last executing test programs: 19.495368616s ago: executing program 4 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 15.591465401s ago: executing program 2 (id=826): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x3, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000914000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000240)=@ethtool_cmd={0x29, 0x8, 0x7fff, 0x6, 0x99, 0x34, 0xc, 0x3, 0x2, 0x80, 0x2, 0xc, 0x1, 0x8, 0x40, 0x0, [0x5, 0x28000]}}) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a004b0100000000095bb5ece7031af1192be9a90d5ffc496247943fcdaa93db2bba66a0eb562ab1ac74db9c898d0912bca794a862126f6562801d", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r0], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x4054) 12.105857565s ago: executing program 4 (id=836): mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f0000000300)={0x1000f9, 0x1001f5, 0x40000}, 0x61) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000080000000000000000000000000000000000000000065d3ab8301ed1fe6dbb17b6f0c88aa992f7a7e70131a0f54b39ddcfc5f20148e65770a3ff8aa995246cb32e2c65e40964bbf7ef31b6dce337f9497c79545f75d2e7310af1b65d95d57836fd80054fb35fe405a97ca0301414ac87277cb33d068abb8c0929f098ab450a0fd68d5e3d3d39499d2a90f5f164d9c380c6d432acd321cea903f4b534f6bba79f325af7ceed4bf1a8b66dcee423670dce631e3e2ebf2bf49966f9a0347"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000010) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002040, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59cf0000000001000000081000001c000600010002000000180005ffef0000000800090079070000"], 0x30}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 11.920304684s ago: executing program 1 (id=838): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffe, 0x1000, @mcast2, 0x5}, 0x1c) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x19) 11.705753805s ago: executing program 1 (id=840): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) 11.464122127s ago: executing program 1 (id=842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r6 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) 10.180781372s ago: executing program 2 (id=846): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x133d, 0x0, 0x8, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000000), 0x12) 8.344296593s ago: executing program 2 (id=847): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 7.285628546s ago: executing program 2 (id=850): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffe, 0x1000, @mcast2, 0x5}, 0x1c) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x19) 7.086495376s ago: executing program 4 (id=851): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.085330186s ago: executing program 2 (id=852): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0042f5}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)='3', 0x1, 0x5, 0x0, 0x2}]) 5.891487596s ago: executing program 4 (id=856): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x3, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000914000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000240)=@ethtool_cmd={0x29, 0x8, 0x7fff, 0x6, 0x99, 0x34, 0xc, 0x3, 0x2, 0x80, 0x2, 0xc, 0x1, 0x8, 0x40, 0x0, [0x5, 0x28000]}}) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a004b0100000000095bb5ece7031af1192be9a90d5ffc496247943fcdaa93db2bba66a0eb562ab1ac74db9c898d0912bca794a862126f6562801d", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r0], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x4054) 5.706348475s ago: executing program 2 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = io_uring_setup(0x7939, 0x0) mmap(&(0x7f0000beb000/0x4000)=nil, 0x4000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = timerfd_create(0x0, 0x80000) read(r5, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000040)=0x8004) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="32000000812aa342a6000000080000000200000000000000d6b4e51abc3aa7d629d073eeae5d6857befce683921989b9e241afec5a3d364e23f047270e5545f259fcc12ab02e3fba7f1bb17d80a57eb1a28ec952ad4a53f838ef053d5fcbb00d6fa6", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom(r7, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40480, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010429bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r8, @ANYBLOB="a9ce17858885cd64ebfc603092f036cfff9faabb9b827bcace1ce41e"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.694947885s ago: executing program 0 (id=861): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x1}, {0x0, 0x6}}}}, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f6164205f235a66756c742074727573747175656e636572320020303030edb11a5f324d303030300500000030303620663365370e626600"], 0x43, r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x804) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.947368983s ago: executing program 3 (id=862): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffff31, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.756212712s ago: executing program 3 (id=863): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffe, 0x1000, @mcast2, 0x5}, 0x1c) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x19) 2.708608845s ago: executing program 0 (id=864): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="4e92165c66c4b11d1db22ce528f774b0", 0x10) 2.584877331s ago: executing program 3 (id=865): syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd84, 0x2, 0x4, 0x5, 0xa5, 0x100, 0x4, 0x4, 0x0, 0x10, 0x1, 0x4, 0xc12, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES16], 0x20}}, 0x2404c850) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.496364745s ago: executing program 0 (id=866): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.495997915s ago: executing program 1 (id=867): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000001180), 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000480)=[0xf], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.480746306s ago: executing program 4 (id=868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xc, 0xc9}}}, 0x6) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x222102, 0x0) 1.597455301s ago: executing program 3 (id=869): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) r5 = syz_io_uring_setup(0x895, &(0x7f0000000200)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.456230128s ago: executing program 4 (id=870): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00\x00\x02'}, {0x20, '\xb0!'}, {0x20, 'GP\xd4\x82h\xb2\xc0\x00\xfce\"\xefL\x00'}]}, 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x2}, {}, {0x0, 0x54b}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0xffffffff}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x80}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0x5}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) 1.300169115s ago: executing program 1 (id=871): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x4, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.266971027s ago: executing program 0 (id=872): syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a"], 0x48) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd84, 0x2, 0x4, 0x5, 0xa5, 0x100, 0x4, 0x4, 0x0, 0x10, 0x1, 0x4, 0xc12, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 855.579987ms ago: executing program 0 (id=873): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x0, 0x6}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 275.319687ms ago: executing program 3 (id=874): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) socket$unix(0x1, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 100.897695ms ago: executing program 1 (id=875): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x1}, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sendmsg$inet(r3, 0x0, 0x4008040) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000480)={0x7, 0x0, [{0xbf9, 0x0, 0xffffffffffffff9f}, {0x2b2, 0x0, 0xab40}, {0x9c8, 0x0, 0xfffffffffffffffa}, {0x581, 0x0, 0x81}, {0x636, 0x0, 0x9}, {0x40000003, 0x0, 0xa65}, {0xbc1, 0x0, 0x82}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x7) 248.72µs ago: executing program 0 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r3, 0x3514, 0x9141, 0x69, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) 0s ago: executing program 3 (id=877): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/47, 0x304000, 0x1000, 0x0, 0x3}, 0x1c) r2 