last executing test programs: 7.181693759s ago: executing program 0 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aa", 0x1}], 0x1}, 0x4) 7.024765597s ago: executing program 3 (id=601): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x40000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x9}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) 6.827008337s ago: executing program 0 (id=603): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 5.473783169s ago: executing program 4 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000140)}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.811818324s ago: executing program 3 (id=614): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000001940)=""/4096, 0x1000, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x20004840) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x692, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.800245145s ago: executing program 1 (id=615): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68", 0x34}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d", 0x5c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede4", 0x6d}], 0x3}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.70221109s ago: executing program 1 (id=616): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',fowne', @ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.647651013s ago: executing program 3 (id=617): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[], 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) 3.380420331s ago: executing program 4 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000040900010073797a310000000028000480240001800b000100657874686472000014000280080006400000000300000000000000f10900020073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3.331817213s ago: executing program 0 (id=619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000161000/0x400000)=nil, 0x400000, 0x4000, 0x0, &(0x7f000063a000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x44000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x891e, &(0x7f0000000340)={'xfrm0\x00', @ifru_data=&(0x7f0000000040)="cc74da483f3d515f648493870b98e6a5ba38601d45194cbb6a186ee187a14432"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) readlink(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x2, 0x24}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.062132817s ago: executing program 3 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2.937812934s ago: executing program 4 (id=622): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x28300) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0x4166, &(0x7f0000000200)={0x0, 0x1c3c, 0x0, 0x3, 0x65}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.82606684s ago: executing program 2 (id=623): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.80181057s ago: executing program 3 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.778643732s ago: executing program 4 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aa", 0x1}], 0x1}, 0x4) 2.44487168s ago: executing program 3 (id=626): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) getpid() r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 2.344088645s ago: executing program 4 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r5, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, &(0x7f0000000040), &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x41, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x8, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, r4, r6, r6, r7], &(0x7f0000000ac0)=[{0x3, 0x4, 0x2}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0xb7aa}, 0x94) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.179443984s ago: executing program 2 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 720.228981ms ago: executing program 4 (id=629): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000140)}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 630.711666ms ago: executing program 1 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00006000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc67}, {&(0x7f0000000b00)="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", 0x162}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564b", 0x70}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b03706fe3", 0x64}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8c", 0x2f}], 0x6}, 0x8bb3a301eb080b) 453.492026ms ago: executing program 2 (id=631): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xe7, 0x42474752, 0x280, 0x1e0, 0x2, @discrete={0x1, 0x8}}) 451.556586ms ago: executing program 0 (id=632): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 407.947578ms ago: executing program 1 (id=633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 273.756345ms ago: executing program 2 (id=634): socket(0x22, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 273.451625ms ago: executing program 0 (id=635): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x28300) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0x4166, &(0x7f0000000200)={0x0, 0x1c3c, 0x0, 0x3, 0x65}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 259.556296ms ago: executing program 1 (id=636): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000180), 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 133.511233ms ago: executing program 0 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aa", 0x1}], 0x1}, 0x4) 89.412575ms ago: executing program 2 (id=638): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 88.295335ms ago: executing program 1 (id=639): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=640): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x3, 0x3, 0x1, 0x0, 0x3, 0xcc7, 0x1, 0x1, 0xa, 0x1, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x80000000, 0x40002003, 0x89, 0xffffffff, 0xf27, 0x6, 0x2000800b, 0xca8, 0x5, 0x4, 0x400, 0x10000, 0xfffffff7]}) syz_usb_connect$cdc_ecm(0x6, 0x4d, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 62.060378][ T4172] cgroup: Unknown subsys name 'net' [ 62.217443][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.491312][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.327229][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.411783][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.471073][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 65.498723][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.544478][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.552564][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.560519][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.569003][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.594501][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.601568][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.609921][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.617390][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.624626][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.632718][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.657021][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.664269][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.672279][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.707897][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.738087][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.748570][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.776828][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.805525][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.812779][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.820548][ T4196] device bridge_slave_0 entered promiscuous mode [ 65.841542][ T4188] team0: Port device team_slave_0 added [ 65.847704][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.854829][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.863707][ T4193] device bridge_slave_0 entered promiscuous mode [ 65.877387][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.884613][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.892727][ T4193] device bridge_slave_1 entered promiscuous mode [ 65.899806][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.906942][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.915256][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.924525][ T4184] team0: Port device team_slave_0 added [ 65.937534][ T4188] team0: Port device team_slave_1 added [ 65.966447][ T4184] team0: Port device team_slave_1 added [ 65.984456][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.991537][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.999799][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.016849][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.034637][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.043899][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.050950][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.059070][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.067227][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.074422][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.100482][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.113708][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.123359][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.130310][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.156919][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.169539][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.191572][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.198734][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.224969][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.241484][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.248788][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.274969][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.313547][ T4196] team0: Port device team_slave_0 added [ 66.321620][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.333410][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.345121][ T4193] team0: Port device team_slave_0 added [ 66.363664][ T4196] team0: Port device team_slave_1 added [ 66.370979][ T4185] team0: Port device team_slave_0 added [ 66.386077][ T4193] team0: Port device team_slave_1 added [ 66.411642][ T4185] team0: Port device team_slave_1 added [ 66.443775][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.450477][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.468688][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.475872][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.507496][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.524203][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.531165][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.557509][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.573838][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.580706][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.587987][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.595830][ T4184] Cannot create hsr debugfs directory [ 66.602112][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.609056][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.634988][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.646425][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.653653][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.679686][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.691205][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.698439][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.724514][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.756344][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.763433][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.789762][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.828152][ T4196] device hsr_slave_0 entered promiscuous mode [ 66.834970][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.841922][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.849491][ T4196] Cannot create hsr debugfs directory [ 66.910539][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.917525][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.924496][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.932174][ T4193] Cannot create hsr debugfs directory [ 66.946823][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.954975][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.961486][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.969117][ T4185] Cannot create hsr debugfs directory [ 67.063117][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 67.077665][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.142034][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 67.149691][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 67.161261][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 67.255979][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.267494][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.280560][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.290705][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.328609][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.337640][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.351162][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.360922][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.411300][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.432817][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.443541][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.456534][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.506767][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.534099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.550787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.564539][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.583843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.595885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.605928][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.613208][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.621612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.630948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.639976][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.647320][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.657103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.669347][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.678463][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.691726][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.721884][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.731695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.743290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.766251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.778994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.797225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.805578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.814344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.834160][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.850388][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.861787][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.877356][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.889337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.898249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.908338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.917338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.930372][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.943007][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.953758][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.970892][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.978960][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.987073][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.995063][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.003317][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.039187][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.048356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.064112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.074437][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.081504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.089941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.098781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.107623][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.114725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.122935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.131506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.144774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.171551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.189782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.204583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.216207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.225684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.234353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.243053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.251559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.260366][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.267820][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.276119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.284353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.298970][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.310495][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.349240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.365829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.376071][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.383189][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.391154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.400580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.409215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.435742][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.478809][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.487683][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.496603][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.504999][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.516372][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.524963][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.536425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.546086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.564103][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.593967][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.613457][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.623503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.631317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.639803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.648561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.656293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.665642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.674170][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.681229][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.689131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.698412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.706898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.713954][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.721655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.735813][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.746253][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.768314][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.778739][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.787758][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.796368][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.804932][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.830188][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.844661][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.853301][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.862650][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.873026][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.881348][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.890288][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.898995][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.908491][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.917116][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.926133][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.935163][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.942284][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.950483][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.959514][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.968299][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.975395][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.983848][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.991882][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.001719][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.029176][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.041140][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.065170][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.076523][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.086613][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.095440][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.104300][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.113321][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.121622][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.132947][ T4184] device veth0_vlan entered promiscuous mode [ 69.139972][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.147632][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 69.153835][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 69.155245][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.168079][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.198942][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.213336][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.222917][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 69.229541][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 69.232398][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.248564][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 69.255608][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.266926][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.281357][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.295765][ T4184] device veth1_vlan entered promiscuous mode [ 69.319839][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.329289][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.337873][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.362026][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.370233][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.386752][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.400065][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.409313][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.418963][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.427883][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.436878][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.445591][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.457743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.466297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.484400][ T4196] device veth0_vlan entered promiscuous mode [ 69.517108][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.529259][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.542254][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.550406][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.559880][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.582657][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.597013][ T4184] device veth0_macvtap entered promiscuous mode [ 69.608762][ T4196] device veth1_vlan entered promiscuous mode [ 69.629476][ T4184] device veth1_macvtap entered promiscuous mode [ 