last executing test programs: 11.182749462s ago: executing program 3 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) gettid() ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x7498, 0x1000, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) 10.235714601s ago: executing program 3 (id=131): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000480)={0x0, {0x305, 0x2}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000}) r7 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r7, 0x402, 0xe51c4606df1d50c7) fcntl$getownex(r7, 0x10, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 9.105428958s ago: executing program 3 (id=133): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x802e2f, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x401}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000e04"], 0x0, 0x0, 0x0, 0x0}) 8.966425245s ago: executing program 2 (id=135): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r7, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) syz_mount_image$fuse(0x0, 0x0, 0x888040, &(0x7f0000002480)=ANY=[@ANYBLOB="583c110a255a56a1532859b10b30bf3fbef1164cbf5ba5cd40f9ef27abf573a0cc5a148029f9658ecb6bb4372621ad3cb6d6f1a77a6ccfdb3b6890de3348d8953febdd14db37fe53ec0453a1af7364bef2a066e1007f5823711e9a82ac534335175a96c39a", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee00, @ANYRESHEX=r5, @ANYRESDEC=0xee00, @ANYRES32=r10], 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) 8.66871259s ago: executing program 2 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) 7.762238216s ago: executing program 2 (id=138): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0f", 0x82) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mremap(&(0x7f0000c9f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e04000/0x2000)=nil) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) 6.847099982s ago: executing program 4 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x0) 6.548702078s ago: executing program 0 (id=141): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x5, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 6.4905342s ago: executing program 3 (id=142): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r6 = getpid() syz_pidfd_open(r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 6.352639778s ago: executing program 1 (id=143): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x8, 0xbde, 0x400, 0x100}}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000002c0)) 6.237277953s ago: executing program 1 (id=144): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x354, 0xffffffff, 0x400}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf2501ce2e00e992fcd44f0356c55b11ae4e85000000f297c49f3ae6914cda0b3c513d0f000141000000180017000000090000010169ada181776df479300000007abb2f4f223c2e68e7ad39c8384fbfb3fa9461147cc380eaf53718e802323bc97a170b071172940be23a34acad35aff13b0042070078b402ae736151c4edb4a4f05051de4a43314e3fb6"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) 6.11097312s ago: executing program 0 (id=145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2], [0x800]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x59}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040), 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5.156136848s ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$user(&(0x7f0000000340), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="d33009bb6668179d4233b0cc644f5fdae5b9d17f7ada03bc77aea15cb2fbfa7a6646a2a40cee000000000000", 0x2c, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000455000/0x4000)=nil, 0x4000, 0x0, 0x810, r6, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000700)=[0x1], 0x0, 0x0, 0x1}}, 0x40) r8 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) write$char_usb(r5, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)}}, 0x40) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 4.186933188s ago: executing program 0 (id=147): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.801427807s ago: executing program 2 (id=148): epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.272556514s ago: executing program 4 (id=149): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r6, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_create(0x4515be42) syz_mount_image$fuse(0x0, 0x0, 0x888040, &(0x7f0000002480)=ANY=[@ANYBLOB="583c110a255a56a1532859b10b30bf3fbef1164cbf5ba5cd40f9ef27abf573a0cc5a148029f9658ecb6bb4372621ad3cb6d6f1a77a6ccfdb3b6890de3348d8953febdd14db37fe53ec0453a1af7364bef2a066e1007f5823711e9a82ac534335175a96c39a", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee00, @ANYRESHEX=r4, @ANYRESDEC=0xee00, @ANYRES32=r9], 0x0, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r12, 0x1) 3.117798132s ago: executing program 0 (id=150): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x40201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x2, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, 0x0) 2.851608755s ago: executing program 3 (id=151): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_io_uring_setup(0x54a0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.815351877s ago: executing program 4 (id=152): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.640652086s ago: executing program 1 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.615636467s ago: executing program 0 (id=154): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x802e2f, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x401}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.547050281s ago: executing program 4 (id=155): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close_range(r0, 0xffffffffffffffff, 0x0) 2.445944206s ago: executing program 1 (id=156): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r3, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x922, 0x12) 2.240372376s ago: executing program 4 (id=157): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) futex_waitv(&(0x7f0000001080)=[{0x8, &(0x7f0000000280)=0x2, 0x82}, {0x8, &(0x7f0000000340)=0x9, 0x2}, {0x8000, &(0x7f0000000380)=0x6, 0x82}, {0xcf34, &(0x7f00000003c0)=0x8, 0x82}, {0x4, &(0x7f0000000400)=0x38000000000000, 0x82}, {0x2ec2dacc, &(0x7f0000000480)=0x6, 0x2}, {0x7, 0x0, 0x2}, {0xfe65, &(0x7f0000000500)=0x9, 0x2}, {0x3, &(0x7f0000000540)=0x3, 0x82}, {0x6, &(0x7f0000000580)=0xb, 0x2}, {0x9e, &(0x7f00000005c0)=0x4, 0x82}, {0x5, &(0x7f0000000600)=0xffffffffffffffb5}, {0x5, &(0x7f0000000640)=0x7fffffff000000, 0x2}, {0xf8, &(0x7f0000000680)=0x5, 0x2}, {0x0, &(0x7f00000006c0), 0x2}, {0xfffffffffffffff7, &(0x7f0000000700)=0x7, 0x82}, {0x9, &(0x7f0000000740)=0xc, 0x82}, {0xcdfd, &(0x7f0000000780), 0x2}, {0x3, &(0x7f00000007c0)=0x2de7ace4, 0x82}, {0x7ff, &(0x7f0000000800)=0x55f, 0x2}, {0xe6e5, &(0x7f0000000840)=0x5, 0x2}, {0x4, &(0x7f0000000880)=0x4, 0x82}, {0x2, 0x0, 0x82}, {0x0, &(0x7f0000000900)=0x1000, 0x82}, {0x0, &(0x7f0000000940)=0x9, 0x82}, {0xbe7, &(0x7f0000000980)=0x3, 0x2}, {0x5, 0x0, 0x2}, {0x4, &(0x7f0000000a00)=0x2, 0x82}, {0x0, &(0x7f0000000a40)=0x4, 0x2}, {0x100, &(0x7f0000000a80)=0x8, 0x2}, {0x1, &(0x7f0000000ac0), 0x82}, {0xf, &(0x7f0000000b00)=0x1, 0x2}, {0x0, &(0x7f0000000b40)=0x7, 0x82}, {0x9a5, &(0x7f0000000b80)=0xb, 0x2}, {0x1, &(0x7f0000000bc0)=0x5, 0x2}, {0x8001, &(0x7f0000000c00)=0x6289, 0x82}, {0x80000001, &(0x7f0000000c40)=0x6, 0x2}, {0x8000000000000001, &(0x7f0000000c80)=0x4, 0x2}, {0x4, &(0x7f0000000cc0)=0x9, 0x2}, {0x8000, &(0x7f0000000d00)=0x6, 0x82}, {0x3ff, &(0x7f0000000d40)=0x80, 0x2}, {0x1, &(0x7f0000000d80)=0x84c}, {0x4, 0x0}, {0x1399, &(0x7f0000000e40)=0x8, 0x2}, {0x1, &(0x7f0000000e80)=0x200, 0x2}, {0x6, &(0x7f0000000ec0), 0x82}, {0x7, &(0x7f0000000f00), 0x2}, {0x0, &(0x7f0000000f40)=0x95, 0x2}, {0x7, &(0x7f0000000f80)=0x672, 0x2}, {0x3, &(0x7f0000000fc0)=0x3, 0x82}, {0x8, &(0x7f0000001000)=0x8, 0x2}, {0x0, &(0x7f0000001040)=0x1687, 0x2}], 0x34, 0x0, &(0x7f00000015c0)={0x0, 0x989680}, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r2, r6, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001880)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000000c0)={0x38, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000) 1.987474049s ago: executing program 2 (id=158): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40824) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100200086dd6c6157a4000084fffc010000000000000000000000000004ff02000000000000000000000000fb01"], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@rodir}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlateno}]}, 0x29, 0x339, &(0x7f00000011c0)="$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") 1.451800766s ago: executing program 1 (id=159): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000cc0)={0x7b, 0xbd5, 0x2, {0x2, @pix_mp={0xe8, 0xd7a0, 0x47504a50, 0x6, 0xa, [{0x4, 0x7f}, {0x3, 0x6}, {0x1, 0x6}, {0xffff35e6, 0xa88}, {0xae, 0x1}, {0x10001, 0x200}, {0x3ff, 0x5ecd}, {0x7fffffff, 0xdaf7}], 0x1, 0x2b, 0x3}}, 0x400}) 500.090755ms ago: executing program 1 (id=160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02"], 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x101400, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 171.280752ms ago: executing program 3 (id=161): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c97dcca5"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="0644ccf4d065cb02a61998b01b674e80122bb2989b3999d2a8400679a7a519d19da9ea68d804373e6291f7ef20c4b2628a48950c2a2a48ebfb2b1dd00d93261e2031adc908b512bedc4ff0", 0x4b}, {&(0x7f0000000580)="1ce709ae7eb4e18119f76b5963791ebf3a608a291b3679a302a480cf9966c51a8b7c6c33b9cf067a129c223c8ca66112152d9fe91ec4", 0x36}, {&(0x7f00000008c0)="9607f12a9f14347ff3c293f252690d44cc589d6e517c360ac74d13fef47358f35e26584f7d", 0x25}], 0x4}}], 0x2, 0x20008811) 100.502615ms ago: executing program 4 (id=162): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=163): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = epoll_create1(0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x84142, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e60, 0x4, @remote, 0xb}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1e}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 64.200198][ T4255] cgroup: Unknown subsys name 'net' [ 64.364469][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.652459][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.727821][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.736398][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.748879][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.756324][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.764687][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.765510][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.772513][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.780027][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.788134][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.793970][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.801319][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.808152][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.815579][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.823181][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.836708][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.837520][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.851182][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.852242][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.866276][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.867003][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.881633][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.882313][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.896491][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.903992][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.911725][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.911783][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.912147][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.927106][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.975002][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.011299][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.422366][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 