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xd3fc6000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 48.641263][ T4172] cgroup: Unknown subsys name 'net' [ 48.778273][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.985370][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.372118][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.429379][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.439756][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.460918][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.507544][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.610110][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.617410][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.625907][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.640197][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.647314][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.655338][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.663234][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.670290][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.678094][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.694833][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.701993][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.710341][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.724007][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.731079][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.739353][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.746379][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.753703][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.761391][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.779070][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.786186][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.794400][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.814655][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.835679][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.842838][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.851944][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.860148][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.889858][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.908144][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.919518][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.932678][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.940016][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.948004][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.958095][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.979780][ T4188] team0: Port device team_slave_0 added [ 51.987779][ T4188] team0: Port device team_slave_1 added [ 51.993921][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.001029][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.008742][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.022811][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.040509][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.081878][ T4192] team0: Port device team_slave_0 added [ 52.090101][ T4185] team0: Port device team_slave_0 added [ 52.103614][ T4185] team0: Port device team_slave_1 added [ 52.109988][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.116980][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.142996][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.162446][ T4192] team0: Port device team_slave_1 added [ 52.182929][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.192677][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.199691][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.225758][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.238868][ T4186] team0: Port device team_slave_0 added [ 52.258085][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.272765][ T4186] team0: Port device team_slave_1 added [ 52.286060][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.293014][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.319264][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.331319][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.338438][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.364406][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.409939][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.417264][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.443294][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.455075][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.462019][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.488012][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.508214][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.515303][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.522266][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.529349][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.555476][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.567872][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.574903][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.600885][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.621481][ T4187] team0: Port device team_slave_0 added [ 52.660418][ T4187] team0: Port device team_slave_1 added [ 52.682502][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.689431][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.696728][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.705161][ T4192] Cannot create hsr debugfs directory [ 52.714079][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.720999][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.727695][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.735579][ T4185] Cannot create hsr debugfs directory [ 52.758772][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.765552][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.772031][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.782478][ T4186] Cannot create hsr debugfs directory [ 52.822304][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.829567][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.855532][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.894687][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.901662][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.927708][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.054290][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.060930][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.070257][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.077926][ T4187] Cannot create hsr debugfs directory [ 53.124007][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.128740][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 53.133475][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 53.136507][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 53.144023][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.276134][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.287546][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.300695][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.314550][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.355860][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.375569][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.385111][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.401645][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.469020][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.481311][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.490815][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.508820][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.538669][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.577049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.586879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.595859][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.610729][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.622129][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.647547][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.656467][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.666628][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.673934][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682346][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.715531][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.727138][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.736411][