69.678487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.695256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.709843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.719616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.751455][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.764730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.778733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.788077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.797488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.809214][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.820855][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.830742][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.840688][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.849492][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862323][ T4188] device veth0_vlan entered promiscuous mode [ 69.874698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.883046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.890918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.900258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.909835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.919209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.930153][ T4196] device veth0_macvtap entered promiscuous mode [ 69.968378][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.977946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.988740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.998054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.008271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.016179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.025274][ T4188] device veth1_vlan entered promiscuous mode [ 70.034126][ T4196] device veth1_macvtap entered promiscuous mode [ 70.106330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.115568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.125079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.133469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.141706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.150605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.159276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.170948][ T4193] device veth0_vlan entered promiscuous mode [ 70.192701][ T4188] device veth0_macvtap entered promiscuous mode [ 70.218131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.226917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.235138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.244361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.253599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.272670][ T4193] device veth1_vlan entered promiscuous mode [ 70.291710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.293561][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.306755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.316081][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.318878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.335077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.343630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.351393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.360645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.370515][ T4185] device veth0_vlan entered promiscuous mode [ 70.380288][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.391253][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.404568][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.412842][ T4188] device veth1_macvtap entered promiscuous mode [ 70.433488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.441603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.452925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.470381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.479680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.496563][ T4185] device veth1_vlan entered promiscuous mode [ 70.509180][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.521054][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.533724][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.549211][ T4193] device veth0_macvtap entered promiscuous mode [ 70.564264][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.575107][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.585931][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.596709][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.608444][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.619851][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.631358][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.641491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.652367][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.667143][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.675044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.683340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.692972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.701685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.710464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.719328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.728341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.740967][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.752689][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.764573][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.774928][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.797223][ T4193] device veth1_macvtap entered promiscuous mode [ 70.810228][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.819332][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.828846][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.838064][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857816][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.868463][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.884990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.895313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.923405][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.937025][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.947031][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.957950][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.968083][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.978701][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.996031][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.033454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.043644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.053268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.062816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.074960][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.086481][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.103060][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.113819][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.124297][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.134904][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.147842][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.177741][ T4185] device veth0_macvtap entered promiscuous mode [ 71.194489][ T4185] device veth1_macvtap entered promiscuous mode [ 71.201608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.210442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.222717][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 71.225901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.228985][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 71.244459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.272932][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287575][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287630][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287656][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.324761][ T4224] Bluetooth: hci4: command 0x040f tx timeout [ 71.350253][ T4224] Bluetooth: hci3: command 0x040f tx timeout [ 71.357308][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 71.409212][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.420399][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.420784][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.437021][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.441540][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.455314][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.466068][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.477990][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.487986][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.498427][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.508390][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.518841][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.530193][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.549473][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.549502][ T4263] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 71.558497][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.588358][ T4263] team0: Port device netdevsim0 added [ 71.601133][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.616451][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.626763][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.637948][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.638600][ T4263] syz.0.1 (4263) used greatest stack depth: 19512 bytes left [ 71.658701][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.725081][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.736514][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.747079][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.757922][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.767848][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.778611][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.789464][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.799957][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.811468][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.838445][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.848176][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.868151][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.868736][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.876115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.894128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.906556][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.916065][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.925548][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934608][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.964792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.033224][ T4270] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.051051][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.082475][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.117848][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.133312][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.215109][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.252173][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.264463][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.292145][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 72.332549][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.347395][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.389951][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.422494][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.594020][ T13] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.629798][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.654554][ T13] usb 1-1: Product: syz [ 72.663236][ T13] usb 1-1: Manufacturer: syz [ 72.674419][ T13] usb 1-1: SerialNumber: syz [ 72.743163][ T13] usb 1-1: config 0 descriptor?? [ 72.797677][ T13] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 72.828970][ T13] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 73.303457][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 73.320303][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 73.383189][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 73.390608][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 73.411774][ T4225] Bluetooth: hci4: command 0x0419 tx timeout [ 73.432166][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.442044][ T13] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 73.683508][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 73.802115][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 73.852807][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.908933][ T1110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.959728][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 73.971386][ T13] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.980057][ T13] em28xx 1-1:0.0: board has no eeprom [ 74.078649][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.086976][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.141118][ T1110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 74.295492][ T1110] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 74.428630][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.461989][ T13] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 74.510658][ T13] em28xx 1-1:0.0: dvb set to bulk mode. [ 74.569895][ T1110] usb 5-1: config 0 descriptor?? [ 74.622458][ T4296] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 74.645102][ T4229] em28xx 1-1:0.0: Binding DVB extension [ 74.680340][ T4333] device syzkaller0 entered promiscuous mode [ 74.740793][ T4334] 0: reclassify loop, rule prio 0, protocol 800 [ 75.005447][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.013660][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.020826][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.028428][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.035910][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.043234][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.050931][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.058177][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.066912][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.074247][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.084399][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.091584][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.099184][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.106485][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.113958][ T4186] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 75.244759][ T23] usb 5-1: USB disconnect, device number 2 [ 75.682146][ T4327] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 75.705088][ T13] usb 1-1: USB disconnect, device number 2 [ 75.726654][ T13] em28xx 1-1:0.0: Disconnecting em28xx [ 75.752167][ T1110] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.795026][ T4229] em28xx 1-1:0.0: Registering input extension [ 75.822144][ T13] em28xx 1-1:0.0: Closing input extension [ 75.897094][ T13] em28xx 1-1:0.0: Freeing device [ 76.162185][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.195795][ T1110] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 76.392294][ T1110] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.411633][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 76.481871][ T1110] usb 2-1: Product: syz [ 76.512631][ T1110] usb 2-1: SerialNumber: syz [ 76.882795][ T4338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 76.897088][ T4338] netlink: 'syz.1.21': attribute type 7 has an invalid length. [ 76.906653][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 76.935335][ T4338] device team0 entered promiscuous mode [ 76.958933][ T4338] device team_slave_0 entered promiscuous mode [ 76.984305][ T4338] device team_slave_1 entered promiscuous mode [ 77.005709][ T4338] device bond0 entered promiscuous mode [ 77.017219][ T4338] device bond_slave_0 entered promiscuous mode [ 77.036129][ T4338] device bond_slave_1 entered promiscuous mode [ 77.065401][ T4338] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 77.085123][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 77.207381][ T1110] usb 2-1: USB disconnect, device number 2 [ 77.296844][ T4361] device syzkaller0 entered promiscuous mode [ 77.313046][ T4361] 0: reclassify loop, rule prio 0, protocol 800 [ 77.627800][ T4374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 77.638788][ T4374] netlink: 336 bytes leftover after parsing attributes in process `syz.2.37'. [ 78.242022][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.381477][ T4394] device syzkaller0 entered promiscuous mode [ 78.406189][ T4394] 0: reclassify loop, rule prio 0, protocol 800 [ 78.632853][ T1110] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 78.641890][ T1110] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 78.673284][ T1110] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 78.708925][ T1110] usb 3-1: config 220 has no interface number 2 [ 78.721910][ T1110] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.735975][ T1110] usb 3-1: config 220 interface 0 has no altsetting 0 [ 78.742898][ T1110] usb 3-1: config 220 interface 76 has no altsetting 0 [ 78.749900][ T1110] usb 3-1: config 220 interface 1 has no altsetting 0 [ 78.952118][ T1110] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 78.961896][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.978313][ T1110] usb 3-1: Product: syz [ 78.988204][ T1110] usb 3-1: Manufacturer: syz [ 78.998749][ T4406] binder: BINDER_SET_CONTEXT_MGR already set [ 79.008484][ T1110] usb 3-1: SerialNumber: syz [ 79.033233][ T4406] binder: 4405:4406 ioctl 4018620d 200000004a80 returned -16 [ 79.301922][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.403032][ T1110] usb 3-1: selecting invalid altsetting 0 [ 79.409868][ T1110] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 79.417936][ T1110] usb 3-1: No valid video chain found. [ 79.503399][ T1110] usb 3-1: selecting invalid altsetting 0 [ 79.509702][ T1110] usbtest: probe of 3-1:220.1 failed with error -22 [ 79.527683][ T1110] usb 3-1: USB disconnect, device number 2 [ 79.702155][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.918010][ T4418] tipc: Started in network mode [ 79.923760][ T4418] tipc: Node identity 76d96f6a8324, cluster identity 4711 [ 79.942181][ T1107] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 79.951448][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.960538][ T4424] process 'syz.2.54' launched './file0' with NULL argv: empty string added [ 79.960798][ T4418] tipc: Enabled bearer , priority 0 [ 79.975995][ T1107] usb 2-1: Product: syz [ 79.980173][ T1107] usb 2-1: Manufacturer: syz [ 79.986086][ T4425] device syzkaller0 entered promiscuous mode [ 80.001314][ T1107] usb 2-1: SerialNumber: syz [ 80.083973][ T4418] tipc: Resetting bearer [ 80.116659][ T4417] tipc: Resetting bearer [ 80.145979][ T4417] tipc: Disabling bearer [ 80.188445][ T4428] device syzkaller0 entered promiscuous mode [ 80.205232][ T4428] 0: reclassify loop, rule prio 0, protocol 800 [ 80.312724][ T4435] trusted_key: encrypted_key: master key parameter 'ult' is invalid [ 80.427256][ T1107] usb 2-1: MIDIStreaming interface descriptor not found [ 80.903559][ T1107] usb 2-1: USB disconnect, device number 3 [ 82.285423][ T4437] sched: RT throttling activated [ 82.444373][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 82.548889][ T4442] udevd[4442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.043021][ T4227] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 85.522026][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.953092][ T4564] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 85.992070][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 86.093019][ T4227] usb 3-1: not running at top speed; connect to a high speed hub [ 86.116428][ T4567] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.162462][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 86.173802][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.177196][ T4227] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.185963][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.220033][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 86.241334][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.261525][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 86.280106][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.318443][ T23] usb 5-1: config 0 descriptor?? [ 86.344275][ T4541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.403258][ T4227] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.423135][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.431213][ T4227] usb 3-1: Product: syz [ 86.436153][ T4227] usb 3-1: Manufacturer: syz [ 86.440761][ T4227] usb 3-1: SerialNumber: syz [ 86.595910][ T13] usb 5-1: USB disconnect, device number 3 [ 86.746562][ T4227] usb 3-1: USB disconnect, device number 3 [ 87.187831][ T4577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'. [ 87.970038][ T4585] syz.4.87 uses obsolete (PF_INET,SOCK_PACKET) [ 87.986949][ T4585] device syzkaller1 entered promiscuous mode [ 89.027157][ T4601] binder: BINDER_SET_CONTEXT_MGR already set [ 89.054151][ T4601] binder: 4600:4601 ioctl 4018620d 200000004a80 returned -16 [ 89.132465][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.324810][ T4610] loop5: detected capacity change from 0 to 7 [ 89.363810][ T4610] Dev loop5: unable to read RDB block 7 [ 89.384811][ T4610] loop5: unable to read partition table [ 89.392038][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 89.398075][ T7] cfg80211: failed to load regulatory.db [ 89.405336][ T4610] loop5: partition table beyond EOD, truncated [ 89.434466][ T4610] loop_reread_partitions: partition scan of loop5 (њљƒWхЁ™‰ќОУНИ*‹Ка œым%ѕЋЕ4FLQkнŠ5) failed (rc=-5) [ 89.687152][ T1110] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 89.707176][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.732991][ T1110] usb 3-1: Product: syz [ 89.760094][ T1110] usb 3-1: Manufacturer: syz [ 89.779377][ T1110] usb 3-1: SerialNumber: syz [ 89.827956][ T1110] usb 3-1: config 0 descriptor?? [ 89.881885][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.323859][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 90.443584][ T1110] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 90.451514][ T1110] dvb-usb: bulk message failed: -22 (4/0) [ 90.469188][ T1110] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.488307][ T1110] dvb-usb: bulk message failed: -22 (5/0) [ 90.552100][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 90.583070][ T1110] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.595939][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.604270][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.630152][ T1110] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 90.634319][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.665196][ T1110] usb 3-1: media controller created [ 90.668604][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 90.689212][ T4601] ODEBUG: Out of memory. ODEBUG disabled [ 90.696116][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 90.699075][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.707610][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 90.741925][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.769574][ T23] usb 4-1: config 0 descriptor?? [ 90.796420][ T1110] usb 3-1: selecting invalid altsetting 3 [ 90.805553][ T1110] ttusb2: set interface to alts=3 failed [ 90.812311][ T4614] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.862143][ T4601] syz.4.93 (4601): drop_caches: 2 [ 90.875867][ T1110] DVB: Unable to find symbol tda10086_attach() [ 90.888119][ T1110] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 90.932124][ T1110] dvb-usb: bulk message failed: -22 (4/0) [ 90.939384][ T1110] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.955782][ T1110] dvb-usb: bulk message failed: -22 (5/0) [ 90.961538][ T1110] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 90.973957][ T1110] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 90.982924][ T1110] usb 3-1: USB disconnect, device number 4 [ 91.165529][ T4268] usb 4-1: USB disconnect, device number 2 [ 91.195526][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.208946][ T1110] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 92.212995][ T23] usb 1-1: config 0 has no interfaces? [ 92.225246][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.243730][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.272629][ T23] usb 1-1: config 0 descriptor?? [ 92.451861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 92.471848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 93.949292][ T4665] loop2: detected capacity change from 0 to 7 [ 93.999090][ T4665] Dev loop2: unable to read RDB block 7 [ 94.048720][ T4665] loop2: AHDI p1 p3 [ 94.078023][ T4665] loop2: partition table partially beyond EOD, truncated [ 94.127610][ T4665] loop2: p1 start 2349049979 is beyond EOD, truncated [ 94.277749][ T4675] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 94.895256][ T4686] device syzkaller0 entered promiscuous mode [ 95.058209][ T1110] usb 1-1: USB disconnect, device number 3 [ 95.151843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 96.893662][ T4716] Zero length message leads to an empty skb [ 97.009979][ T4716] kvm: MONITOR instruction emulated as NOP! [ 97.050219][ T4722] device syzkaller0 entered promiscuous mode [ 97.063179][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.672101][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.862969][ T4226] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 97.922030][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 98.092351][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.109407][ T4752] device syzkaller0 entered promiscuous mode [ 98.111292][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.118377][ T4752] 0: reclassify loop, rule prio 0, protocol 800 [ 98.200854][ T4754] tipc: Enabled bearer , priority 0 [ 98.231876][ T4754] device syzkaller0 entered promiscuous mode [ 98.255495][ T4754] tipc: Resetting bearer [ 98.279970][ T4753] tipc: Resetting bearer [ 98.302162][ T4226] usb 1-1: not running at top speed; connect to a high speed hub [ 98.310267][ T23] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 98.325291][ T4753] tipc: Disabling bearer [ 98.331578][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.343322][ T23] usb 3-1: Product: syz [ 98.347523][ T23] usb 3-1: Manufacturer: syz [ 98.354690][ T23] usb 3-1: SerialNumber: syz [ 98.370820][ T23] usb 3-1: config 0 descriptor?? [ 98.389784][ T4760] device syzkaller0 entered promiscuous mode [ 98.415568][ T4226] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.612434][ T4226] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.631753][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.658645][ T4226] usb 1-1: Product: syz [ 98.673795][ T4226] usb 1-1: Manufacturer: syz [ 98.687009][ T23] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 98.699702][ T4226] usb 1-1: SerialNumber: syz [ 98.704273][ T4779] device syzkaller0 entered promiscuous mode [ 98.704435][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 98.719902][ T4779] 0: reclassify loop, rule prio 0, protocol 800 [ 98.763249][ T23] imon:send_packet: packet tx failed (-71) [ 98.792347][ T23] imon 3-1:0.0: panel buttons/knobs setup failed [ 98.872380][ T23] rc_core: IR keymap rc-imon-pad not found [ 98.878328][ T23] Registered IR keymap rc-empty [ 98.897333][ T23] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 98.916528][ T23] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 98.954796][ T23] imon:send_packet: packet tx failed (-71) [ 98.997550][ T23] imon 3-1:0.0: remote input dev register failed [ 99.015289][ T23] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 99.036325][ T4226] usb 1-1: USB disconnect, device number 4 [ 99.090172][ T23] imon 3-1:0.0: unable to initialize intf0, err 0 [ 99.090196][ T23] imon:imon_probe: failed to initialize context! [ 99.090208][ T23] imon 3-1:0.0: unable to register, err -19 [ 99.099973][ T23] usb 3-1: USB disconnect, device number 5 [ 99.113161][ T4793] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 99.155298][ T4793] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 99.166223][ T4793] team0: Failed to send options change via netlink (err -105) [ 99.178294][ T4793] team0: Port device netdevsim0 added [ 99.244672][ T4796] device syzkaller0 entered promiscuous mode [ 99.511943][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.648003][ T4818] netlink: 'syz.3.172': attribute type 21 has an invalid length. [ 99.670839][ T4818] netlink: 'syz.3.172': attribute type 6 has an invalid length. [ 99.688976][ T4818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.172'. [ 99.771910][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 99.909771][ T4829] device syzkaller0 entered promiscuous mode [ 99.922297][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.943443][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.131201][ T4846] tipc: Started in network mode [ 100.145447][ T4846] tipc: Node identity aeff2655abf5, cluster identity 4711 [ 100.158867][ T4846] tipc: Enabled bearer , priority 0 [ 100.168769][ T4846] device syzkaller0 entered promiscuous mode [ 100.187008][ T4852] fuse: Bad value for 'fd' [ 100.222130][ T23] usb 3-1: string descriptor 0 read error: -22 [ 100.237206][ T4846] tipc: Resetting bearer [ 100.238641][ T23] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 100.258411][ T4845] tipc: Resetting bearer [ 100.276361][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.290519][ T23] usb 3-1: config 0 descriptor?? [ 100.308186][ T4845] tipc: Disabling bearer [ 100.334915][ T23] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 100.431911][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 100.440245][ T23] imon:send_packet: packet tx failed (-71) [ 100.466485][ T4226] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.474127][ T23] imon 3-1:0.0: panel buttons/knobs setup failed [ 100.508036][ T4865] device syzkaller0 entered promiscuous mode [ 100.555657][ T4867] device syzkaller0 entered promiscuous mode [ 100.601977][ T23] rc_core: IR keymap rc-imon-pad not found [ 100.607992][ T23] Registered IR keymap rc-empty [ 100.628341][ T23] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 100.663477][ T23] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.722061][ T23] imon:send_packet: packet tx failed (-71) [ 100.767914][ T23] imon 3-1:0.0: remote input dev register failed [ 100.779600][ T23] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 100.806820][ T4882] fuse: Bad value for 'fd' [ 100.834304][ T23] imon 3-1:0.0: unable to initialize intf0, err 0 [ 100.843197][ T23] imon:imon_probe: failed to initialize context! [ 100.852780][ T23] imon 3-1:0.0: unable to register, err -19 [ 100.869950][ T23] usb 3-1: USB disconnect, device number 6 [ 101.051718][ T4894] tipc: Enabled bearer , priority 0 [ 101.082281][ T4226] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.097514][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.108968][ T4895] device syzkaller0 entered promiscuous mode [ 101.115600][ T4226] usb 1-1: Product: syz [ 101.134835][ T4226] usb 1-1: Manufacturer: syz [ 101.172631][ T4226] usb 1-1: SerialNumber: syz [ 101.181357][ T4894] tipc: Resetting bearer [ 101.226047][ T4893] tipc: Resetting bearer [ 101.253895][ T4893] tipc: Disabling bearer [ 101.490356][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 101.518546][ T4904] device syzkaller0 entered promiscuous mode [ 101.652682][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 101.805674][ T4908] device syzkaller0 entered promiscuous mode [ 101.833890][ T4914] fuse: Unknown parameter 'fD' [ 101.893660][ T4912] overlayfs: missing 'lowerdir' [ 102.015225][ T4920] trusted_key: encrypted_key: master key parameter 'ult' is invalid [ 102.046579][ T4922] IPVS: length: 8 != 5511463160 [ 102.941961][ T4268] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.092130][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 103.162670][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 103.169246][ T4955] fuse: Unknown parameter 'fD' [ 103.222147][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 103.235497][ T4955] overlayfs: missing 'lowerdir' [ 103.342075][ T4268] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.364074][ T4268] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 103.388938][ T4268] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.421869][ T4268] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 103.545766][ T4962] input: syz1 as /devices/virtual/input/input10 [ 103.582118][ T4268] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.598876][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.607359][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.619199][ T4268] usb 2-1: Product: syz [ 103.624423][ T4268] usb 2-1: Manufacturer: syz [ 103.665869][ T4937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.703088][ T4268] cdc_wdm 2-1:1.0: skipping garbage [ 103.716773][ T4268] cdc_wdm 2-1:1.0: skipping garbage [ 103.722597][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 103.740419][ T4268] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 103.782055][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 103.974803][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 104.011968][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 104.017468][ T7] usb 2-1: USB disconnect, device number 4 [ 104.062605][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 104.068744][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 104.220803][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 104.473002][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 104.503840][ T4226] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.597708][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.639260][ T4226] lan78xx: probe of 1-1:1.0 failed with error -71 [ 104.760628][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.781645][ T4226] usb 1-1: USB disconnect, device number 5 [ 104.789764][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 104.802338][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 104.832391][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 104.859376][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.864209][ T4985] fuse: Unknown parameter 'fD' [ 104.899639][ T23] usb 4-1: config 0 descriptor?? [ 104.932296][ T4953] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 104.952750][ T4985] overlayfs: missing 'lowerdir' [ 105.097550][ T4997] tipc: Started in network mode [ 105.125772][ T4997] tipc: Node identity 0a8c46b2fea4, cluster identity 4711 [ 105.150717][ T4997] tipc: Enabled bearer , priority 0 [ 105.188272][ T4999] device syzkaller0 entered promiscuous mode [ 105.194531][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.201944][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.209097][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.216314][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.217080][ T5000] device syzkaller0 entered promiscuous mode [ 105.223865][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.223909][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.223930][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.223950][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.223970][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.223990][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224010][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224029][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224050][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224069][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224089][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224110][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224128][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224147][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.224164][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.283619][ T4999] tipc: Resetting bearer [ 105.288642][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.322406][ T5000] 0: reclassify loop, rule prio 0, protocol 800 [ 105.323752][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.364160][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.371318][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.378498][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.388427][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.395719][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.402894][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.410047][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.418864][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 