68.456983][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 68.471349][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 68.552791][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 68.561692][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 68.621337][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.629442][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.638053][ T4271] device bridge_slave_0 entered promiscuous mode [ 68.673647][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.681449][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.691530][ T4271] device bridge_slave_1 entered promiscuous mode [ 68.715966][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.723237][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.731134][ T4281] device bridge_slave_0 entered promiscuous mode [ 68.739940][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.747050][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.755054][ T4281] device bridge_slave_1 entered promiscuous mode [ 68.801696][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.811640][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.819785][ T4268] device bridge_slave_0 entered promiscuous mode [ 68.829841][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.853521][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.860914][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.871604][ T4268] device bridge_slave_1 entered promiscuous mode [ 68.880978][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.914755][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.937200][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.967157][ T4271] team0: Port device team_slave_0 added [ 68.985407][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.992817][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.001275][ T4267] device bridge_slave_0 entered promiscuous mode [ 69.009120][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.016332][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.027163][ T4270] device bridge_slave_0 entered promiscuous mode [ 69.036364][ T4271] team0: Port device team_slave_1 added [ 69.044556][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.059200][ T4281] team0: Port device team_slave_0 added [ 69.065324][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.072926][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.081395][ T4267] device bridge_slave_1 entered promiscuous mode [ 69.088666][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.095928][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.104497][ T4270] device bridge_slave_1 entered promiscuous mode [ 69.126130][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.136729][ T4281] team0: Port device team_slave_1 added [ 69.188384][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.195461][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.224197][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.245897][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.257868][ T4268] team0: Port device team_slave_0 added [ 69.265903][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.276127][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.285797][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.312771][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.324879][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.332263][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.359022][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.372107][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.383631][ T4268] team0: Port device team_slave_1 added [ 69.400147][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.423351][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.430861][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.457145][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.502748][ T4267] team0: Port device team_slave_0 added [ 69.509695][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.517016][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.543512][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.555948][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.563080][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.589582][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.609699][ T4267] team0: Port device team_slave_1 added [ 69.618584][ T4270] team0: Port device team_slave_0 added [ 69.626415][ T4270] team0: Port device team_slave_1 added [ 69.676882][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.685695][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.712816][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.741340][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.749456][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.776194][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.787794][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.795527][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.822185][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.842314][ T4281] device hsr_slave_0 entered promiscuous mode [ 69.849561][ T4281] device hsr_slave_1 entered promiscuous mode [ 69.860402][ T4271] device hsr_slave_0 entered promiscuous mode [ 69.867079][ T4271] device hsr_slave_1 entered promiscuous mode [ 69.873759][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.881651][ T4271] Cannot create hsr debugfs directory [ 69.887761][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.895596][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.922982][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.953257][ T4268] device hsr_slave_0 entered promiscuous mode [ 69.960753][ T4268] device hsr_slave_1 entered promiscuous mode [ 69.967475][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.969352][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 69.975372][ T4268] Cannot create hsr debugfs directory [ 70.048441][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 70.054688][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 70.061532][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 70.067806][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 70.093369][ T4270] device hsr_slave_0 entered promiscuous mode [ 70.100818][ T4270] device hsr_slave_1 entered promiscuous mode [ 70.107878][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.115552][ T4270] Cannot create hsr debugfs directory [ 70.183328][ T4267] device hsr_slave_0 entered promiscuous mode [ 70.190596][ T4267] device hsr_slave_1 entered promiscuous mode [ 70.197918][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.205870][ T4267] Cannot create hsr debugfs directory [ 70.470856][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.497318][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.507860][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.523543][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.550443][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.566936][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.576096][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.597280][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.687766][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.717721][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.740600][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.755369][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.796429][ T4267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.821481][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.831294][ T4267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.864494][ T4267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.894424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.903796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.913910][ T4267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.927338][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.955073][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.974547][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.992884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.003353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.013299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.022076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.031913][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.039528][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.049872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.076991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.086526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.098624][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.105836][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.115233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.126449][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.140625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.150949][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.161026][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.168380][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.181618][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.190953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.202087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.210957][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.218324][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.227625][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.238083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.261125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.272839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.281088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.290047][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.303087][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.313518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.324088][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.333869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.362219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.371256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.380042][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.387169][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.400630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.409991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.419267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.428920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.469362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.477486