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.745619][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.752675][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.760435][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.774360][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.784514][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.804774][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.816445][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.825731][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.839777][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.848372][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.857163][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.865946][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.875014][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.888112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.896886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.906393][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.930837][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.944504][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.956210][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.971505][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.981051][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.994508][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.005129][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.030348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.046618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.058265][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.065352][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.073632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.082146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.091209][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.098288][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.106614][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.132719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.141407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.152268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.184407][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.199358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.210961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.220694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.229671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.238499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.246151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.254672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.276833][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.290771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.301098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.321261][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.339776][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.358929][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.368613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.377608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.386016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.396962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.416402][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.444914][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.453645][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.460718][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.470646][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.511648][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.521225][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.532216][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.539487][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.547774][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.556725][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.566208][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.575752][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.584805][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.606614][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.633914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.642591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.666622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.682403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.703062][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.718486][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.730133][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.738941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.748537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.761240][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.776503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.784944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.800157][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.819850][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.828840][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.837555][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.851249][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.859448][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.868881][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.877656][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.886929][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.894016][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.901809][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.910989][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.919695][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.926765][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.935788][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.944610][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.952897][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.960105][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.968590][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.977548][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.016512][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.026770][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.037072][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.044244][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.054308][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.063098][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.072551][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.081455][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.091791][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.100780][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.109802][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.119387][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.129001][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.147947][ T4186] device veth0_vlan entered promiscuous mode [ 55.157430][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.168595][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.177609][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.186219][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.195011][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.204025][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 55.208841][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.210131][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 55.218781][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.231557][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 55.231843][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.237683][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 55.237760][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 55.257988][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.273595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.282224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.310595][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.324824][ T4186] device veth1_vlan entered promiscuous mode [ 