105.428153][ T23] usb 4-1: USB disconnect, device number 3 [ 105.435448][ T4996] tipc: Resetting bearer [ 105.463764][ T4996] tipc: Disabling bearer [ 106.077657][ T5014] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 106.127683][ T5015] Cannot find set identified by id 0 to match [ 106.218814][ T5019] binder: BINDER_SET_CONTEXT_MGR already set [ 106.260301][ T5014] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 106.289668][ T5015] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 106.336817][ T5019] binder: 5018:5019 ioctl 4018620d 200000004a80 returned -16 [ 106.393089][ T5014] team0: Failed to send options change via netlink (err -105) [ 106.498959][ T5014] team0: Port device netdevsim0 added [ 106.790718][ T5033] fuse: Unknown parameter 'fD' [ 106.853825][ T5033] overlayfs: missing 'lowerdir' [ 106.927601][ T5037] binder: 5032:5037 unknown command 1074553619 [ 107.004850][ T5037] binder: 5032:5037 ioctl c0306201 200000000540 returned -22 [ 107.122044][ T5043] device syzkaller0 entered promiscuous mode [ 107.151608][ T5043] 0: reclassify loop, rule prio 0, protocol 800 [ 107.589588][ T5055] binder_alloc: 5054: binder_alloc_buf, no vma [ 108.197518][ T5070] fuse: Unknown parameter 'fD' [ 108.210956][ T5070] overlayfs: missing 'lowerdir' [ 108.281536][ T5072] device syzkaller0 entered promiscuous mode [ 109.963439][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 110.052785][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 110.103699][ T146] Bluetooth: hci4: hardware error 0x00 [ 110.104045][ T5080] device syzkaller0 entered promiscuous mode [ 110.195342][ T5080] 0: reclassify loop, rule prio 0, protocol 800 [ 110.257804][ T5083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.271'. [ 110.272751][ T5083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.271'. [ 111.076569][ T5131] fuse: Bad value for 'fd' [ 111.180932][ T5139] loop2: detected capacity change from 0 to 256 [ 114.961984][ T4224] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.241917][ T4224] usb 5-1: Using ep0 maxpacket: 32 [ 115.362130][ T4224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.384108][ T4224] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 115.400174][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.521192][ T4224] usb 5-1: config 0 descriptor?? [ 118.380341][ T4224] usb 5-1: can't set config #0, error -71 [ 118.388062][ T4224] usb 5-1: USB disconnect, device number 5 [ 118.453289][ T5236] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 118.754139][ T5250] input: syz1 as /devices/virtual/input/input11 [ 119.561261][ T5286] IPv6: Can't replace route, no match found [ 119.861987][ T13] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 120.052296][ T5301] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 120.100551][ T5301] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 120.120660][ T5301] team0: Failed to send options change via netlink (err -105) [ 120.156673][ T5301] team0: Port device netdevsim0 added [ 120.393577][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.802184][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.961953][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.982316][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 120.983170][ T23] usb 1-1: config 0 descriptor?? [ 121.043215][ T23] cp210x 1-1:0.0: cp210x converter detected [ 121.102253][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.312260][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.341694][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.366245][ T13] usb 5-1: Product: syz [ 121.370443][ T13] usb 5-1: Manufacturer: syz [ 121.402201][ T13] usb 5-1: SerialNumber: syz [ 121.472061][ T5327] binder_alloc: 5323: binder_alloc_buf, no vma [ 121.702037][ T23] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 121.721269][ T23] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 121.799226][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 121.865900][ T23] usb 1-1: USB disconnect, device number 6 [ 121.870006][ T13] usb 5-1: USB disconnect, device number 6 [ 121.968077][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.121491][ T23] cp210x 1-1:0.0: device disconnected [ 122.295549][ T5342] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 122.353743][ T5340] tipc: Started in network mode [ 122.358645][ T5340] tipc: Node identity 7e08c7cbefd6, cluster identity 4711 [ 122.418194][ T5340] tipc: Enabled bearer , priority 0 [ 122.484074][ T5340] tipc: Resetting bearer [ 122.516067][ T5347] device syzkaller0 entered promiscuous mode [ 122.543302][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 122.570192][ T5339] tipc: Resetting bearer [ 122.603639][ T4226] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 122.621483][ T5339] tipc: Disabling bearer [ 122.972123][ T4226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.998560][ T4226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 123.019734][ T4226] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 123.048297][ T4226] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 123.119710][ T5373] device syzkaller0 entered promiscuous mode [ 123.176968][ T4224] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 123.332831][ T4226] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.459391][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 123.641380][ T4226] usb 4-1: Product: syz [ 123.714053][ T4226] usb 4-1: SerialNumber: syz [ 123.992204][ T5344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.228660][ T5344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.256013][ T5344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.935250][ T5426] tipc: Enabled bearer , priority 0 [ 124.957657][ T5344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.966049][ T5426] device syzkaller0 entered promiscuous mode [ 124.972586][ T5344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.107246][ T5426] tipc: Resetting bearer [ 125.672802][ T4226] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 125.684416][ T4226] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 125.867250][ T4226] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 125.867398][ T5425] tipc: Resetting bearer [ 125.935000][ T5425] tipc: Disabling bearer [ 126.019187][ T4226] usb 4-1: USB disconnect, device number 4 [ 126.039759][ T4226] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 126.447596][ T4440] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 126.639411][ T4440] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.823427][ T4268] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 126.832568][ T4268] Bluetooth: hci0: Injecting HCI hardware error event [ 126.839774][ T4186] Bluetooth: hci0: hardware error 0x00 [ 127.337801][ T5486] netlink: 136 bytes leftover after parsing attributes in process `syz.1.370'. [ 127.369912][ T5486] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 128.001980][ T4226] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.272073][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 128.400568][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.525967][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.628058][ T4227] Bluetooth: hci5: command 0x1003 tx timeout [ 128.641974][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 128.711670][ T4226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.730990][ T4226] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.741070][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.797849][ T4226] usb 2-1: config 0 descriptor?? [ 129.001789][ T5532] tipc: Enabled bearer , priority 0 [ 129.025582][ T5532] device syzkaller0 entered promiscuous mode [ 129.091119][ T5532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.378'. [ 129.126891][ T5532] tipc: Resetting bearer [ 129.142365][ T4226] usbhid 2-1:0.0: can't add hid device: -71 [ 129.148368][ T4226] usbhid: probe of 2-1:0.0 failed with error -71 [ 129.162126][ T5531] tipc: Resetting bearer [ 129.167329][ T4226] usb 2-1: USB disconnect, device number 5 [ 129.191033][ T5531] tipc: Disabling bearer [ 129.310327][ T5551] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 129.323469][ T5551] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 129.411492][ T5557] tipc: Enabled bearer , priority 0 [ 129.448118][ T5557] device syzkaller0 entered promiscuous mode [ 129.467838][ T5552] tipc: Resetting bearer [ 129.524706][ T5552] tipc: Disabling bearer [ 129.933404][ T5576] tipc: Enabled bearer , priority 0 [ 129.961044][ T5576] tipc: Resetting bearer [ 129.971769][ T5575] tipc: Disabling bearer [ 130.005452][ T4227] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.263159][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 130.312113][ T5604] tipc: Enabled bearer , priority 0 [ 130.319479][ T5604] device syzkaller0 entered promiscuous mode [ 130.330628][ T5603] tipc: Resetting bearer [ 130.346080][ T5603] tipc: Disabling bearer [ 130.392607][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 130.412771][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.429026][ T4227] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.439158][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 130.450665][ T4227] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 130.471942][ T4227] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 130.489332][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.525885][ T4227] usb 2-1: config 0 descriptor?? [ 130.552617][ T5569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.662171][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 130.668560][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 130.792887][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.800341][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.808435][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.815735][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.823905][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.831040][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.838372][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.846067][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.853370][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.860502][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.867694][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.876553][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.883768][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.890922][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.898244][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.905578][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.912872][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.920012][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.927875][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.935200][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.942414][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.949542][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.956848][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.964032][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.971165][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.978473][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.987007][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 130.995438][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 131.000769][ T4268] usb 2-1: USB disconnect, device number 6 [ 131.004851][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 131.015962][ T4189] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 131.383923][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 131.411715][ T5643] tipc: Enabled bearer , priority 0 [ 131.422172][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.429605][ T5643] tipc: Resetting bearer [ 131.434865][ T13] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 131.449617][ T5642] tipc: Disabling bearer [ 131.449890][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.472801][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.616856][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.639486][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.671910][ T13] usb 4-1: Product: syz [ 131.676119][ T13] usb 4-1: Manufacturer: syz [ 131.767919][ T13] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 131.988319][ T13] usb 4-1: USB disconnect, device number 5 [ 132.254197][ T5684] fuse: Bad value for 'fd' [ 132.369948][ T5687] tipc: Enabled bearer , priority 0 [ 132.411441][ T5687] tipc: Resetting bearer [ 132.421134][ T5686] tipc: Disabling bearer [ 132.681690][ T5695] device syzkaller0 entered promiscuous mode [ 132.742059][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 132.974787][ T5706] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 132.989335][ T5710] fuse: Bad value for 'fd' [ 133.034196][ T5706] device netdevsim0 entered promiscuous mode [ 133.076430][ T5706] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 133.107187][ T5706] team0: Failed to send options change via netlink (err -105) [ 133.120333][ T5706] team0: Port device netdevsim0 added [ 133.151972][ T5720] tipc: Enabled bearer , priority 0 [ 133.201761][ T5718] tipc: Enabled bearer , priority 0 [ 133.230824][ T5718] tipc: Resetting bearer [ 133.263295][ T5717] tipc: Disabling bearer [ 133.282984][ T5712] tipc: Disabling bearer [ 133.352169][ T5729] input: syz1 as /devices/virtual/input/input12 [ 133.731792][ T5743] device syzkaller0 entered promiscuous mode [ 133.902257][ T5747] device syzkaller0 entered promiscuous mode [ 133.953759][ T5747] 0: reclassify loop, rule prio 0, protocol 800 [ 134.424981][ T5762] tipc: Enabled bearer , priority 0 [ 134.526806][ T5764] device syzkaller0 entered promiscuous mode [ 134.659681][ T5764] tipc: Resetting bearer [ 134.718742][ T5759] tipc: Resetting bearer [ 134.819071][ T5759] tipc: Disabling bearer [ 135.465756][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.472277][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.390036][ T5798] device syzkaller0 entered promiscuous mode [ 136.409907][ T5798] 0: reclassify loop, rule prio 0, protocol 800 [ 137.079807][ T5817] device syzkaller0 entered promiscuous mode [ 137.125204][ T5812] Can't find ip_set type hash:i [ 137.231255][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 139.769194][ T5842] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 139.975534][ T5845] input: syz1 as /devices/virtual/input/input13 [ 140.063988][ T5847] device syzkaller0 entered promiscuous mode [ 140.691908][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.102100][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.115322][ T23] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 141.146172][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.165803][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.352722][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.392412][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.400438][ T23] usb 1-1: Product: syz [ 141.431750][ T23] usb 1-1: Manufacturer: syz [ 141.503062][ T23] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 141.584038][ T5875] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 143.336784][ T4268] usb 1-1: USB disconnect, device number 7 [ 143.422770][ T5899] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 143.432871][ T5899] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 143.631927][ T4227] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 144.051658][ T5916] fuse: Bad value for 'fd' [ 144.062017][ T4227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.091972][ T4227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.176563][ T4227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.246510][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.358396][ T5919] xt_CT: No such helper "snmp_trap" [ 144.552462][ T5926] binder_alloc: 5923: binder_alloc_buf, no vma [ 144.602033][ T4227] usb 4-1: usb_control_msg returned -32 [ 144.607749][ T4227] usbtmc 4-1:16.0: can't read capabilities [ 145.004991][ T5929] syzkaller1: tun_chr_ioctl cmd 21731 [ 145.258735][ T5937] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 145.271744][ T5935] input: syz1 as /devices/virtual/input/input14 [ 146.618626][ T4663] usb 4-1: USB disconnect, device number 6 [ 146.832315][ T5968] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 147.067900][ T5975] usb usb8: usbfs: process 5975 (syz.3.523) did not claim interface 0 before use [ 147.233270][ T5977] binder: BINDER_SET_CONTEXT_MGR already set [ 147.239394][ T5977] binder: 5976:5977 ioctl 4018620d 200000001000 returned -16 [ 147.387268][ T5979] device syzkaller0 entered promiscuous mode [ 147.654480][ T5984] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 147.931839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 147.951832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.961832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.971834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.981831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.991830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 148.001830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 148.719935][ T6001] tipc: Enabled bearer , priority 0 [ 148.780384][ T5999] input: syz1 as /devices/virtual/input/input15 [ 148.805624][ T6001] tipc: Resetting bearer [ 148.881790][ T6000] tipc: Disabling bearer [ 149.136481][ T6007] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 150.048044][ T6030] input: syz1 as /devices/virtual/input/input16 [ 150.191971][ T4268] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 150.243781][ T6038] fuse: Bad value for 'group_id' [ 150.466296][ T6046] binder: BINDER_SET_CONTEXT_MGR already set [ 150.486260][ T6046] binder: 6045:6046 ioctl 4018620d 200000001000 returned -16 [ 150.642512][ T4268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.852001][ T4268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.864264][ T4268] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 150.877414][ T4268] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 151.022063][ T4268] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.038950][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 151.063752][ T4268] usb 2-1: Product: syz [ 151.076940][ T4268] usb 2-1: SerialNumber: syz [ 151.122787][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.352161][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.371130][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.380398][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.555'. [ 151.389580][ T6065] input: syz1 as /devices/virtual/input/input17 [ 151.881936][ T4228] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 152.077367][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.100496][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.248567][ T6091] fuse: Bad value for 'group_id' [ 152.292200][ T4228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.306710][ T4228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.349479][ T4228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.369122][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.502060][ T4268] cdc_ncm 2-1:1.0: failed to get mac address [ 152.542217][ T4268] cdc_ncm 2-1:1.0: bind() failure [ 152.587463][ T4268] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 152.617186][ T4268] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 152.727677][ T4268] usbtest: probe of 2-1:1.1 failed with error -71 [ 152.752067][ T4228] usb 1-1: usb_control_msg returned -32 [ 152.760523][ T4228] usbtmc 1-1:16.0: can't read capabilities [ 152.770063][ T4268] usb 2-1: USB disconnect, device number 7 [ 153.776676][ T6119] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 153.786055][ T6119] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 154.204749][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.480416][ T6131] device syzkaller0 entered promiscuous mode [ 154.572253][ T13] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 154.601963][ T13] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 154.602740][ T4228] usb 1-1: USB disconnect, device number 8 [ 154.626193][ T13] usb 3-1: config 171 has no interface number 0 [ 154.662218][ T13] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 154.730943][ T13] usb 3-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 155.602418][ T13] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 155.629844][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.660982][ T13] usb 3-1: Product: syz [ 155.671897][ T13] usb 3-1: Manufacturer: syz [ 155.676536][ T13] usb 3-1: SerialNumber: syz [ 155.732281][ T6127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.782693][ T6146] device syzkaller0 entered promiscuous mode [ 156.121087][ T6159] device syzkaller0 entered promiscuous mode [ 156.326405][ T26] audit: type=1326 audit(1777104715.366:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.348449][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.407183][ T26] audit: type=1326 audit(1777104715.366:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.422208][ T4227] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 156.467345][ T26] audit: type=1326 audit(1777104715.396:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.638449][ T26] audit: type=1326 audit(1777104715.396:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.732105][ T13] ath6kl: Failed to submit usb control message: -71 [ 156.738765][ T13] ath6kl: unable to send the bmi data to the device: -71 [ 156.778609][ T13] ath6kl: Unable to send get target info: -71 [ 156.785157][ T26] audit: type=1326 audit(1777104715.396:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.814748][ T13] ath6kl: Failed to init ath6kl core: -71 [ 156.838108][ T13] ath6kl_usb: probe of 3-1:171.109 failed with error -71 [ 156.866097][ T13] usb 3-1: USB disconnect, device number 7 [ 156.872696][ T4227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.887618][ T26] audit: type=1326 audit(1777104715.396:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.924570][ T4227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.943902][ T4227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.955119][ T26] audit: type=1326 audit(1777104715.396:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 156.984036][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.108047][ T26] audit: type=1326 audit(1777104715.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 157.133357][ T26] audit: type=1326 audit(1777104715.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 157.889680][ T26] audit: type=1326 audit(1777104715.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c158cdd9 code=0x7ffc0000 [ 157.982062][ T4227] usb 4-1: usb_control_msg returned -32 [ 157.987666][ T4227] usbtmc 4-1:16.0: can't read capabilities [ 158.960562][ T6186] device syzkaller0 entered promiscuous mode [ 159.308613][ T6193] device syzkaller0 entered promiscuous mode [ 159.327802][ T6195] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 159.351336][ T6195] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 159.369608][ T1110] usb 4-1: USB disconnect, device number 7 [ 159.777036][ T6209] loop2: detected capacity change from 0 to 256 [ 159.901879][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.973523][ T6214] binder: BINDER_SET_CONTEXT_MGR already set [ 159.995721][ T6214] binder: 6213:6214 ioctl 4018620d 200000004a80 returned -16 [ 160.807986][ T6219] device syzkaller0 entered promiscuous mode [ 160.826557][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 160.934993][ T6223] device syzkaller0 entered promiscuous mode [ 160.962125][ T23] usb 1-1: config 0 has no interfaces? [ 161.142069][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.168866][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.211867][ T23] usb 1-1: Product: syz [ 161.234738][ T23] usb 1-1: Manufacturer: syz [ 161.249721][ T23] usb 1-1: SerialNumber: syz [ 161.268506][ T23] usb 1-1: config 0 descriptor?? [ 161.499763][ T6242] device syzkaller0 entered promiscuous mode [ 163.017292][ T4268] usb 1-1: USB disconnect, device number 9 [ 163.406789][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 163.418072][ T6259] device syzkaller0 entered promiscuous mode [ 163.451026][ T6265] binder: BINDER_SET_CONTEXT_MGR already set [ 163.498002][ T6265] binder: 6264:6265 ioctl 4018620d 200000004a80 returned -16 [ 163.663302][ T6271] tipc: Enabled bearer , priority 0 [ 163.692503][ T6271] device syzkaller0 entered promiscuous mode [ 163.713673][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.624'. [ 163.750057][ T6271] tipc: Resetting bearer [ 163.768910][ T6274] device syzkaller0 entered promiscuous mode [ 163.798370][ T6270] tipc: Resetting bearer [ 163.823478][ T6270] tipc: Disabling bearer [ 164.278621][ T6263] device vlan0 entered promiscuous mode [ 164.307756][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 165.553002][ T4268] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.745526][ T6292] tipc: Enabling of bearer rejected, failed to enable media [ 165.822861][ T4268] usb 4-1: Using ep0 maxpacket: 8 [ 165.861276][ T6303] device syzkaller0 entered promiscuous mode [ 165.875754][ T6303] 0: reclassify loop, rule prio 0, protocol 800 [ 165.962068][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 165.983839][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.020527][ T4268] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.044233][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 166.061264][ T6311] binder: BINDER_SET_CONTEXT_MGR already set [ 166.062860][ T4268] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.077534][ T6311] binder: 6310:6311 ioctl 4018620d 200000004a80 returned -16 [ 166.119109][ T4268] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 166.148173][ T4268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.173297][ T6315] netlink: 144 bytes leftover after parsing attributes in process `syz.2.634'. [ 166.210164][ T6317] input: syz1 as /devices/virtual/input/input18 [ 166.211055][ T4268] usb 4-1: config 0 descriptor?? [ 166.253906][ T6287] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.375761][ T4186] ================================================================== [ 166.384224][ T4186] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 166.392090][ T4186] Read of size 1 at addr ffff888075113c07 by task kworker/u5:1/4186 [ 166.400084][ T4186] [ 166.402486][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 166.410049][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.420125][ T4186] Workqueue: hci2 hci_rx_work [ 166.424853][ T4186] Call Trace: [ 166.428151][ T4186] [ 166.431099][ T4186] dump_stack_lvl+0x188/0x250 [ 166.435800][ T4186] ? show_regs_print_info+0x20/0x20 [ 166.441015][ T4186] ? load_image+0x400/0x400 [ 166.445533][ T4186] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 166.450216][ T6321] device syzkaller0 entered promiscuous mode [ 166.451013][ T4186] ? mutex_lock_io_nested+0x60/0x60 [ 166.462208][ T4186] print_address_description+0x60/0x2d0 [ 166.467800][ T4186] ? hci_le_meta_evt+0x133f/0x3c90 [ 166.472933][ T4186] kasan_report+0xdf/0x130 [ 166.477381][ T4186] ? hci_le_meta_evt+0x133f/0x3c90 [ 166.482528][ T4186] hci_le_meta_evt+0x133f/0x3c90 [ 166.487505][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 166.493589][ T4186] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 166.499236][ T4186] ? mark_lock+0x94/0x320 [ 166.503587][ T4186] ? mutex_unlock+0x10/0x10 [ 166.508125][ T4186] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.514135][ T4186] ? lock_chain_count+0x20/0x20 [ 166.519018][ T4186] ? __rwlock_init+0x140/0x140 [ 166.523797][ T4186] hci_event_packet+0xe48/0x1370 [ 166.528834][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 166.534057][ T4186] ? rcu_lock_release+0x20/0x20 [ 166.538927][ T4186] ? hci_send_to_monitor+0x9c/0x4a0 [ 166.544167][ T4186] hci_rx_work+0x255/0xa10 [ 166.548616][ T4186] process_one_work+0x85f/0x1010 [ 166.553599][ T4186] ? worker_detach_from_pool+0x240/0x240 [ 166.559252][ T4186] ? lockdep_hardirqs_off+0x70/0x100 [ 166.564559][ T4186] ? _raw_spin_lock_irq+0xb7/0xf0 [ 166.569602][ T4186] ? _raw_spin_lock_irqsave+0x100/0x100 [ 166.575164][ T4186] ? wq_worker_running+0x97/0x170 [ 166.580208][ T4186] worker_thread+0xaa6/0x1290 [ 166.584931][ T4186] kthread+0x436/0x520 [ 166.589006][ T4186] ? rcu_lock_release+0x20/0x20 [ 166.593862][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 166.598468][ T4186] ret_from_fork+0x1f/0x30 [ 166.602911][ T4186] [ 166.605959][ T4186] [ 166.608283][ T4186] Allocated by task 6324: [ 166.612624][ T4186] __kasan_kmalloc+0xb5/0xf0 [ 166.617220][ T4186] __alloc_skb+0x22c/0x750 [ 166.621653][ T4186] vhci_write+0xbc/0x450 [ 166.625921][ T4186] vfs_write+0x745/0xd60 [ 166.630159][ T4186] ksys_write+0x152/0x260 [ 166.634483][ T4186] do_syscall_64+0x4c/0xa0 [ 166.638900][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.644812][ T4186] [ 166.647132][ T4186] Last potentially related work creation: [ 166.652836][ T4186] kasan_save_stack+0x35/0x60 [ 166.657528][ T4186] kasan_record_aux_stack+0xb8/0x100 [ 166.662828][ T4186] kvfree_call_rcu+0x105/0x7d0 [ 166.667600][ T4186] neigh_remove_one+0x4e8/0x5f0 [ 166.672457][ T4186] ___neigh_create+0x468/0x2250 [ 166.677311][ T4186] ip6_finish_output2+0x9f6/0x1510 [ 166.682428][ T4186] ndisc_send_skb+0xc2a/0x1500 [ 166.687182][ T4186] addrconf_rs_timer+0x2d1/0x630 [ 166.692102][ T4186] call_timer_fn+0x17b/0x540 [ 166.696680][ T4186] __run_timers+0x53e/0x800 [ 166.701165][ T4186] run_timer_softirq+0x63/0xf0 [ 166.705911][ T4186] handle_softirqs+0x339/0x830 [ 166.710658][ T4186] __irq_exit_rcu+0x13b/0x230 [ 166.715319][ T4186] irq_exit_rcu+0x5/0x20 [ 166.719545][ T4186] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 166.725162][ T4186] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.731126][ T4186] [ 166.733432][ T4186] The buggy address belongs to the object at ffff888075113800 [ 166.733432][ T4186] which belongs to the cache kmalloc-1k of size 1024 [ 166.747467][ T4186] The buggy address is located 7 bytes to the right of [ 166.747467][ T4186] 1024-byte region [ffff888075113800, ffff888075113c00) [ 166.761163][ T4186] The buggy address belongs to the page: [ 166.766789][ T4186] page:ffffea0001d44400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75110 [ 166.776924][ T4186] head:ffffea0001d44400 order:3 compound_mapcount:0 compound_pincount:0 [ 166.785229][ T4186] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 166.793201][ T4186] raw: 00fff00000010200 0000000000000000 0000000d00000001 ffff888016c41dc0 [ 166.801772][ T4186] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 166.810332][ T4186] page dumped because: kasan: bad access detected [ 166.816721][ T4186] page_owner tracks the page as allocated [ 166.822420][ T4186] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4225, ts 68837271422, free_ts 68820796215 [ 166.839418][ T4186] get_page_from_freelist+0x1bbd/0x1ca0 [ 166.844955][ T4186] __alloc_pages+0x1ee/0x480 [ 166.849535][ T4186] new_slab+0xc0/0x4b0 [ 166.853588][ T4186] ___slab_alloc+0x80a/0xdd0 [ 166.858158][ T4186] __kmalloc+0x1cd/0x330 [ 166.862389][ T4186] ___neigh_create+0x6d2/0x2250 [ 166.867243][ T4186] ip6_finish_output2+0x9f6/0x1510 [ 166.872352][ T4186] NF_HOOK+0x163/0x460 [ 166.876415][ T4186] mld_sendpack+0x6f2/0xc00 [ 166.880918][ T4186] mld_ifc_work+0x836/0xb40 [ 166.885421][ T4186] process_one_work+0x85f/0x1010 [ 166.890351][ T4186] worker_thread+0xaa6/0x1290 [ 166.895014][ T4186] kthread+0x436/0x520 [ 166.899070][ T4186] ret_from_fork+0x1f/0x30 [ 166.903471][ T4186] page last free stack trace: [ 166.908137][ T4186] free_unref_page_prepare+0x637/0x6c0 [ 166.913602][ T4186] free_unref_page+0x8f/0x2a0 [ 166.918278][ T4186] __unfreeze_partials+0x1a5/0x200 [ 166.923379][ T4186] put_cpu_partial+0x12d/0x190 [ 166.928131][ T4186] qlist_free_all+0x35/0x90 [ 166.932623][ T4186] kasan_quarantine_reduce+0x150/0x160 [ 166.938068][ T4186] __kasan_slab_alloc+0x2f/0xd0 [ 166.942909][ T4186] slab_post_alloc_hook+0x4c/0x380 [ 166.948009][ T4186] kmem_cache_alloc+0x100/0x290 [ 166.952845][ T4186] sock_alloc_inode+0x17/0xb0 [ 166.957506][ T4186] new_inode_pseudo+0x5f/0x210 [ 166.962254][ T4186] __sock_create+0x129/0x900 [ 166.966828][ T4186] __sys_socket+0xe2/0x170 [ 166.971233][ T4186] __x64_sys_socket+0x76/0x80 [ 166.975894][ T4186] do_syscall_64+0x4c/0xa0 [ 166.980299][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.986177][ T4186] [ 166.988486][ T4186] Memory state around the buggy address: [ 166.994096][ T4186] ffff888075113b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.002144][ T4186] ffff888075113b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.010187][ T4186] >ffff888075113c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.018227][ T4186] ^ [ 167.022275][ T4186] ffff888075113c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.030321][ T4186] ffff888075113d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.038365][ T4186] ================================================================== [ 167.046404][ T4186] Disabling lock debugging due to kernel taint [ 167.052569][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.061018][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.070092][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.077882][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.085249][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.092614][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.099823][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.107139][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.114346][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.114345][ T4232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.129246][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.136526][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.146102][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.151767][ T4186] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.153303][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.160423][ T4186] CPU: 1 PID: 4186 Comm: kworker/u5:1 Tainted: G B syzkaller #0 [ 167.160446][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.160457][ T4186] Workqueue: hci2 hci_rx_work [ 167.168582][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 167.176479][ T4186] Call Trace: [ 167.176489][ T4186] [ 167.176495][ T4186] dump_stack_lvl+0x188/0x250 [ 167.176516][ T4186] ? show_regs_print_info+0x20/0x20 [ 167.176530][ T4186] ? load_image+0x400/0x400 [ 167.176547][ T4186] panic+0x2e5/0x810 [ 167.176564][ T4186] ? bpf_jit_dump+0xd0/0xd0 [ 167.176579][ T4186] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 167.176595][ T4186] ? _raw_spin_unlock+0x40/0x40 [ 167.176609][ T4186] ? hci_le_meta_evt+0x133f/0x3c90 [ 167.176624][ T4186] check_panic_on_warn+0x80/0xa0 [ 167.176641][ T4186] ? hci_le_meta_evt+0x133f/0x3c90 [ 167.176656][ T4186] end_report+0x6d/0xf0 [ 167.176673][ T4186] kasan_report+0x102/0x130 [ 167.176689][ T4186] ? hci_le_meta_evt+0x133f/0x3c90 [ 167.176705][ T4186] hci_le_meta_evt+0x133f/0x3c90 [ 167.176726][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 167.176743][ T4186] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 167.176762][ T4186] ? mark_lock+0x94/0x320 [ 167.176776][ T4186] ? mutex_unlock+0x10/0x10 [ 167.176793][ T4186] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.176813][ T4186] ? lock_chain_count+0x20/0x20 [ 167.176830][ T4186] ? __rwlock_init+0x140/0x140 [ 167.176846][ T4186] hci_event_packet+0xe48/0x1370 [ 167.176860][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 167.176880][ T4186] ? rcu_lock_release+0x20/0x20 [ 167.176897][ T4186] ? hci_send_to_monitor+0x9c/0x4a0 [ 167.176915][ T4186] hci_rx_work+0x255/0xa10 [ 167.176937][ T4186] process_one_work+0x85f/0x1010 [ 167.176958][ T4186] ? worker_detach_from_pool+0x240/0x240 [ 167.176974][ T4186] ? lockdep_hardirqs_off+0x70/0x100 [ 167.176992][ T4186] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.177007][ T4186] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.177024][ T4186] ? wq_worker_running+0x97/0x170 [ 167.177038][ T4186] worker_thread+0xaa6/0x1290 [ 167.177060][ T4186] kthread+0x436/0x520 [ 167.177071][ T4186] ? rcu_lock_release+0x20/0x20 [ 167.177084][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 167.177097][ T4186] ret_from_fork+0x1f/0x30 [ 167.177116][ T4186] [ 167.177396][ T4186] Kernel Offset: disabled [ 167.394184][ T4186] Rebooting in 86400 seconds..