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.487161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.496664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.506264][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.513395][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.522119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.531624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.541232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.550350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.566309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.576647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.585699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.595052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.618882][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.629788][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.647517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.664470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.674764][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.685990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.696403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.706446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.734756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.749859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.763336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.775019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.797070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.812202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.826626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.842392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.853609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.867941][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.892565][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.899126][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.905406][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.919462][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.948610][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.974718][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.048467][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 72.056667][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.097977][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.128703][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 72.135100][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 72.138745][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.141648][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 72.148512][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 72.161972][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.171753][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.204021][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.219349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.233412][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.240610][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.267504][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.287443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.296439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.305738][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.315557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.325257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.334713][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.342072][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.400505][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.411168][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.420202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.431019][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.438143][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.446446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.456707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.466154][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.475173][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.482385][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.500254][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.508052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.524396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.534492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.543700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.553054][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.564993][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.575198][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.584512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.593017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.601386][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.614459][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.640080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.649804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.659381][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.670485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.678966][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.687309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.699664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.707143][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.715014][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.722775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.732962][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.747999][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.756663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.767837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.786122][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.820872][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.842735][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.879783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.893432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.919911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.940041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.949080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.958807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.967613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.988755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.001208][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.011312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.025622][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.084680][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.095137][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.125695][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.164018][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.179407][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.190666][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.208798][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.224872][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.246470][ T4271] device veth0_vlan entered promiscuous mode [ 73.256450][ T4281] device veth0_vlan entered promiscuous mode [ 73.275913][ T4268] device veth0_vlan entered promiscuous mode [ 73.305672][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.330905][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.363675][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.379675][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.387656][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.402453][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.415183][ T4281] device veth1_vlan entered promiscuous mode [ 73.424661][ T4271] device veth1_vlan entered promiscuous mode [ 73.434107][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.454771][ T4268] device veth1_vlan entered promiscuous mode [ 73.485079][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.503425][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.512929][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.526829][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.535569][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.545222][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.553132][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.584578][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.609770][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.618069][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.632994][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.653004][ T4271] device veth0_macvtap entered promiscuous mode [ 73.676618][ T4281] device veth0_macvtap entered promiscuous mode [ 73.697096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.707024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.719167][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.728047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.750507][ T4271] device veth1_macvtap entered promiscuous mode [ 73.760763][ T4281] device veth1_macvtap entered promiscuous mode [ 73.780483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.790877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.839656][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.851895][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.865491][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.875729][ T4268] device veth0_macvtap entered promiscuous mode [ 73.886859][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.917510][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.940269][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.947718][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.969470][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.978115][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.987110][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.996103][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.009041][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.021623][ T4267] device veth0_vlan entered promiscuous mode [ 74.033723][ T4268] device veth1_macvtap entered promiscuous mode [ 74.044104][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.052433][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.061819][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.070930][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.087934][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.102810][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112019][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.123087][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.128742][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 74.133487][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161825][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.177191][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.189821][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.204631][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.208399][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 74.215087][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.217937][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 74.230469][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.232154][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 74.239818][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 