55.340373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.349598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.358438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.367008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.375892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.384167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.391588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.399377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.408187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.416945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.426108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.434753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.443100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.453863][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.478013][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.487473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.499043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.507732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.520142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.531400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.546734][ T4188] device veth0_vlan entered promiscuous mode [ 55.590026][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.600857][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.638046][ T4186] device veth0_macvtap entered promiscuous mode [ 55.656552][ T4188] device veth1_vlan entered promiscuous mode [ 55.671555][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.682640][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.700048][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.718105][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.727053][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.734764][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.742292][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.750247][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.758360][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.768164][ T4187] device veth0_vlan entered promiscuous mode [ 55.792690][ T4187] device veth1_vlan entered promiscuous mode [ 55.803326][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.811327][ T4186] device veth1_macvtap entered promiscuous mode [ 55.840389][ T4188] device veth0_macvtap entered promiscuous mode [ 55.875696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.884864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.892845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.902310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.910979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.920263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.934240][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.941827][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.954124][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.970567][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.982911][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.000743][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.010975][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.021868][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.030602][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.039466][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.049831][ T4188] device veth1_macvtap entered promiscuous mode [ 56.058035][ T4187] device veth0_macvtap entered promiscuous mode [ 56.078758][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.087315][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.097808][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.106614][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.118040][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.127675][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.137422][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.146408][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.155821][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.184182][ T4187] device veth1_macvtap entered promiscuous mode [ 56.205377][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.218185][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.229961][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.241714][ T4185] device veth0_vlan entered promiscuous mode [ 56.260461][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.268679][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.277953][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.286999][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.296694][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.305400][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.314650][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.323342][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.331237][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.343109][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.355444][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.366944][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.392479][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.402742][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.414753][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.424825][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.433796][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.441515][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.452044][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.460927][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.473951][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.482670][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.500048][ T4185] device veth1_vlan entered promiscuous mode [ 56.508408][ T4192] device veth0_vlan entered promiscuous mode [ 56.519340][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.532462][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.545305][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.555678][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.566584][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.580298][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.610133][ T4192] device veth1_vlan entered promiscuous mode [ 56.626411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.635301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.650939][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.662260][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.672343][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.682896][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.694917][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.723621][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.732775][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.747762][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.757013][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.768752][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.777619][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.788384][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.797347][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.815633][ T4185] device veth0_macvtap entered promiscuous mode [ 56.825733][ T4185] device veth1_macvtap entered promiscuous mode [ 56.837640][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.843101][ T4192] device veth0_macvtap entered promiscuous mode [ 56.856793][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.882232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.891424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.899706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.908344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.917454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.930818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.940550][ T4192] device veth1_macvtap entered promiscuous mode [ 