8880788d4938 ((wq_completion)loop4){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 246.205592][ T4175] [ 246.205592][ T4175] but task is already holding lock: [ 246.212933][ T4175] ffff888020a3b468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 246.221757][ T4175] [ 246.221757][ T4175] which lock already depends on the new lock. [ 246.221757][ T4175] [ 246.232153][ T4175] [ 246.232153][ T4175] the existing dependency chain (in reverse order) is: [ 246.241375][ T4175] [ 246.241375][ T4175] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 246.248831][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.254551][ T4175] mutex_lock_killable_nested+0x17/0x20 [ 246.260625][ T4175] lo_open+0x6a/0x100 [ 246.265124][ T4175] blkdev_get_whole+0x90/0x390 [ 246.270390][ T4175] blkdev_get_by_dev+0x2d0/0xa60 [ 246.275826][ T4175] blkdev_open+0x12d/0x2c0 [ 246.280745][ T4175] do_dentry_open+0x7ff/0xf80 [ 246.285923][ T4175] path_openat+0x26f5/0x2fa0 [ 246.291016][ T4175] do_filp_open+0x1e2/0x410 [ 246.296018][ T4175] do_sys_openat2+0x150/0x4b0 [ 246.301194][ T4175] __x64_sys_openat+0x135/0x160 [ 246.306539][ T4175] do_syscall_64+0x4c/0xa0 [ 246.311453][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.317842][ T4175] [ 246.317842][ T4175] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 246.325631][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.331381][ T4175] mutex_lock_nested+0x17/0x20 [ 246.336643][ T4175] bd_register_pending_holders+0x33/0x310 [ 246.342862][ T4175] device_add_disk+0x5a7/0xd40 [ 246.348128][ T4175] md_alloc+0x809/0xc00 [ 246.352796][ T4175] blk_request_module+0x26e/0x290 [ 246.358324][ T4175] blkdev_get_no_open+0x38/0x1d0 [ 246.363766][ T4175] blkdev_get_by_dev+0x77/0xa60 [ 246.369121][ T4175] blkdev_open+0x12d/0x2c0 [ 246.374123][ T4175] do_dentry_open+0x7ff/0xf80 [ 246.379389][ T4175] path_openat+0x26f5/0x2fa0 [ 246.384481][ T4175] do_filp_open+0x1e2/0x410 [ 246.389482][ T4175] do_sys_openat2+0x150/0x4b0 [ 246.394655][ T4175] __x64_sys_openat+0x135/0x160 [ 246.400003][ T4175] do_syscall_64+0x4c/0xa0 [ 246.404919][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.411348][ T4175] [ 246.411348][ T4175] -> #6 (disks_mutex){+.+.}-{3:3}: [ 246.418619][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.424360][ T4175] mutex_lock_nested+0x17/0x20 [ 246.429639][ T4175] md_alloc+0x48/0xc00 [ 246.434207][ T4175] blk_request_module+0x26e/0x290 [ 246.439835][ T4175] blkdev_get_no_open+0x38/0x1d0 [ 246.445282][ T4175] blkdev_get_by_dev+0x77/0xa60 [ 246.450652][ T4175] blkdev_open+0x12d/0x2c0 [ 246.455566][ T4175] do_dentry_open+0x7ff/0xf80 [ 246.460744][ T4175] path_openat+0x26f5/0x2fa0 [ 246.465832][ T4175] do_filp_open+0x1e2/0x410 [ 246.470830][ T4175] do_sys_openat2+0x150/0x4b0 [ 246.476003][ T4175] __x64_sys_openat+0x135/0x160 [ 246.481349][ T4175] do_syscall_64+0x4c/0xa0 [ 246.486268][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.492664][ T4175] [ 246.492664][ T4175] -> #5 (major_names_lock){+.+.}-{3:3}: [ 246.500367][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.506153][ T4175] mutex_lock_nested+0x17/0x20 [ 246.511414][ T4175] blk_request_module+0x31/0x290 [ 246.516849][ T4175] blkdev_get_no_open+0x38/0x1d0 [ 246.522381][ T4175] blkdev_get_by_dev+0x77/0xa60 [ 246.527728][ T4175] swsusp_check+0xa1/0x2b0 [ 246.532649][ T4175] software_resume+0xc6/0x3b0 [ 246.537824][ T4175] resume_store+0xe4/0x130 [ 246.542740][ T4175] kernfs_fop_write_iter+0x379/0x4c0 [ 246.548524][ T4175] vfs_write+0x745/0xd60 [ 246.553265][ T4175] ksys_write+0x152/0x260 [ 246.558091][ T4175] do_syscall_64+0x4c/0xa0 [ 246.563015][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.569408][ T4175] [ 246.569408][ T4175] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 246.577901][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.583626][ T4175] mutex_lock_nested+0x17/0x20 [ 246.588894][ T4175] software_resume+0x7c/0x3b0 [ 246.594078][ T4175] resume_store+0xe4/0x130 [ 246.599001][ T4175] kernfs_fop_write_iter+0x379/0x4c0 [ 246.604784][ T4175] vfs_write+0x745/0xd60 [ 246.609523][ T4175] ksys_write+0x152/0x260 [ 246.614362][ T4175] do_syscall_64+0x4c/0xa0 [ 246.619292][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.625698][ T4175] [ 246.625698][ T4175] -> #3 (&of->mutex){+.