74.254815][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.266084][ T4267] device veth1_vlan entered promiscuous mode [ 74.285380][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.296873][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.307475][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.318335][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.329776][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.370712][ T4267] device veth0_macvtap entered promiscuous mode [ 74.380861][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.390608][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.399575][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.408749][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.417397][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.426500][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.435785][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.445039][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.455149][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.467604][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.478399][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487284][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.497017][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.525663][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.551255][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.562056][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.573293][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.585810][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.608129][ T4267] device veth1_macvtap entered promiscuous mode [ 74.618291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.627303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.636191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.645617][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.654913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.663928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.672050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.685196][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.696399][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.705444][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716001][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.744697][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.755474][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.766081][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.785511][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.795443][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.806248][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.817865][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.826718][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.841131][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.870831][ T4270] device veth0_vlan entered promiscuous mode [ 74.884329][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.895665][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.905926][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.917445][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.928135][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.939594][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.951581][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.959432][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.970637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.999174][ T4270] device veth1_vlan entered promiscuous mode [ 75.000471][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.009788][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022589][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.033927][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042729][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.051644][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.085207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.158421][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.174088][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.219897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.233413][ T4270] device veth0_macvtap entered promiscuous mode [ 75.248075][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.260046][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.273822][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.278235][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.282092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.304437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.313238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.321715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.354040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.374255][ T4270] device veth1_macvtap entered promiscuous mode [ 75.438735][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.444177][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.446558][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.475255][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.488126][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.496165][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.497100][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.510828][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.539051][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.550070][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.561162][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.572935][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.590945][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.606241][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.617649][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.637852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.657966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.666881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.675171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.684507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.695117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.726295][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.754906][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.769249][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.780726][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.793557][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.810842][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.824649][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.841389][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.854773][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.866354][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.875933][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.892739][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910152][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.943677][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.958082][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.984119][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.012448][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.140057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.169271][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.177133][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.209012][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 76.244336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.289970][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 76.290020][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 76.290034][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 76.290284][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 76.506606][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.704000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.718207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 76.728206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 76.736969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 76.746448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.755593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.766684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.778195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.786777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.798234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.939646][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.949959][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.268354][ T4319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.489056][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.508338][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 77.527086][ T4319] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 77.573454][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.587612][ T4319] usb 3-1: Product: syz [ 77.592235][ T4319] usb 3-1: Manufacturer: syz [ 77.596851][ T4319] usb 3-1: SerialNumber: syz [ 77.653461][ T4319] usb 3-1: config 0 descriptor?? [ 77.678374][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 77.685765][ T4323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.726700][ T4323] usb 4-1: config 4 interface 0 has no altsetting 0 [ 77.740724][ T4319] as10x_usb: device has been detected [ 77.752713][ T4319] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 77.767020][ T4323] usb 4-1: string descriptor 0 read error: -22 [ 77.777590][ T4323] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 77.814066][ T4319] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 77.832093][ T4323] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 77.868946][ T4391] mmap: syz.0.8 (4391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.873403][ T4323] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 77.958618][ T4319] as10x_usb: error during firmware upload part1 [ 77.983802][ T4319] Registered device Sky IT Digital Key (green led) [ 78.024737][ T4323] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.054618][ T4319] usb 3-1: USB disconnect, device number 2 [ 78.102907][ T4319] Unregistered device Sky IT Digital Key (green led) [ 78.113664][ T4323] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 78.135117][ T4319] as10x_usb: device has been disconnected [ 78.151653][ T4323] usb 4-1: media controller created [ 78.177986][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.309351][ T4323] zl10353_read_register: readreg error (reg=127, ret==0) [ 78.398450][ T4323] usb 4-1: USB disconnect, device number 2 [ 78.618043][ T4408] input: syz1 as /devices/virtual/input/input6 [ 78.962029][ T4408] sctp: [Deprecated]: syz.1.9 (pid 4408) Use of int in max_burst socket option deprecated. [ 78.962029][ T4408] Use struct sctp_assoc_value instead [ 79.018443][ T3598] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.270586][ T4423] block device autoloading is deprecated and will be removed. [ 79.283289][ T3599] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.309741][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.334154][ T3598] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.361189][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.393740][ T3598] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.409029][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.427024][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.490519][ T3599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.533010][ T3599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.574149][ T3598] usb 1-1: config 0 descriptor?? [ 79.593557][ T3598] pwc: Askey VC010 type 2 USB webcam detected. [ 79.611673][ T3599] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 79.669626][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.016655][ T3599] usb 3-1: config 0 descriptor?? [ 80.365342][ T3598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.398669][ T3598] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.607581][ T3598] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.622031][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.645657][ T3598] pwc: recv_control_msg error -32 req 04 val 1300 [ 80.653439][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.661946][ T3598] pwc: recv_control_msg error -32 req 04 val 1400 [ 80.674115][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.682609][ T3598] pwc: recv_control_msg error -32 req 02 val 2000 [ 80.701879][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.712932][ T3598] pwc: recv_control_msg error -32 req 02 val 2100 [ 80.722178][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.733665][ T3598] pwc: recv_control_msg error -32 req 04 val 1500 [ 80.748405][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.759352][ T3598] pwc: recv_control_msg error -32 req 02 val 2500 [ 80.768573][ T3599] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 80.791362][ T3598] pwc: recv_control_msg error -32 req 02 val 2400 [ 80.807711][ T3598] pwc: recv_control_msg error -32 req 02 val 2600 [ 80.821871][ T3599] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 80.839409][ T3598] pwc: recv_control_msg error -32 req 02 val 2900 [ 80.858015][ T3598] pwc: recv_control_msg error -32 req 02 val 2800 [ 80.868635][ T3599] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 80.888080][ T3599] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 80.897548][ T3598] pwc: recv_control_msg error -32 req 04 val 1100 [ 80.918068][ T3599] isku: probe of 0003:1E7D:319C.0001 failed with error -32 [ 80.936907][ T3598] pwc: Registered as video103. [ 80.946110][ T3598] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 80.965549][ T3599] usb 3-1: USB disconnect, device number 3 [ 81.202392][ T3598] usb 1-1: USB disconnect, device number 2 [ 81.300307][ T4441] fido_id[4441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 81.939899][ T4364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.088313][ T4318] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.131881][ T128] cfg80211: failed to load regulatory.db [ 82.148330][ T4364] usb 4-1: Using ep0 maxpacket: 16 [ 82.161510][ T4364] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 82.203073][ T4364] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.229015][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.261066][ T4364] usb 4-1: Product: syz [ 82.269847][ T4364] usb 4-1: Manufacturer: syz [ 82.278003][ T4364] usb 4-1: SerialNumber: syz [ 82.287289][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.315367][ T4364] r8152-cfgselector 4-1: config 0 descriptor?? [ 82.327422][ T4318] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 82.347513][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.356346][ T4318] usb 1-1: Product: syz [ 82.366388][ T4318] usb 1-1: Manufacturer: syz [ 82.372253][ T4318] usb 1-1: SerialNumber: syz [ 82.403827][ T4318] usb 1-1: config 0 descriptor?? [ 82.441387][ T4458] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.484873][ T4318] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 82.710415][ T4458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 82.717463][ T4458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.822823][ T4466] netlink: 'syz.2.24': attribute type 3 has an invalid length. [ 82.831209][ T4466] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.24'. [ 83.407018][ T4458] vhci_hcd vhci_hcd.0: Device attached [ 83.415037][ T4364] r8152-cfgselector 4-1: Unknown version 0x0000 [ 83.552559][ T4364] r8152-cfgselector 4-1: bad CDC descriptors [ 83.566407][ T4463] vhci_hcd: connection closed [ 83.567961][ T22] usb 1-1: USB disconnect, device number 3 [ 83.579141][ T46] vhci_hcd: stop threads [ 83.583957][ T46] vhci_hcd: release socket [ 83.600461][ T46] vhci_hcd: disconnect device [ 83.825247][ T4364] r8152-cfgselector 4-1: Unknown version 0x0000 [ 84.483460][ T4364] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 85.398268][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.231366][ T4494] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.308399][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 86.316702][ T22] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 86.516279][ T22] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 86.545576][ T22] usb 2-1: config 254 has no interface number 0 [ 86.689848][ T4280] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 86.698981][ T4280] Bluetooth: hci1: Injecting HCI hardware error event [ 86.708640][ T4288] Bluetooth: hci1: hardware error 0x00 [ 87.326589][ T22] usb 2-1: config 254 interface 235 has no altsetting 0 [ 87.370856][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 87.388427][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.400438][ T4494] Zero length message leads to an empty skb [ 87.417392][ T22] usb 2-1: Product: syz [ 87.438039][ T22] usb 2-1: Manufacturer: syz [ 87.522436][ T22] usb 2-1: SerialNumber: syz [ 87.562040][ T22] usbtest 2-1:254.235: couldn't get endpoints, -22 [ 87.576193][ T22] usbtest: probe of 2-1:254.235 failed with error -22 [ 87.766964][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 87.798257][ T4483] device veth0 entered promiscuous mode [ 87.828271][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.887730][ T4323] usb 2-1: USB disconnect, device number 3 [ 88.038256][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 88.054133][ T4321] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 88.096452][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.155797][ T4321] usb 1-1: Product: syz [ 88.164411][ T4321] usb 1-1: Manufacturer: syz [ 88.186960][ T4321] usb 1-1: SerialNumber: syz [ 88.200286][ T4321] usb 1-1: config 0 descriptor?? [ 88.239259][ T4321] as10x_usb: device has been detected [ 88.250783][ T4321] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 88.292457][ T4321] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 88.350676][ T4321] as10x_usb: error during firmware upload part1 [ 88.403195][ T4321] Registered device Sky IT Digital Key (green led) [ 88.456106][ T128] usb 1-1: USB disconnect, device number 4 [ 88.551272][ T26] audit: type=1804 audit(1773877298.935:2): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.39" name="/newroot/10/file1" dev="fuse" ino=1 res=1 errno=0 [ 88.596133][ T128] Unregistered device Sky IT Digital Key (green led) [ 88.603389][ T128] as10x_usb: device has been disconnected [ 89.419372][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.525515][ T4530] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 92.648294][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.850602][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.874822][ T128] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.891089][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.911066][ T4559] loop5: detected capacity change from 0 to 7 [ 92.915694][ T128] usb 5-1: config 0 descriptor?? [ 92.931494][ T128] pwc: Askey VC010 type 2 USB webcam detected. [ 92.986531][ T4559] Dev loop5: unable to read RDB block 7 [ 93.008351][ T4559] loop5: AHDI p1 p2 p3 [ 93.013015][ T4559] loop5: partition table partially beyond EOD, truncated [ 93.035303][ T4559] loop5: p1 start 1601398130 is beyond EOD, truncated [ 93.050254][ T4559] loop5: p2 start 1702059890 is beyond EOD, truncated [ 93.332692][ T128] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.342970][ T128] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.552922][ T128] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.569599][ T128] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.576161][ T26] audit: type=1804 audit(1773877303.975:3): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.52" name="/newroot/10/file1" dev="fuse" ino=1 res=1 errno=0 [ 93.628216][ T128] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.637470][ T128] pwc: recv_control_msg error -32 req 02 val 2000 [ 93.668854][ T128] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.693630][ T128] pwc: recv_control_msg error -32 req 04 val 1500 [ 93.714592][ T128] pwc: recv_control_msg error -32 req 02 val 2500 [ 93.736866][ T128] pwc: recv_control_msg error -32 req 02 val 2400 [ 93.762108][ T128] pwc: recv_control_msg error -32 req 02 val 2600 [ 93.789183][ T128] pwc: recv_control_msg error -32 req 02 val 2900 [ 93.815478][ T128] pwc: recv_control_msg error -32 req 02 val 2800 [ 93.835056][ T128] pwc: recv_control_msg error -32 req 04 val 1100 [ 93.855620][ T128] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.888373][ T128] pwc: Registered as video103. [ 93.898458][ T128] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 93.933137][ T128] usb 5-1: USB disconnect, device number 2 [ 94.098868][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.112857][ T4364] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.298943][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 94.310332][ T4321] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 94.342048][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.393756][ T4364] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.418276][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.446934][ T4364] usb 4-1: Product: syz [ 95.467932][ T4364] usb 4-1: Manufacturer: syz [ 95.487248][ T4321] usb 3-1: Product: syz [ 95.491877][ T4321] usb 3-1: Manufacturer: syz [ 95.496868][ T4321] usb 3-1: SerialNumber: syz [ 95.504002][ T4321] usb 3-1: config 0 descriptor?? [ 95.523136][ T4321] as10x_usb: device has been detected [ 95.525204][ T4364] usb 4-1: SerialNumber: syz [ 95.528961][ T4321] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 95.553584][ T4321] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 95.566227][ T4321] as10x_usb: error during firmware upload part1 [ 95.573001][ T4321] Registered device Sky IT Digital Key (green led) [ 95.599722][ T4364] usb 4-1: config 0 descriptor?? [ 95.735456][ T4323] usb 3-1: USB disconnect, device number 4 [ 95.955109][ T4323] Unregistered device Sky IT Digital Key (green led) [ 95.965952][ T4323] as10x_usb: device has been disconnected [ 96.058976][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.258335][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 96.275640][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.289601][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.304925][ T4318] usb 2-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.331110][ T4601] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 96.357871][ T4318] usb 2-1: config 1 interface 0 has no altsetting 0 [ 96.368502][ T4318] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 96.393390][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.419852][ T4318] usb 2-1: Product: syz [ 96.428133][ T4604] fuse: Unknown parameter 'grou00000000000000000000' [ 96.440130][ T4318] usb 2-1: Manufacturer: syz [ 96.445088][ T4318] usb 2-1: SerialNumber: syz [ 96.681116][ T4318] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 96.698946][ T4606] loop5: detected capacity change from 0 to 7 [ 96.709399][ T3624] bcm5974 2-1:1.0: could not read from device [ 96.725087][ T4364] usb 4-1: Firmware version (0.0) predates our first public release. [ 96.772862][ T4364] usb 4-1: Please update to version 0.2 or newer [ 96.782488][ T3624] bcm5974 2-1:1.0: could not read from device [ 96.789760][ T4318] usb 2-1: USB disconnect, device number 4 [ 96.801802][ T4606] Dev loop5: unable to read RDB block 7 [ 96.882186][ T4606] loop5: AHDI p1 p2 p3 [ 96.886986][ T4606] loop5: partition table partially beyond EOD, truncated [ 96.897224][ T4606] loop5: p1 start 1601398130 is beyond EOD, truncated [ 96.904435][ T4364] usb 4-1: USB disconnect, device number 4 [ 96.914987][ T4606] loop5: p2 start 1702059890 is beyond EOD, truncated [ 97.688468][ T4321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.228739][ T4618] sctp: failed to load transform for md5: -2 [ 98.572331][ T4321] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.599039][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.624811][ T4321] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 98.773397][ T4321] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 98.794803][ T4321] usb 3-1: Manufacturer: syz [ 98.808257][ T4321] usb 3-1: config 0 descriptor?? [ 99.568505][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.621077][ T4321] rc_core: IR keymap rc-hauppauge not found [ 99.627187][ T4321] Registered IR keymap rc-empty [ 99.658746][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 99.725538][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 99.780025][ T22] usb 4-1: config 0 has no interfaces? [ 99.785678][ T22] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.869188][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.003636][ T22] usb 4-1: config 0 descriptor?? [ 100.498650][ T3598] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.578354][ T4317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.592819][ T128] usb 4-1: USB disconnect, device number 5 [ 100.627346][ T22] usb 3-1: USB disconnect, device number 5 [ 100.691373][ T4647] fuse: Unknown parameter 'grou00000000000000000000' [ 100.748426][ T3598] usb 5-1: device descriptor read/64, error -71 [ 100.807584][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 100.826710][ T4317] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 100.850560][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.864228][ T4317] usb 2-1: Product: syz [ 100.884486][ T4317] usb 2-1: Manufacturer: syz [ 100.889674][ T4317] usb 2-1: SerialNumber: syz [ 100.904554][ T4317] usb 2-1: config 0 descriptor?? [ 100.916931][ T4317] as10x_usb: device has been detected [ 100.934217][ T4317] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 100.981664][ T4317] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 100.995059][ T4317] as10x_usb: error during firmware upload part1 [ 101.002264][ T4317] Registered device Sky IT Digital Key (green led) [ 101.041180][ T3598] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.119588][ T4317] usb 2-1: USB disconnect, device number 5 [ 101.154829][ T4317] Unregistered device Sky IT Digital Key (green led) [ 101.159477][ T4317] as10x_usb: device has been disconnected [ 101.346812][ T3598] usb 5-1: device descriptor read/64, error -71 [ 102.031202][ T4669] sctp: failed to load transform for md5: -2 [ 102.099818][ T3598] usb usb5-port1: attempt power cycle [ 102.425946][ T4683] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 102.438925][ T4683] netlink: 'syz.0.81': attribute type 2 has an invalid length. [ 102.448361][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.460075][ T4683] process 'syz.0.81' launched './file0' with NULL argv: empty string added [ 102.548787][ T3598] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.591281][ T3598] usb 5-1: device descriptor read/8, error -71 [ 102.618338][ T4317] usb 4-1: device descriptor read/64, error -71 [ 102.638301][ T22] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 102.678289][ T125] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 102.853278][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.867611][ T22] usb 2-1: not running at top speed; connect to a high speed hub [ 102.888302][ T4317] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.911178][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.934921][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.064979][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.081963][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.097259][ T22] usb 2-1: Product: syz [ 103.754139][ T4317] usb 4-1: device descriptor read/64, error -71 [ 103.760907][ T22] usb 2-1: Manufacturer: syz [ 103.765894][ T22] usb 2-1: SerialNumber: syz [ 103.958530][ T4317] usb usb4-port1: attempt power cycle [ 103.959236][ T4695] fuse: Unknown parameter 'group_i00000000000000000000' [ 103.982506][ T4660] syz.2.77 (4660) used greatest stack depth: 20664 bytes left [ 104.135039][ T22] usb 2-1: 0:2 : does not exist [ 104.206133][ T22] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 104.255838][ T22] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 104.277518][ T22] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 104.296662][ T22] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.328107][ T22] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.352185][ T22] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 104.386403][ T22] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 104.393948][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.436103][ T22] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 104.440719][ T4317] usb 4-1: device descriptor read/8, error -71 [ 104.482363][ T22] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 104.639084][ T22] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.689157][ T22] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 104.728587][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.756444][ T22] usb 2-1: USB disconnect, device number 6 [ 104.799320][ T4317] usb 4-1: device descriptor read/8, error -71 [ 104.861189][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.929388][ T4317] usb usb4-port1: unable to enumerate USB device [ 105.461426][ T125] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 105.492572][ T125] usb 3-1: can't read configurations, error -71 [ 105.638356][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.668337][ T4321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.884514][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.896910][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.908544][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 105.921628][ T22] usb 5-1: Product: syz [ 105.927235][ T22] usb 5-1: Manufacturer: syz [ 105.934849][ T22] usb 5-1: SerialNumber: syz [ 105.942727][ T4321] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 105.960512][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.979203][ T22] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.990823][ T4321] usb 4-1: Product: syz [ 106.005171][ T4321] usb 4-1: Manufacturer: syz [ 106.041701][ T4321] usb 4-1: SerialNumber: syz [ 106.070957][ T4321] usb 4-1: config 0 descriptor?? [ 106.108443][ T4321] as10x_usb: device has been detected [ 106.117841][ T4321] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 106.192814][ T4321] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 106.250006][ T4321] as10x_usb: error during firmware upload part1 [ 106.288963][ T4321] Registered device Sky IT Digital Key (green led) [ 106.305508][ T4321] usb 4-1: USB disconnect, device number 10 [ 106.359379][ T128] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.377219][ T4321] Unregistered device Sky IT Digital Key (green led) [ 106.383479][ T4321] as10x_usb: device has been disconnected [ 106.868428][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.096580][ T22] usb 3-1: device descriptor read/64, error -71 [ 107.478943][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 107.488550][ T128] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 107.550581][ T128] ath9k_htc: Failed to initialize the device [ 107.668468][ T22] usb 3-1: device descriptor read/64, error -71 [ 107.689841][ T128] usb 5-1: ath9k_htc: USB layer deinitialized [ 107.789634][ T22] usb usb3-port1: attempt power cycle [ 107.834568][ T4711] random: crng reseeded on system resumption [ 108.070518][ T4748] fuse: Bad value for 'fd' [ 108.364387][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.499247][ T22] usb 3-1: device descriptor read/8, error -71 [ 108.778448][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.868958][ T22] usb 3-1: device descriptor read/8, error -71 [ 108.988512][ T22] usb usb3-port1: unable to enumerate USB device [ 109.748422][ T4317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.938398][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 109.947180][ T4317] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 109.985023][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.041885][ T4317] usb 4-1: config 0 descriptor?? [ 110.088572][ T4317] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 110.143278][ T4773] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 110.778302][ T4364] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.978410][ T4364] usb 2-1: Using ep0 maxpacket: 16 [ 110.997999][ T4364] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 111.046129][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.083606][ T4317] gspca_vc032x: reg_w err -71 [ 111.094101][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.111130][ T4364] usb 2-1: Product: syz [ 111.115359][ T4364] usb 2-1: Manufacturer: syz [ 111.121138][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.136276][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.141785][ T4364] usb 2-1: SerialNumber: syz [ 111.147641][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.183302][ T4364] usb 2-1: config 0 descriptor?? [ 111.189896][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.334249][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.348850][ T4364] as10x_usb: device has been detected [ 111.379278][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.669175][ T4364] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 111.737987][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.767493][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.827046][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.859572][ T4364] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 111.878312][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.889260][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.895043][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.903242][ T4364] as10x_usb: error during firmware upload part1 [ 111.932187][ T4787] netlink: 'syz.3.107': attribute type 4 has an invalid length. [ 111.942072][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 111.949690][ T4364] Registered device Sky IT Digital Key (green led) [ 111.974641][ T4364] usb 2-1: USB disconnect, device number 7 [ 111.989298][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.038744][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.044116][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.104359][ T4364] Unregistered device Sky IT Digital Key (green led) [ 112.110688][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.137435][ T4364] as10x_usb: device has been disconnected [ 112.189332][ T4317] gspca_vc032x: Unknown sensor... [ 112.194604][ T4317] vc032x: probe of 4-1:0.0 failed with error -22 [ 112.233888][ T4317] usb 4-1: USB disconnect, device number 11 [ 113.134006][ T26] audit: type=1804 audit(1773877323.535:4): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.110" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 113.155397][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.222657][ T4364] usb 5-1: USB disconnect, device number 7 [ 113.243580][ T4802] batman_adv: batadv0: Adding interface: dummy0 [ 113.253094][ T4802] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.318355][ T4802] batman_adv: batadv0: Interface activated: dummy0 [ 113.412489][ T4802] batadv0: mtu less than device minimum [ 113.430402][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.443118][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.454811][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.466819][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.478719][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.490453][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.501912][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.513256][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.524780][ T4802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.618332][ T4317] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 113.778345][ T4317] usb 4-1: device descriptor read/64, error -71 [ 114.058443][ T4317] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.258312][ T4317] usb 4-1: device descriptor read/64, error -71 [ 114.378417][ T4317] usb usb4-port1: attempt power cycle [ 114.423784][ T4832] device geneve0 entered promiscuous mode [ 114.788271][ T4317] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 114.897729][ T4317] usb 4-1: device descriptor read/8, error -71 [ 115.173817][ T4317] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 115.199097][ T4317] usb 4-1: device descriptor read/8, error -71 [ 115.318438][ T4317] usb usb4-port1: unable to enumerate USB device [ 117.221014][ T26] audit: type=1804 audit(1773877327.625:5): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.124" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0 [ 117.773887][ T4869] loop2: detected capacity change from 0 to 256 [ 117.802160][ T4869] FAT-fs (loop2): Directory bread(block 64) failed [ 117.809231][ T4869] FAT-fs (loop2): Directory bread(block 65) failed [ 117.816102][ T4869] FAT-fs (loop2): Directory bread(block 66) failed [ 117.822878][ T4869] FAT-fs (loop2): Directory bread(block 67) failed [ 117.829516][ T4869] FAT-fs (loop2): Directory bread(block 68) failed [ 117.836096][ T4869] FAT-fs (loop2): Directory bread(block 69) failed [ 117.842774][ T4869] FAT-fs (loop2): Directory bread(block 70) failed [ 117.849499][ T4869] FAT-fs (loop2): Directory bread(block 71) failed [ 117.856111][ T4869] FAT-fs (loop2): Directory bread(block 72) failed [ 117.862750][ T4869] FAT-fs (loop2): Directory bread(block 73) failed [ 118.689765][ T4318] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.890559][ T4318] usb 2-1: config 0 has no interfaces? [ 118.897286][ T4318] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.940622][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.984215][ T4318] usb 2-1: config 0 descriptor?? [ 118.997420][ T4887] loop5: detected capacity change from 0 to 7 [ 119.022227][ T4392] Dev loop5: unable to read RDB block 7 [ 119.031736][ T4392] loop5: AHDI p1 p2 p3 [ 119.036027][ T4392] loop5: partition table partially beyond EOD, truncated [ 119.046603][ T4392] loop5: p1 start 1601398130 is beyond EOD, truncated [ 119.063006][ T4392] loop5: p2 start 1702059890 is beyond EOD, truncated [ 119.076625][ T4887] Dev loop5: unable to read RDB block 7 [ 119.092837][ T4887] loop5: AHDI p1 p2 p3 [ 119.113145][ T4887] loop5: partition table partially beyond EOD, truncated [ 119.131602][ T4887] loop5: p1 start 1601398130 is beyond EOD, truncated [ 119.140988][ T4887] loop5: p2 start 1702059890 is beyond EOD, truncated [ 119.209516][ T4318] usb 2-1: USB disconnect, device number 8 [ 119.749131][ T26] audit: type=1804 audit(1773877330.155:6): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.135" name="/newroot/30/file1" dev="fuse" ino=1 res=1 errno=0 [ 119.778598][ T4318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.888474][ T3599] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 119.928549][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.038061][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.051002][ T4318] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 120.062952][ T4318] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 120.081190][ T4318] usb 2-1: string descriptor 0 read error: -22 [ 120.087971][ T4318] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 120.088396][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 120.102619][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.126595][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.138401][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 120.148767][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.166211][ T4320] usb 1-1: config 4 interface 0 has no altsetting 0 [ 120.176552][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.191125][ T3599] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.200506][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.212309][ T4320] usb 1-1: string descriptor 0 read error: -22 [ 120.222940][ T4320] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 120.233577][ T3599] usb 4-1: config 0 descriptor?? [ 120.239442][ T4320] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 120.250722][ T3599] hub 4-1:0.0: USB hub found [ 120.264511][ T4320] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 120.292314][ T4320] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.315422][ T4320] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 120.322919][ T4320] usb 1-1: media controller created [ 120.335486][ T4318] usb 2-1: Can't get UAC3 power state for id 10 [ 120.366172][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.464265][ T3599] hub 4-1:0.0: 1 port detected [ 120.969868][ T4318] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 121.133617][ T3599] hub 4-1:0.0: activate --> -90 [ 121.409941][ T4320] zl10353_read_register: readreg error (reg=127, ret==0) [ 121.505418][ T4320] usb 1-1: USB disconnect, device number 5 [ 121.563620][ T22] usb 4-1: USB disconnect, device number 16 [ 121.643538][ T4318] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 121.798748][ T4318] usb 2-1: USB disconnect, device number 9 [ 121.962304][ T4913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.140'. [ 122.250124][ T4915] mkiss: ax0: crc mode is auto. [ 124.514379][ T4938] loop5: detected capacity change from 0 to 7 [ 124.563533][ T4392] Dev loop5: unable to read RDB block 7 [ 124.569369][ T4392] loop5: AHDI p1 p2 p3 [ 124.586310][ T4392] loop5: partition table partially beyond EOD, truncated [ 124.617934][ T4392] loop5: p1 start 1601398130 is beyond EOD, truncated [ 124.660710][ T4392] loop5: p2 start 1702059890 is beyond EOD, truncated [ 124.703084][ T4938] Dev loop5: unable to read RDB block 7 [ 124.716512][ T4938] loop5: AHDI p1 p2 p3 [ 124.735165][ T4938] loop5: partition table partially beyond EOD, truncated [ 124.767376][ T4938] loop5: p1 start 1601398130 is beyond EOD, truncated [ 124.835572][ T4938] loop5: p2 start 1702059890 is beyond EOD, truncated [ 125.497492][ T26] audit: type=1804 audit(1773877335.895:7): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.149" name="/newroot/27/file1" dev="fuse" ino=1 res=1 errno=0 [ 126.458449][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.668299][ T128] usb 1-1: Using ep0 maxpacket: 32 [ 126.682572][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.828136][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.862516][ T128] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.891390][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.962792][ T128] usb 1-1: config 0 descriptor?? [ 126.985877][ T4974] loop2: detected capacity change from 0 to 256 [ 127.012923][ T4974] FAT-fs (loop2): Directory bread(block 64) failed [ 127.019891][ T4974] FAT-fs (loop2): Directory bread(block 65) failed [ 127.026529][ T4974] FAT-fs (loop2): Directory bread(block 66) failed [ 127.033250][ T4974] FAT-fs (loop2): Directory bread(block 67) failed [ 127.040027][ T4974] FAT-fs (loop2): Directory bread(block 68) failed [ 127.047235][ T4974] FAT-fs (loop2): Directory bread(block 69) failed [ 127.056091][ T4974] FAT-fs (loop2): Directory bread(block 70) failed [ 127.062815][ T4974] FAT-fs (loop2): Directory bread(block 71) failed [ 127.069738][ T4974] FAT-fs (loop2): Directory bread(block 72) failed [ 127.076550][ T4974] FAT-fs (loop2): Directory bread(block 73) failed [ 127.140489][ T128] hub 1-1:0.0: USB hub found [ 127.341121][ T128] hub 1-1:0.0: 1 port detected [ 127.947698][ T128] hub 1-1:0.0: activate --> -90 [ 128.149491][ T4318] usb 1-1: USB disconnect, device number 6 [ 128.153345][ T3599] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 128.503482][ T3599] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.606844][ T4985] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 128.648992][ T4985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.665710][ T4985] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.699716][ T4985] loop5: detected capacity change from 0 to 7 [ 128.738298][ T4985] Dev loop5: unable to read RDB block 7 [ 128.744054][ T4985] loop5: AHDI p1 [ 128.747966][ T4985] loop5: partition table partially beyond EOD, truncated [ 128.788415][ T3599] usb 2-1: Using ep0 maxpacket: 16 [ 128.825826][ C1] ------------[ cut here ]------------ [ 128.832177][ C1] WARNING: CPU: 1 PID: 3628 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 128.842547][ C1] Modules linked in: [ 128.846477][ C1] CPU: 1 PID: 3628 Comm: klogd Not tainted syzkaller #0 [ 128.853607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.863855][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 128.870518][ C1] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 128.890631][ C1] RSP: 0000:ffffc900001e0a30 EFLAGS: 00010246 [ 128.896727][ C1] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff88807cc50000 [ 128.904784][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.912859][ C1] RBP: 0000000000000000 R08: ffff88807cc50000 R09: 0000000000000003 [ 128.921068][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ad1a228 [ 128.929195][ C1] R13: dffffc0000000000 R14: ffff88807ad1a760 R15: ffff88807b844c24 [ 128.937649][ C1] FS: 00007f5c3d694c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 128.946863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.953595][ C1] CR2: 00007fef7a9e9e80 CR3: 0000000030328000 CR4: 00000000003506e0 [ 128.961733][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.969852][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.977852][ C1] Call Trace: [ 128.981227][ C1] [ 128.984090][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 128.989728][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 