56.977648][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.989275][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999435][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.010218][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.020282][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.030981][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.042219][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.072665][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.084664][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.095460][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.105958][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.116572][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.127528][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.137609][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.148311][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.159309][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.168600][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.169697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.183794][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.197288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.208048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.216904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.226118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.234742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.246200][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.257086][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.267151][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.277922][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.288265][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 57.293826][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.294408][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 57.310219][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.311972][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 57.324796][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.327168][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 57.340639][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 57.352559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.362352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.379526][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.389533][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.398402][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.407876][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.425581][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.436680][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.447187][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.458279][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468302][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.479346][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.489491][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.500203][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.511934][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.561076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.565665][ T3048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.590561][ T3048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.598077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.620691][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.630995][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.640120][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.649167][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.673797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.716091][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.755847][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.757813][ T4268] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.788628][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.798127][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.825591][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.835775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.847071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.876524][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.901431][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.944031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.965990][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.013085][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.021525][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.045773][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.076154][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.092556][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.143938][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.173038][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.182221][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.190945][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.210371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.229993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.833413][ T4235] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 59.215636][ T4235] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.250058][ T4235] usb 5-1: config 0 has no interface number 0 [ 59.289042][ T4235] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 59.353315][ T4235] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 59.409369][ T4235] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.439571][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.489470][ T4235] usb 5-1: config 0 descriptor?? [ 59.515426][ T4307] hpfs: Bad magic ... probably not HPFS [ 59.522804][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.530587][ T4295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.541312][ T4288] syz.3.11 (4288): drop_caches: 2 [ 59.562234][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 59.586161][ T4235] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 59.637864][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 59.652447][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 59.666455][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 59.755289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 59.756371][ T4316] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.764328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 59.773194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 59.786187][ T4316] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.790072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.809239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.818983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.994986][ T4229] usb 5-1: USB disconnect, device number 2 [ 60.013212][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 60.799096][ T4335] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 60.984668][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.373267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.382338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.496660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.557710][ T4359] PID 4359 killed due to inadequate hugepage pool [ 61.617984][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.620078][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.620212][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.761093][ T4371] netlink: 192 bytes leftover after parsing attributes in process `syz.1.34'. [ 61.826690][ T4329] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 63.270454][ T4392] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 65.649635][ T4432] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 65.706344][ T4432] [U] J"—E:ÀÆ" [ 66.013150][ C0] sched: RT throttling activated [ 66.241038][ T4444] device syzkaller0 entered promiscuous mode [ 66.465289][ T4453] usb usb8: usbfs: process 4453 (syz.1.58) did not claim interface 0 before use [ 66.622147][ T4455] device syzkaller0 entered promiscuous mode [ 66.846070][ T4465] ======================================================= [ 66.846070][ T4465] WARNING: The mand mount option has been deprecated and [ 66.846070][ T4465] and is ignored by this kernel. Remove the mand [ 66.846070][ T4465] option from the mount to silence this warning. [ 66.846070][ T4465] ======================================================= [ 66.881224][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.833294][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.133430][ T4230] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 69.223424][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.244877][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.286458][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.403578][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.428564][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.468629][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.578004][ T4524] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 