+.}-{3:3}: [ 246.632999][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.638877][ T4175] mutex_lock_nested+0x17/0x20 [ 246.644769][ T4175] kernfs_seq_start+0x51/0x3c0 [ 246.650063][ T4175] seq_read_iter+0x3c4/0xd50 [ 246.655166][ T4175] vfs_read+0x759/0xd60 [ 246.659830][ T4175] ksys_read+0x152/0x260 [ 246.664663][ T4175] do_syscall_64+0x4c/0xa0 [ 246.669585][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.675980][ T4175] [ 246.675980][ T4175] -> #2 (&p->lock){+.+.}-{3:3}: [ 246.682988][ T4175] __mutex_lock_common+0x1e3/0x2400 [ 246.688696][ T4175] mutex_lock_nested+0x17/0x20 [ 246.693964][ T4175] seq_read_iter+0xad/0xd50 [ 246.698974][ T4175] do_iter_readv_writev+0x47e/0x5f0 [ 246.704679][ T4175] do_iter_read+0x20b/0x7c0 [ 246.709680][ T4175] loop_process_work+0x16dd/0x24a0 [ 246.715305][ T4175] process_one_work+0x85f/0x1010 [ 246.720758][ T4175] worker_thread+0xaa6/0x1290 [ 246.725936][ T4175] kthread+0x436/0x520 [ 246.730503][ T4175] ret_from_fork+0x1f/0x30 [ 246.735428][ T4175] [ 246.735428][ T4175] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 246.744525][ T4175] process_one_work+0x7bb/0x1010 [ 246.749968][ T4175] worker_thread+0xaa6/0x1290 [ 246.755146][ T4175] kthread+0x436/0x520 [ 246.759714][ T4175] ret_from_fork+0x1f/0x30 [ 246.764635][ T4175] [ 246.764635][ T4175] -> #0 ((wq_completion)loop4){+.+.}-{0:0}: [ 246.772703][ T4175] __lock_acquire+0x2c42/0x7d10 [ 246.778122][ T4175] lock_acquire+0x19e/0x400 [ 246.783133][ T4175] flush_workqueue+0x16c/0x13d0 [ 246.788482][ T4175] drain_workqueue+0xcf/0x380 [ 246.793669][ T4175] destroy_workqueue+0x7b/0xb20 [ 246.799028][ T4175] __loop_clr_fd+0x234/0xb90 [ 246.804113][ T4175] blkdev_put+0x53f/0x7d0 [ 246.808939][ T4175] blkdev_close+0x76/0xa0 [ 246.813771][ T4175] __fput+0x234/0x930 [ 246.818249][ T4175] task_work_run+0x125/0x1a0 [ 246.823340][ T4175] exit_to_user_mode_loop+0x10f/0x130 [ 246.829208][ T4175] exit_to_user_mode_prepare+0xee/0x180 [ 246.835245][ T4175] syscall_exit_to_user_mode+0x16/0x40 [ 246.841200][ T4175] do_syscall_64+0x58/0xa0 [ 246.846123][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.852523][ T4175] [ 246.852523][ T4175] other info that might help us debug this: [ 246.852523][ T4175] [ 246.862750][ T4175] Chain exists of: [ 246.862750][ T4175] (wq_completion)loop4 --> &disk->open_mutex --> &lo->lo_mutex [ 246.862750][ T4175] [ 246.876192][ T4175] Possible unsafe locking scenario: [ 246.876192][ T4175] [ 246.883625][ T4175] CPU0 CPU1 [ 246.889056][ T4175] ---- ---- [ 246.894398][ T4175] lock(&lo->lo_mutex); [ 246.898622][ T4175] lock(&disk->open_mutex); [ 246.905707][ T4175] lock(&lo->lo_mutex); [ 246.912441][ T4175] lock((wq_completion)loop4); [ 246.917292][ T4175] [ 246.917292][ T4175] *** DEADLOCK *** [ 246.917292][ T4175] [ 246.925419][ T4175] 2 locks held by udevd/4175: [ 246.930197][ T4175] #0: ffff8880209af518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 246.939491][ T4175] #1: ffff888020a3b468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 246.948695][ T4175] [ 246.948695][ T4175] stack backtrace: [ 246.954593][ T4175] CPU: 0 PID: 4175 Comm: udevd Not tainted syzkaller #0 [ 246.961508][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.971545][ T4175] Call Trace: [ 246.974808][ T4175] [ 246.977725][ T4175] dump_stack_lvl+0x188/0x250 [ 246.982382][ T4175] ? load_image+0x400/0x400 [ 246.986860][ T4175] ? show_regs_print_info+0x20/0x20 [ 246.992035][ T4175] ? print_circular_bug+0x12b/0x1a0 [ 246.997224][ T4175] check_noncircular+0x296/0x330 [ 247.002149][ T4175] ? add_chain_block+0x940/0x940 [ 247.007060][ T4175] ? lockdep_lock+0xf1/0x1f0 [ 247.011625][ T4175] ? mark_lock+0x94/0x320 [ 247.015963][ T4175] __lock_acquire+0x2c42/0x7d10 [ 247.020806][ T4175] ? __lock_acquire+0x13bc/0x7d10 [ 247.025807][ T4175] ? verify_lock_unused+0x140/0x140 [ 247.030984][ T4175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 247.036941][ T4175] ? verify_lock_unused+0x140/0x140 [ 247.042147][ T4175] ? memset+0x1e/0x40 [ 247.046121][ T4175] lock_acquire+0x19e/0x400 [ 247.050620][ T4175] ? flush_workqueue+0x150/0x13d0 [ 247.055633][ T4175] ? __mutex_trylock_common+0x155/0x260 [ 247.061165][ T4175] ? read_lock_is_recursive+0x10/0x10 [ 247.066522][ T4175] ? __init_swait_queue_head+0xa5/0x150 [ 247.072050][ T4175] flush_workqueue+0x16c/0x13d0 [ 247.076878][ T4175] ? flush_workqueue+0x150/0x13d0 [ 247.081877][ T4175] ? __lock_acquire+0x7d10/0x7d10 [ 247.086880][ T4175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 247.092856][ T4175] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 247.098296][ T4175] ? rcu_work_rcufn+0x120/0x120 [ 247.103118][ T4175] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 247.108740][ T4175] ? finish_wait+0xc0/0x1d0 [ 247.113502][ T4175] drain_workqueue+0xcf/0x380 [ 247.118172][ T4175] destroy_workqueue+0x7b/0xb20 [ 247.123099][ T4175] __loop_clr_fd+0x234/0xb90 [ 247.127688][ T4175] ? lo_release+0x172/0x1f0 [ 247.132170][ T4175] ? lo_open+0x100/0x100 [ 247.136387][ T4175] blkdev_put+0x53f/0x7d0 [ 247.140712][ T4175] blkdev_close+0x76/0xa0 [ 247.145107][ T4175] ? blkdev_open+0x2c0/0x2c0 [ 247.149669][ T4175] __fput+0x234/0x930 [ 247.153632][ T4175] task_work_run+0x125/0x1a0 [ 247.158222][ T4175] exit_to_user_mode_loop+0x10f/0x130 [ 247.163697][ T4175] exit_to_user_mode_prepare+0xee/0x180 [ 247.169236][ T4175] syscall_exit_to_user_mode+0x16/0x40 [ 247.174708][ T4175] do_syscall_64+0x58/0xa0 [ 247.179104][ T4175] ? clear_bhb_loop+0x30/0x80 [ 247.183758][ T4175] ? clear_bhb_loop+0x30/0x80 [ 247.188414][ T4175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.194294][ T4175] RIP: 0033:0x7f2ad3c49407 [ 247.198706][ T4175] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 247.218294][ T4175] RSP: 002b:00007ffda4d102c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 247.226682][ T4175] RAX: 0000000000000000 RBX: 00007f2ad3b5b880 RCX: 00007f2ad3c49407 [ 247.234630][ T4175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 247.242577][ T4175] RBP: 00007f2ad3b5b6e8 R08: 0000000000000000 R09: 0000000000000000 [ 247.250527][ T4175] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 247.258474][ T4175] R13: 000055e2be3ab410 R14: 0000000000000008 R15: 000055e2be3abe00 [ 247.266425][ T4175] [ 247.277742][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.537'. [ 247.341614][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 247.511979][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.592354][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.601144][ T24] usb 1-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 247.613417][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.622999][ T24] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.772303][ T4230] ch9200: probe of 6-1:2.31 failed with error -22 [ 247.780656][ T4230] usb 6-1: USB disconnect, device number 3 [ 247.792032][ T24] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 247.801133][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.809508][ T24] usb 1-1: Product: syz [ 247.813769][ T24] usb 1-1: Manufacturer: syz [ 247.818504][ T24] usb 1-1: SerialNumber: syz [ 248.181980][ T24] usb 1-1: 0:2 : does not exist [ 248.193569][ T24] usb 1-1: USB disconnect, device number 7 [ 248.414205][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.514142][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.520506][ T1421] ieee802154 phy1 wpan1: encryption failed: -22