128.995316][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 129.000934][ C1] ? read_lock_is_recursive+0x10/0x10 [ 129.006403][ C1] __iterate_interfaces+0x243/0x500 [ 129.011685][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 129.017960][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 129.025247][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 129.031646][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 129.039022][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 129.044435][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 129.049876][ C1] ? hw_scan_work+0xf50/0xf50 [ 129.054889][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 129.060059][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 129.066201][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 129.071574][ C1] handle_softirqs+0x2a1/0x930 [ 129.076484][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 129.081435][ C1] ? do_softirq+0x210/0x210 [ 129.086171][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 129.091461][ C1] __irq_exit_rcu+0x13b/0x230 [ 129.096177][ C1] ? irq_exit_rcu+0x20/0x20 [ 129.100785][ C1] irq_exit_rcu+0x5/0x20 [ 129.105045][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 129.110827][ C1] [ 129.113777][ C1] [ 129.116728][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.122789][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 129.129354][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0f cc 21 f7 65 8b 05 d0 50 cb 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 129.149382][ C1] RSP: 0000:ffffc900032b7560 EFLAGS: 00000206 [ 129.155489][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 798d949778e06d00 [ 129.163827][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 129.172070][ C1] RBP: ffffc900032b75f8 R08: ffffffff96e92a2b R09: 1ffffffff2dd2545 [ 129.180149][ C1] R10: dffffc0000000000 R11: fffffbfff2dd2546 R12: dffffc0000000000 [ 129.188741][ C1] R13: ffff8880184d8000 R14: ffffffff96e92a28 R15: 1ffff92000656eac [ 129.196776][ C1] ? _raw_spin_unlock+0x40/0x40 [ 129.198316][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.201705][ C1] ? page_ext_put+0x98/0xb0 [ 129.213769][ C1] debug_check_no_obj_freed+0x515/0x530 [ 129.219420][ C1] free_unref_page_prepare+0x2a6/0x9a0 [ 129.225019][ C1] free_unref_page+0x2e/0x3f0 [ 129.229768][ C1] qlist_free_all+0x76/0xe0 [ 129.234303][ C1] kasan_quarantine_reduce+0x144/0x160 [ 129.239851][ C1] __kasan_slab_alloc+0x1e/0x80 [ 129.244767][ C1] slab_post_alloc_hook+0x4b/0x480 [ 129.250052][ C1] ? slab_pre_alloc_hook+0x91/0x310 [ 129.255302][ C1] kmem_cache_alloc_node+0x14d/0x320 [ 129.260682][ C1] ? __alloc_skb+0xfc/0x7e0 [ 129.265228][ C1] __alloc_skb+0xfc/0x7e0 [ 129.269662][ C1] alloc_skb_with_frags+0xa7/0x710 [ 129.274992][ C1] ? preempt_schedule_irq+0xe6/0x160 [ 129.280452][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 129.285771][ C1] ? sock_kzfree_s+0x50/0x50 [ 129.290490][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 129.295852][ C1] ? __rwlock_init+0x140/0x140 [ 129.300720][ C1] ? wait_for_unix_gc+0xe/0x190 [ 129.305748][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 129.311050][ C1] unix_dgram_sendmsg+0x539/0x16e0 [ 129.316477][ C1] ? aa_sk_perm+0x89/0x950 [ 129.320991][ C1] ? aa_sk_perm+0x81f/0x950 [ 129.325535][ C1] ? unix_dgram_poll+0x680/0x680 [ 129.330551][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 129.337115][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 129.342130][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.347886][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 129.353774][ C1] __sys_sendto+0x497/0x650 [ 129.358359][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 129.363785][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 129.370030][ C1] ? lock_chain_count+0x20/0x20 [ 129.374931][ C1] __x64_sys_sendto+0xda/0xf0 [ 129.379702][ C1] do_syscall_64+0x4c/0xa0 [ 129.384160][ C1] ? clear_bhb_loop+0x60/0xb0 [ 129.388883][ C1] ? clear_bhb_loop+0x60/0xb0 [ 129.393574][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.399725][ C1] RIP: 0033:0x7f5c3d7e4407 [ 129.404155][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.424014][ C1] RSP: 002b:00007ffde4f61f40 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 129.430482][ T4318] usb 5-1: config 0 has no interfaces? [ 129.432544][ C1] RAX: ffffffffffffffda RBX: 00007f5c3d694c80 RCX: 00007f5c3d7e4407 [ 129.446163][ C1] RDX: 0000000000000057 RSI: 00007ffde4f62080 RDI: 0000000000000003 [ 129.448429][ T4318] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.454189][ C1] RBP: 00007ffde4f624b0 R08: 0000000000000000 R09: 0000000000000000 [ 129.471270][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde4f624c8 [ 129.479647][ C1] R13: 00007ffde4f62080 R14: 000000000000003c R15: 00007ffde4f62080 [ 129.486458][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.487816][ C1] [ 129.487829][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.487839][ C1] CPU: 1 PID: 3628 Comm: klogd Not tainted syzkaller #0 [ 129.487853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.487862][ C1] Call Trace: [ 129.487868][ C1] [ 129.487874][ C1] dump_stack_lvl+0x188/0x24e [ 129.487900][ C1] ? memcpy+0x3c/0x60 [ 129.487919][ C1] ? show_regs_print_info+0x12/0x12 [ 129.487940][ C1] ? load_image+0x400/0x400 [ 129.487966][ C1] panic+0x2e5/0x730 [ 129.487986][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 129.488017][ C1] __warn+0x2f8/0x4f0 [ 129.488031][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 129.488052][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 129.488070][ C1] report_bug+0x2ba/0x4f0 [ 129.488097][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 129.488120][ C1] handle_bug+0x3a/0x70 [ 129.488139][ C1] exc_invalid_op+0x16/0x40 [ 129.488164][ C1] asm_exc_invalid_op+0x16/0x20 [ 129.488181][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 129.488200][ C1] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 129.488213][ C1] RSP: 0000:ffffc900001e0a30 EFLAGS: 00010246 [ 129.488229][ C1] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff88807cc50000 [ 129.488242][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.488252][ C1] RBP: 0000000000000000 R08: ffff88807cc50000 R09: 0000000000000003 [ 129.488263][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ad1a228 [ 129.488273][ C1] R13: dffffc0000000000 R14: ffff88807ad1a760 R15: ffff88807b844c24 [ 129.488288][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 129.488307][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 129.488335][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 129.488357][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 129.488380][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 129.488399][ C1] ? read_lock_is_recursive+0x10/0x10 [ 129.488427][ C1] __iterate_interfaces+0x243/0x500 [ 129.488447][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 129.488464][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 129.488485][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 129.488502][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 129.488526][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 129.488552][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 129.488577][ C1] ? hw_scan_work+0xf50/0xf50 [ 129.488603][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 129.488621][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 129.488648][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 129.488669][ C1] handle_softirqs+0x2a1/0x930 [ 129.488693][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 129.488713][ C1] ? do_softirq+0x210/0x210 [ 129.488732][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 129.488752][ C1] __irq_exit_rcu+0x13b/0x230 [ 129.488767][ C1] ? irq_exit_rcu+0x20/0x20 [ 129.488792][ C1] irq_exit_rcu+0x5/0x20 [ 129.488805][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 129.488823][ C1] [ 129.488828][ C1] [ 129.488834][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.488853][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 129.488871][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0f cc 21 f7 65 8b 05 d0 50 cb 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 129.488884][ C1] RSP: 0000:ffffc900032b7560 EFLAGS: 00000206 [ 129.488897][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 798d949778e06d00 [ 129.488908][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 129.488920][ C1] RBP: ffffc900032b75f8 R08: ffffffff96e92a2b R09: 1ffffffff2dd2545 [ 129.488932][ C1] R10: dffffc0000000000 R11: fffffbfff2dd2546 R12: dffffc0000000000 [ 129.488944][ C1] R13: ffff8880184d8000 R14: ffffffff96e92a28 R15: 1ffff92000656eac [ 129.488970][ C1] ? _raw_spin_unlock+0x40/0x40 [ 129.488989][ C1] ? page_ext_put+0x98/0xb0 [ 129.489013][ C1] debug_check_no_obj_freed+0x515/0x530 [ 129.489043][ C1] free_unref_page_prepare+0x2a6/0x9a0 [ 129.489069][ C1] free_unref_page+0x2e/0x3f0 [ 129.489099][ C1] qlist_free_all+0x76/0xe0 [ 129.489118][ C1] kasan_quarantine_reduce+0x144/0x160 [ 129.489137][ C1] __kasan_slab_alloc+0x1e/0x80 [ 129.489160][ C1] slab_post_alloc_hook+0x4b/0x480 [ 129.489177][ C1] ? slab_pre_alloc_hook+0x91/0x310 [ 129.489198][ C1] kmem_cache_alloc_node+0x14d/0x320 [ 129.489214][ C1] ? __alloc_skb+0xfc/0x7e0 [ 129.489241][ C1] __alloc_skb+0xfc/0x7e0 [ 129.489265][ C1] alloc_skb_with_frags+0xa7/0x710 [ 129.489285][ C1] ? preempt_schedule_irq+0xe6/0x160 [ 129.489310][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 129.489344][ C1] ? sock_kzfree_s+0x50/0x50 [ 129.489360][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 129.489378][ C1] ? __rwlock_init+0x140/0x140 [ 129.489391][ C1] ? wait_for_unix_gc+0xe/0x190 [ 129.489413][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 129.489432][ C1] unix_dgram_sendmsg+0x539/0x16e0 [ 129.489452][ C1] ? aa_sk_perm+0x89/0x950 [ 129.489476][ C1] ? aa_sk_perm+0x81f/0x950 [ 129.489500][ C1] ? unix_dgram_poll+0x680/0x680 [ 129.489516][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 129.489543][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 129.489561][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.489577][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 129.489601][ C1] __sys_sendto+0x497/0x650 [ 129.489624][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 129.489666][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 129.489689][ C1] ? lock_chain_count+0x20/0x20 [ 129.489713][ C1] __x64_sys_sendto+0xda/0xf0 [ 129.489736][ C1] do_syscall_64+0x4c/0xa0 [ 129.489754][ C1] ? clear_bhb_loop+0x60/0xb0 [ 129.489772][ C1] ? clear_bhb_loop+0x60/0xb0 [ 129.489790][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.489808][ C1] RIP: 0033:0x7f5c3d7e4407 [ 129.489823][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.489835][ C1] RSP: 002b:00007ffde4f61f40 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 129.489852][ C1] RAX: ffffffffffffffda RBX: 00007f5c3d694c80 RCX: 00007f5c3d7e4407 [ 129.489864][ C1] RDX: 0000000000000057 RSI: 00007ffde4f62080 RDI: 0000000000000003 [ 129.489874][ C1] RBP: 00007ffde4f624b0 R08: 0000000000000000 R09: 0000000000000000 [ 129.489885][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde4f624c8 [ 129.489895][ C1] R13: 00007ffde4f62080 R14: 000000000000003c R15: 00007ffde4f62080 [ 129.489919][ C1] [ 129.496120][ C1] Kernel Offset: disabled [ 130.164393][ C1] Rebooting in 86400 seconds..