69.587744][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.622367][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.622419][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.708780][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.708820][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.708848][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.717924][ T4528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 69.717996][ T4528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.719208][ T4528] vhci_hcd vhci_hcd.0: Device attached [ 69.753828][ T4530] vhci_hcd: cannot find the pending unlink 4 [ 69.753856][ T4530] vhci_hcd: connection closed [ 69.765437][ T3048] vhci_hcd: stop threads [ 69.765994][ T3048] vhci_hcd: release socket [ 69.793391][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.807402][ T3048] vhci_hcd: disconnect device [ 69.824785][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.874608][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.973392][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.991581][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.040931][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.173526][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.182488][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.230884][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.367807][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.387548][ T4230] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.443412][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.623470][ T4230] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.703318][ T4230] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.733231][ T4174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.767695][ T4230] usb 5-1: Product: syz [ 70.779088][ T4230] usb 5-1: Manufacturer: syz [ 70.783829][ T4230] usb 5-1: SerialNumber: syz [ 70.800980][ T4230] usb 5-1: config 0 descriptor?? [ 70.859761][ T4230] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 71.003960][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 71.288948][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295627][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323895][ T4174] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 71.340071][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 71.377801][ T4174] usb 3-1: SerialNumber: syz [ 71.391467][ T4230] usb 5-1: USB disconnect, device number 3 [ 71.398985][ T4174] usb 3-1: config 0 descriptor?? [ 71.415830][ T4230] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 71.447896][ T4174] as10x_usb: device has been detected [ 71.454091][ T4174] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 71.496091][ T4557] block device autoloading is deprecated and will be removed. [ 71.535759][ T4174] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 71.588169][ T4174] as10x_usb: error during firmware upload part1 [ 71.603786][ T4174] Registered device nBox DVB-T Dongle [ 71.663345][ T4174] usb 3-1: USB disconnect, device number 2 [ 71.751686][ T4174] Unregistered device nBox DVB-T Dongle [ 71.755640][ T4174] as10x_usb: device has been disconnected [ 72.383449][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.643479][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 72.763477][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 73.033386][ T4229] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 73.048110][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.063312][ T4174] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 73.076100][ T4229] usb 1-1: Product: syz [ 73.087963][ T4229] usb 1-1: Manufacturer: syz [ 73.092884][ T4229] usb 1-1: SerialNumber: syz [ 73.110666][ T4229] usb 1-1: config 0 descriptor?? [ 73.503348][ T4174] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 73.517045][ T4174] usb 3-1: can't read configurations, error -71 [ 73.873326][ T4229] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 73.882022][ T4229] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 74.015661][ T4229] peak_usb: probe of 1-1:0.0 failed with error -71 [ 74.034745][ T4229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 74.068667][ T4229] usb 1-1: USB disconnect, device number 2 [ 74.470725][ T4637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 74.480620][ T4637] Zero length message leads to an empty skb [ 74.858529][ T4574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.168857][ T4655] syz.0.124 uses obsolete (PF_INET,SOCK_PACKET) [ 75.879564][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 75.998699][ T4202] Bluetooth: hci3: unexpected event for opcode 0x042d [ 76.056670][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'. [ 76.416491][ T1111] cfg80211: failed to load regulatory.db [ 78.075599][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.464004][ T21] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.543911][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.863422][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b                                                                                                                                                                                                 [ 86.393047][ T4891] fuse: root generation should be zero [ 87.808468][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.073304][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 88.133915][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.203318][ T1108] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.220113][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.235337][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.244657][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.294374][ T1108] usbtmc 1-1:16.0: bulk endpoints not found [ 88.353280][ T4189] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.383336][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 88.504681][ T4235] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.516139][ T4235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.525271][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.613409][ T4189] usb 5-1: Using ep0 maxpacket: 8 [ 88.743378][ T4189] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 88.754768][ T4189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.764856][ T4189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.774914][ T4189] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.787939][ T4189] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.797006][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.053470][ T4189] usb 5-1: usb_control_msg returned -32 [ 89.059076][ T4189] usbtmc 5-1:16.0: can't read capabilities [ 89.253406][ T4235] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.261118][ T4946] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 89.269252][ T4233] usb 5-1: USB disconnect, device number 4 [ 89.503340][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 89.623403][ T4235] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 89.634719][ T4235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.645068][ T4235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.655046][ T4235] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.668960][ T4235] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.678239][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.848427][ T4948] syz.4.225 (4948) used greatest stack depth: 18512 bytes left [ 89.991938][ T4235] usb 3-1: usb_control_msg returned -32 [ 89.998230][ T4235] usbtmc 3-1:16.0: can't read capabilities [ 90.313735][ T4953] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 90.533671][ T4189] usb 1-1: USB disconnect, device number 3 [ 90.762062][ T4963] process 'syz.0.230' launched './file0' with NULL argv: empty string added [ 90.858831][ T4189] usb 2-1: USB disconnect, device number 3 [ 91.000565][ T4969] device ip6gre1 entered promiscuous mode [ 91.301094][ T4980] netlink: 388 bytes leftover after parsing attributes in process `syz.4.234'. [ 92.042075][ T21] usb 3-1: USB disconnect, device number 6 [ 93.601096][ T5046] netlink: 388 bytes leftover after parsing attributes in process `syz.2.257'. [ 96.918763][ T4202] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 97.242157][ T5118] netlink: 388 bytes leftover after parsing attributes in process `syz.3.276'. [ 100.120457][ T5144] fuse: Bad value for 'fd' [ 101.728502][ T5165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 101.735436][ T5165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.754768][ T5178] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 101.800292][ T5165] vhci_hcd vhci_hcd.0: Device attached [ 101.880139][ T5178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.943272][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.060623][ T5182] bond1: (slave gretap1): making interface the new active one [ 102.084461][ T4229] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 102.136598][ T5182] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 102.163483][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 102.167837][ T5172] vhci_hcd: connection reset by peer [ 102.192485][ T701] vhci_hcd: stop threads [ 102.212255][ T701] vhci_hcd: release socket [ 102.224598][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 102.243441][ T701] vhci_hcd: disconnect device [ 102.343713][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.543506][ T4174] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.569620][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.611680][ T4174] usb 5-1: Product: syz [ 102.636367][ T4174] usb 5-1: Manufacturer: syz [ 102.663263][ T4174] usb 5-1: SerialNumber: syz [ 102.706569][ T4174] usb 5-1: config 0 descriptor?? [ 102.777019][ T4174] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.790100][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.817162][ T4174] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 103.273429][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.373505][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.393258][ T4233] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.416609][ T4174] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 103.426682][ T4233] usb 1-1: config 1 interface 0 has no altsetting 0 [ 103.453373][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.613498][ T4233] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 103.642927][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.651320][ T4233] usb 1-1: Product: syz [ 103.673227][ T4233] usb 1-1: Manufacturer: syz [ 103.683544][ T4233] usb 1-1: SerialNumber: syz [ 103.713250][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 103.841541][ T1108] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 103.860934][ T1108] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 103.881171][ T1108] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 103.911644][ T1108] usb 3-1: config 250 has no interface number 0 [ 103.921782][ T1108] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 103.953244][ T1108] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 104.004412][ T1108] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.015444][ T1108] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.044818][ T4233] smsusb:smsusb_probe: board id=8, interface number 0 [ 104.051719][ T1108] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 104.068258][ T4233] smsusb:smsusb_probe: Device initialized with return code -19 [ 104.093264][ T1108] usb 3-1: config 250 interface 228 has no altsetting 0 [ 104.154798][ T4233] usb 1-1: USB disconnect, device number 4 [ 104.263491][ T1108] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 104.272574][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 104.300529][ T1108] usb 3-1: Product: syz [ 104.315002][ T1108] usb 3-1: SerialNumber: syz [ 104.364422][ T1108] hub 3-1:250.228: bad descriptor, ignoring hub [ 104.373237][ T1108] hub: probe of 3-1:250.228 failed with error -5 [ 104.373338][ T4174] em28xx 5-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 104.406503][ T4174] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 104.417754][ T4174] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 104.555564][ T4174] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.569067][ T4174] em28xx 5-1:0.0: dvb set to bulk mode. [ 104.578427][ T1108] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 104.599188][ T4174] usb 5-1: USB disconnect, device number 5 [ 104.616168][ T4174] em28xx 5-1:0.0: Disconnecting em28xx [ 104.629181][ T4189] em28xx 5-1:0.0: Binding DVB extension [ 104.726149][ T4189] em28xx 5-1:0.0: Registering input extension [ 104.744759][ T4174] em28xx 5-1:0.0: Closing input extension [ 104.797509][ T4174] em28xx 5-1:0.0: Freeing device [ 105.310615][ T5196] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 107.046047][ T4189] usb 3-1: USB disconnect, device number 7 [ 107.843628][ T4229] vhci_hcd: vhci_device speed not set [ 108.025657][ T4189] usblp0: removed [ 109.830138][ T5290] overlayfs: overlapping lowerdir path [ 110.414877][ T5303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.345'. [ 110.444215][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.452675][ T5303] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.662470][ T5311] IPVS: lc: FWM 3 0x00000003 - no destination available [ 110.772411][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 112.111214][ T5319] team0 (unregistering): Port device team_slave_0 removed [ 112.383632][ T5319] team0 (unregistering): Port device team_slave_1 removed [ 115.371805][ T5382] binder: 5381:5382 unknown command 1074553620 [ 115.453645][ T5382] binder: 5381:5382 ioctl c0306201 200000000640 returned -22 [ 118.283370][ T5435] hpfs: Bad magic ... probably not HPFS [ 118.299789][ T5434] xt_hashlimit: size too large, truncated to 1048576 [ 118.441478][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 118.703773][ T5443] input: syz0 as /devices/virtual/input/input6 [ 120.741170][ T5453] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 124.036979][ T5493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.983499][ T5520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 125.990053][ T5520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.027153][ T5520] vhci_hcd vhci_hcd.0: Device attached [ 126.078723][ T5524] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 126.085276][ T5524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.137322][ T5520] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 126.143891][ T5520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.154521][ T5524] vhci_hcd vhci_hcd.0: Device attached [ 126.177806][ T5520] vhci_hcd vhci_hcd.0: Device attached [ 126.198625][ T5529] vhci_hcd: connection closed [ 126.198827][ T5525] vhci_hcd: connection closed [ 126.200493][ T3048] vhci_hcd: stop threads [ 126.203691][ T5521] vhci_hcd: connection closed [ 126.211525][ T3048] vhci_hcd: release socket [ 126.248585][ T3048] vhci_hcd: disconnect device [ 126.253780][ T3048] vhci_hcd: stop threads [ 126.258038][ T3048] vhci_hcd: release socket [ 126.288757][ T3048] vhci_hcd: disconnect device [ 126.294415][ T3048] vhci_hcd: stop threads [ 126.298944][ T3048] vhci_hcd: release socket [ 126.309123][ T4189] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 126.323738][ T4189] usb 37-1: enqueue for inactive port 0 [ 126.343329][ T3048] vhci_hcd: disconnect device [ 126.403497][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.423292][ T4189] vhci_hcd: vhci_device speed not set [ 126.683273][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 126.824673][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 126.841730][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.854002][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.868504][ T5536] binder: BINDER_SET_CONTEXT_MGR already set [ 126.881456][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 126.891366][ T5536] binder: 5535:5536 ioctl 4018620d 200000004a80 returned -16 [ 126.898788][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.940674][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 127.052608][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.084095][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 127.102005][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.139504][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 127.156141][ T5553] device syzkaller0 entered promiscuous mode [ 127.162749][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 127.194995][ T5553] tc action pedit offset 128 out of bounds [ 127.202076][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 127.431839][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 127.450401][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 127.463634][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.475328][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 127.735706][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 127.750241][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 128.319006][ T5571] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.437612][ T23] usb 2-1: string descriptor 0 read error: -22 [ 128.446445][ T23] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.481272][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.544980][ T23] adutux 2-1:168.0: interrupt endpoints not found [ 128.759926][ T4235] usb 2-1: USB disconnect, device number 4 [ 130.446197][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 130.803517][ T4189] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 130.926671][ T5647] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 131.273465][ T4189] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.283517][ T4189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.564203][ T4189] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.576508][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.591148][ T4189] usb 4-1: Product: syz [ 131.599711][ T4189] usb 4-1: Manufacturer: syz [ 131.610815][ T4189] usb 4-1: SerialNumber: syz [ 131.627254][ T4189] usb 4-1: config 0 descriptor?? [ 131.679331][ T4189] usb 4-1: selecting invalid altsetting 0 [ 132.231355][ T5659] netlink: 388 bytes leftover after parsing attributes in process `syz.4.465'. [ 132.599552][ T5660] usb 4-1: selecting invalid altsetting 0 [ 132.605333][ T5660] usb 4-1: 0:0: usb_set_interface failed (-22) [ 132.639305][ T4235] usb 4-1: USB disconnect, device number 3 [ 132.765081][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.771426][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963888][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 134.341565][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 135.571630][ T1111] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 135.639243][ T5729] netlink: 388 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.053362][ T1111] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 136.066345][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.728997][ T1111] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.108680][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.131987][ T1111] usb 5-1: Product: syz [ 137.146849][ T1111] usb 5-1: Manufacturer: syz [ 137.151544][ T1111] usb 5-1: SerialNumber: syz [ 137.164854][ T5743] 9pnet_virtio: no channels available for device syz [ 137.182839][ T1111] usb 5-1: config 0 descriptor?? [ 137.255646][ T1111] usb 5-1: selecting invalid altsetting 0 [ 137.432483][ T5754] IPVS: lc: FWM 3 0x00000003 - no destination available [ 138.081008][ T5765] usb 5-1: selecting invalid altsetting 0 [ 138.098494][ T5765] usb 5-1: 0:0: usb_set_interface failed (-22) [ 138.131843][ T23] usb 5-1: USB disconnect, device number 6 [ 139.347444][ T5778] ubi0: attaching mtd0 [ 139.393447][ T5778] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 139.494449][ T5784] netlink: 388 bytes leftover after parsing attributes in process `syz.3.501'. [ 142.043822][ T5825] IPVS: lc: FWM 3 0x00000003 - no destination available [ 142.108423][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 142.335498][ T4189] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 142.743557][ T4189] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.254114][ T4189] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.314520][ T5853] binder: 5852:5853 unknown command 1074553619 [ 144.320719][ T5853] binder: 5852:5853 ioctl c0306201 200000000040 returned -22 [ 144.329514][ T5853] binder: 5852:5853 unknown command 1074553620 [ 144.335981][ T5853] binder: 5852:5853 ioctl c0306201 200000000640 returned -22 [ 145.508212][ T5871] netlink: 388 bytes leftover after parsing attributes in process `syz.3.533'. [ 145.623489][ T4189] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.632569][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.645522][ T4189] usb 2-1: Product: syz [ 145.649759][ T4189] usb 2-1: Manufacturer: syz [ 145.654704][ T4189] usb 2-1: SerialNumber: syz [ 145.661119][ T4189] usb 2-1: config 0 descriptor?? [ 145.693526][ T4189] usb 2-1: can't set config #0, error -71 [ 145.726957][ T4189] usb 2-1: USB disconnect, device number 5 [ 145.862161][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 146.071508][ T5889] 9pnet_virtio: no channels available for device syz [ 146.563300][ T4189] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 149.023478][ T5915] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.051127][ T5915] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.245695][ T4189] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 149.256172][ T4189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.843440][ T4189] usb 5-1: string descriptor 0 read error: -71 [ 149.849734][ T4189] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.859906][ T5934] block device autoloading is deprecated and will be removed. [ 149.872211][ T5933] device syzkaller0 entered promiscuous mode [ 149.893128][ T4189] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.921822][ T4189] usb 5-1: config 0 descriptor?? [ 149.948692][ T4189] usb 5-1: can't set config #0, error -71 [ 149.972210][ T4189] usb 5-1: USB disconnect, device number 7 [ 150.274330][ T5948] netlink: 388 bytes leftover after parsing attributes in process `syz.0.561'. [ 150.515986][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 150.585580][ T5966] device syzkaller0 entered promiscuous mode [ 150.831820][ T5972] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 150.846031][ T5972] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 150.876825][ T5982] xt_connbytes: Forcing CT accounting to be enabled [ 155.010101][ T6059] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 155.026711][ T6059] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 156.527243][ T4265] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 156.893521][ T4265] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.916989][ T4265] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.097400][ T4265] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.112122][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.131087][ T4265] usb 5-1: Product: syz [ 157.137577][ T4265] usb 5-1: Manufacturer: syz [ 157.142718][ T4265] usb 5-1: SerialNumber: syz [ 157.169425][ T4265] usb 5-1: config 0 descriptor?? [ 157.217293][ T4265] usb 5-1: selecting invalid altsetting 0 [ 157.500492][ T6116] hpfs: Bad magic ... probably not HPFS [ 160.241758][ T6128] usb 5-1: selecting invalid altsetting 0 [ 160.247523][ T6128] usb 5-1: 0:0: usb_set_interface failed (-22) [ 160.285742][ T4235] usb 5-1: USB disconnect, device number 8 [ 160.681766][ T6148] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.633' sets config #0 [ 161.958400][ T6162] hpfs: Bad magic ... probably not HPFS [ 162.433215][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.533331][ T1108] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 162.676712][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 162.793483][ T4230] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 162.814463][ T4230] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 162.824492][ T4230] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.833791][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.071716][ T1108] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.089298][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.873831][ T6197] hpfs: Bad magic ... probably not HPFS [ 163.886260][ T4202] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 163.986899][ T4230] usb 3-1: USB disconnect, device number 8 [ 164.293324][ T1108] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.302538][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.312901][ T1108] usb 5-1: Product: syz [ 164.317404][ T1108] usb 5-1: Manufacturer: syz [ 164.322251][ T1108] usb 5-1: SerialNumber: syz [ 164.330550][ T1108] usb 5-1: config 0 descriptor?? [ 164.343416][ T4189] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.379034][ T1108] usb 5-1: selecting invalid altsetting 0 [ 164.912886][ T6229] usb 5-1: selecting invalid altsetting 0 [ 164.918804][ T6229] usb 5-1: 0:0: usb_set_interface failed (-22) [ 165.414511][ T1108] usb 5-1: USB disconnect, device number 9 [ 165.493452][ T4189] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 165.501852][ T4189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.573432][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd