last executing test programs: 38.532516793s ago: executing program 2 (id=390): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r7 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="050eb429892f40c599cda699dea342672d25df6521c0bcdbd7f1d5ec7ca847c2ef9aca2902630a67202a1edc8de4d8a89e2938d5d2874397c671304c3eae7ef5167265a2f13634261551b85d291e6501b7724475511a765af00650921bf74fead230e47378da761abf9c4e792a8bbddf1bf643cde5764f4c8cbb6dd3bb22c968e4ff443ae9c97e2d7026cc70fbafaf038386d13a7fddec6b5229160d5f7cd35ea3ad0291eba826c423969faa4b6014ed86a38efe1d953baae84b83f0c54133383abfcab03e72cc295d3fd7a2c897baee67f28168a9f3f19299703e872433611d02b7ebb05963f561210948fec8902e2598", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.975767172s ago: executing program 2 (id=393): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000006404"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 37.770564083s ago: executing program 2 (id=396): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40044) landlock_restrict_self(0xffffffffffffffff, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) 35.835130743s ago: executing program 2 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0xffffffffffffffff, 0x1000, 0x10}, 0x1}}]}, {0x4}, {0xffd8, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="f2", 0x1}], 0x1}, 0x4011) 35.551130778s ago: executing program 2 (id=405): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20281, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.814630446s ago: executing program 2 (id=411): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x610, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 31.053801022s ago: executing program 1 (id=423): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.064664354s ago: executing program 1 (id=428): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="001569000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) futex(0x0, 0x5, 0x800, 0x0, 0x0, 0x93000000) 28.057626528s ago: executing program 1 (id=437): socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000020000006d0500000200000002c80000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x10, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r5, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x49, 0x7, 0x4}, {0x7, 0x9, 0x40, 0x401}, {0x41, 0xf, 0x9, 0x1}, {0xfff, 0x2, 0x7}, {0xda5c, 0xfa, 0x5, 0x1}]}) 19.478847765s ago: executing program 32 (id=411): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x610, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 18.523194154s ago: executing program 1 (id=466): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(0x0, r1, 0x0) r2 = syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505"], 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0, 0x0}, 0x0) 15.795321137s ago: executing program 1 (id=476): socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000020000006d0500000200000002c80000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x10, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r5, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x2000c010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x49, 0x7, 0x4}, {0x7, 0x9, 0x40, 0x401}, {0x41, 0xf, 0x9, 0x1}, {0xfff, 0x2, 0x7}, {0xda5c, 0xfa, 0x5, 0x1}]}) 12.899010337s ago: executing program 0 (id=481): syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x96, &(0x7f0000000140)=@string={0x96, 0x3, "36aa4d4978b7801a64816d6e414cbd77f42a249dcfad1600751760566b42577b296bf0b56fcf72a25555bb0dedc3fabb2f144e871e58e24d7ae11d0b659fe84703c89b17386c6514cc5b8e1622c5208e14211552c218d12f6974010aa7edc533efcab62870fa45d2e55d0f282bdc6a6be1bc229ffbf775c0b6658426f5e77c7932ee9f977a9eed077721aa9351d95021e983817a"}}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11.781782196s ago: executing program 4 (id=483): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000680)={0x2, 0x4ea3, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="0501cd074c03d5204bd58f1f67b2", 0xe}], 0x1}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) 11.109639061s ago: executing program 4 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) close(r3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x800000000000000) splice(r5, 0x0, r8, 0x0, 0x80, 0x8) write$tun(r6, &(0x7f00000033c0)=ANY=[], 0x107c) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c230"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) 9.809307969s ago: executing program 4 (id=488): inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$dri(0x0, 0x1, 0x48240) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close_range(r1, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) listen(0xffffffffffffffff, 0x40000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240), 0x0}, 0x20) 9.613436689s ago: executing program 0 (id=489): r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f00000003c0)={r0}) 9.553125422s ago: executing program 3 (id=490): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b02000020fd0000010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 8.742974284s ago: executing program 4 (id=491): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110a28bd7000fddbdf6509000000050008000300000008000300", @ANYRES32=r3, @ANYBLOB="050007"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.690529837s ago: executing program 3 (id=492): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() syz_open_dev$evdev(0x0, 0x2, 0x101002) setresgid(0x0, 0xee01, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1080) ptrace$cont(0x7, r1, 0xfffffffffffffffe, 0x835) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 8.690184667s ago: executing program 0 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1000, 0x5, 0xa053, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.460108869s ago: executing program 4 (id=494): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 7.649902131s ago: executing program 3 (id=495): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x7fff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ec1301002abd7000fddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004800}, 0x60000800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, 0x0, &(0x7f0000000080)=0x272) 5.956035569s ago: executing program 1 (id=496): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0x293, 0x1, 'client0\x00', 0x2, "be5827e43ba5426d", "461412f2e20881657a5e00553bddf444fb52186050a5f65325450fe16b0b651d", 0xfff, 0x1}) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x80000026, 0x4, @thr={&(0x7f0000000880)="a0de3325d0ce39dbdeb33167dac600ca9d0bba4245f753ddeec8bf3b7b9ce31173ee183e585928621ce1e5e0444a31c7f24695a7712fe2d6db4800baa85bf748788ddf74d2db794ffc0d5fe55a2a7efd5533287d76b1a3c3a97cba13489fd6090788fe0ab42be22034d13de2ce429c8efb469732b40de791dd24b4729dc792f797f6e0a65089bb91448402f61a4303104edf86be168a55d5ac6c96ad279a67f1e27034ea2c56a6501687", &(0x7f0000000500)="faf062ee9bf95767e9b6b0e845db79a1dd3ecfc004034f648c0ddee09323315a213eb6338c8f2c09244ef398c5d022d7482b8d1c66f89ea81dd117df"}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000b0601080000004c674f00000000000500000805000100070000000500010007003100000000100608800c000780050000000000070000000000000071a09e8daee73a4040adc6a22adb8cd43b375e7d84a25391136290514236aa942d74627e59d2be4d420748184a2c81e280fb6669ac6af2922bb96598e8"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getrlimit(0xc, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 5.658284215s ago: executing program 0 (id=497): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)="d9d247e745aae51a288ed62f06dfcf6cdf0c758930b2b0b7343010ce556c9ec4182b983d69bfc3ca87c0993a85a6c697ac442eadf49ee7dc50303f903b1dc9c1d124c64d47d265d9643eb0aae788f29657", 0x51}], 0x1) 4.985436899s ago: executing program 5 (id=498): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x6e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 4.77848998s ago: executing program 5 (id=499): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgsnd(0x0, 0x0, 0x2000, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r4) 3.761645193s ago: executing program 3 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0002}, {0x4, 0x9, 0x42, 0x81}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r9, &(0x7f00000000c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) sendfile(r1, r2, 0x0, 0x20fffe82) 3.623104751s ago: executing program 5 (id=501): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb, 0x3}, {0x10000002, 0x20, 0x400084, 0x3}]}, 0x94) close(0x3) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 3.091630148s ago: executing program 3 (id=502): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003500010326bd7000fedbdf2506000000765114b1c067e82e91278edb5fdb45394d0b41234181cfd1e9a46d3d84b9ce6a46226610b2610549605e6287c200efa9ab06b66352e068f0ae34d3a7f4a0997bc6af45bd09848aa21f3df40a1fc34892b6f914e09bed29892ca2c69c9f32bcb1cf11f452940fb3979a4a181e611d383aa35e0cd3eec154"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xe) 3.074930709s ago: executing program 4 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) r2 = socket(0x28, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040), 0x4) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x40, 0x1, 0xfff7fffe, 0x25dfdbff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) 1.102441092s ago: executing program 0 (id=504): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() syz_open_dev$evdev(0x0, 0x2, 0x101002) setresgid(0x0, 0xee01, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1080) ptrace$cont(0x7, r1, 0xfffffffffffffffe, 0x835) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 1.096494062s ago: executing program 5 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x900) 972.266139ms ago: executing program 5 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 875.786474ms ago: executing program 5 (id=507): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x8) 91.791845ms ago: executing program 0 (id=508): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TCSETS(r0, 0x8924, 0x0) 0s ago: executing program 3 (id=509): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000980)=@vmx={0x1, 0x0, 0x2080, {0xeeee0000, 0x10058000, {0x1}, 0x1, 0xffffffffffffffff}, {"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", "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"}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, 0x0, 0x50}}], 0x2, 0x800) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) r4 = fanotify_init(0x2, 0x1) fanotify_mark(r4, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x101) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 61.431421][ T4172] cgroup: Unknown subsys name 'net' [ 61.560124][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.066746][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.455144][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.546773][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 64.563166][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 64.618958][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.681229][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.689443][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.697692][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.727636][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.734925][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.742873][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.792532][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.801722][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.809590][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.817850][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.825906][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.833182][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.841391][ T4184] device bridge_slave_0 entered promiscuous mode [ 64.859052][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.878211][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.885510][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.893205][ T4191] device bridge_slave_0 entered promiscuous mode [ 64.900777][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.908089][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.916912][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.923920][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.931325][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.939810][ T4184] device bridge_slave_1 entered promiscuous mode [ 64.948149][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.969550][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.976899][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.985085][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.044110][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.055878][ T4186] team0: Port device team_slave_0 added [ 65.068135][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.079657][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.090660][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.100918][ T4186] team0: Port device team_slave_1 added [ 65.116877][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.128205][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.202055][ T4191] team0: Port device team_slave_0 added [ 65.211370][ T4187] team0: Port device team_slave_0 added [ 65.218091][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.225857][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.254474][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.267685][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.274972][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.283424][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.294030][ T4184] team0: Port device team_slave_0 added [ 65.301808][ T4191] team0: Port device team_slave_1 added [ 65.309405][ T4187] team0: Port device team_slave_1 added [ 65.316165][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.323359][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.350358][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.362496][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.369953][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.377832][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.386290][ T4184] team0: Port device team_slave_1 added [ 65.447864][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.455091][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.481369][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.496136][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.510287][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.517568][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.545184][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.557167][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.564712][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.591849][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.610866][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.618259][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.645262][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.665591][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.683355][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.690595][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.716820][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.729102][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.736664][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.763341][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.815597][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.822283][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.840020][ T4185] team0: Port device team_slave_0 added [ 65.884721][ T4185] team0: Port device team_slave_1 added [ 65.893156][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.900658][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.907760][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.915974][ T4187] Cannot create hsr debugfs directory [ 65.932889][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.940548][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.947760][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.955918][ T4191] Cannot create hsr debugfs directory [ 65.965846][ T4184] device hsr_slave_0 entered promiscuous mode [ 65.972936][ T4184] device hsr_slave_1 entered promiscuous mode [ 65.979962][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.987926][ T4184] Cannot create hsr debugfs directory [ 66.026183][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.033569][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.060752][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.096530][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.103770][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.130943][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.164984][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 66.174140][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 66.174669][ T2301] Bluetooth: hci1: command 0x0409 tx timeout [ 66.180441][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 66.193155][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 66.292139][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.299322][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.307203][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.315418][ T4185] Cannot create hsr debugfs directory [ 66.503765][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.519110][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.529879][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.541576][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.597750][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.613785][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.627461][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.654133][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.717033][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.727381][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.737562][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.751694][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.789458][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.836740][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.847103][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.883276][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.893393][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.903512][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.915976][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.927709][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.937712][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.947419][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.955145][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.970964][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.991218][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.003244][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.012394][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.023272][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.030436][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.043256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.077671][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.095425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.118570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.127819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.138634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.173112][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.188398][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.201142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.211579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.220290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.229643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.238581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.247851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.266248][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.273331][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.289905][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.302074][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.315398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.324845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.333645][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.341062][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.350652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.359989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.369216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.378440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.387561][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.395204][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.409300][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.431464][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.441071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.455165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.464938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.473958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.483977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.501008][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.525431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.538125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.548927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.558123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.567079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.577631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.586855][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.594114][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.605945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.614101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.625614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.634911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.655188][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.669291][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.682170][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.707980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.717741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.732273][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.740139][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.749886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.759229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.769146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.779059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.828018][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.843414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.853434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.861347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.870404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.881270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.890795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.900276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.909794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.918904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.928588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.937153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.952959][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.977773][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.988417][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.002723][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.009967][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.025774][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.034764][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.043340][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.057910][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.075682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.087853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.097420][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.104642][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.113262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.138727][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.152100][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.162662][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.182198][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.211169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.222175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.231900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.241089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.249776][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 68.256766][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 68.263728][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.264492][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 68.282362][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.293430][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 68.300081][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 68.303727][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.337761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.350992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.361327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.376538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.384044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.393729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.411060][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.444169][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.464778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.474651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.487552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.495714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.503705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.512311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.521947][ T4186] device veth0_vlan entered promiscuous mode [ 68.549334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.557954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.567264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.576709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.586348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.596332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.606187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.613804][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.623485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.633578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.642578][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.650177][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.662361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.674956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.690709][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.709304][ T4186] device veth1_vlan entered promiscuous mode [ 68.721493][ T4184] device veth0_vlan entered promiscuous mode [ 68.748400][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.763005][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.771854][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.781906][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.791804][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.802023][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.812401][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.821522][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.829890][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.837820][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.845852][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.856221][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.902858][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.913697][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.923891][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.933422][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.951175][ T4186] device veth0_macvtap entered promiscuous mode [ 68.973351][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.992756][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.007210][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.017607][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.026971][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.036823][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.046040][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.054594][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.063043][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.072200][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.084138][ T4186] device veth1_macvtap entered promiscuous mode [ 69.107763][ T4191] device veth0_vlan entered promiscuous mode [ 69.115651][ T4184] device veth1_vlan entered promiscuous mode [ 69.127034][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.137287][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.146951][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.160748][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.169924][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.178599][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.189640][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.208879][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.223948][ T4191] device veth1_vlan entered promiscuous mode [ 69.248329][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.259866][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.274029][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.291416][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.302236][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.314047][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.344120][ T4187] device veth0_vlan entered promiscuous mode [ 69.351512][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.360303][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.373310][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.381936][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.390960][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.402640][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.412849][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.422358][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.431719][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.463527][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.483058][ T4191] device veth0_macvtap entered promiscuous mode [ 69.501174][ T4184] device veth0_macvtap entered promiscuous mode [ 69.512012][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.525474][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.534467][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.542412][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.550607][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.560037][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.569278][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.578289][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.593730][ T4187] device veth1_vlan entered promiscuous mode [ 69.605227][ T4191] device veth1_macvtap entered promiscuous mode [ 69.624130][ T4184] device veth1_macvtap entered promiscuous mode [ 69.659923][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.682014][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.700238][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.734338][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.742918][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.762687][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.773442][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.788825][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.799718][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.822787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.832418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.843050][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.857243][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.868662][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.880573][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.892239][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.902546][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.913564][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.925065][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.955866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.965048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.973939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.984610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.997755][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.009440][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.019297][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.028646][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.041256][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.052267][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.063617][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.075415][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.088040][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.108631][ T4185] device veth0_vlan entered promiscuous mode [ 70.128714][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.138383][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.147845][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.157599][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.167008][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.176736][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.189495][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.198732][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.209228][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219478][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.237177][ T4187] device veth0_macvtap entered promiscuous mode [ 70.255880][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.264014][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.278542][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.287308][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.297711][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.306877][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.320015][ T4185] device veth1_vlan entered promiscuous mode [ 70.325162][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 70.335879][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 70.353443][ T4187] device veth1_macvtap entered promiscuous mode [ 70.354404][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 70.369435][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 70.376185][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 70.428438][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.432273][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.448538][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.449409][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.466257][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.477237][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.487765][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.499128][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.511424][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.549647][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.559340][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.569738][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.578280][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.588233][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.598368][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.630753][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.641737][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.654881][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.665758][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.675805][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.686842][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.698403][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.713565][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.718423][ T4185] device veth0_macvtap entered promiscuous mode [ 70.722231][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.785390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.797134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.811544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.820989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.830172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.840099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.860292][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.860978][ T4185] device veth1_macvtap entered promiscuous mode [ 70.868750][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.884624][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.903215][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.941992][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.952531][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.962440][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.029569][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.041681][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.052892][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.065009][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.075474][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.086090][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.096991][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.108372][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.119774][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.129760][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.136238][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.149380][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.155771][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.169313][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.180045][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.190501][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.201533][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.212938][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.223749][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.236226][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.250213][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.259989][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.269414][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.279137][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.288813][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.303648][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.312882][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.322078][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.331149][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.346365][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.374050][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.405403][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.449775][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456480][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.530194][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.545317][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.567627][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.588074][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.610391][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.634595][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.674163][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.681977][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.683046][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.702456][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.708089][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.720362][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.814668][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.549744][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 72.580888][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 72.616105][ T4232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.174952][ T4232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.232402][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.265891][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.300235][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 73.312029][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 73.318909][ T4273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.348691][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.314258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.671615][ T4232] usb 3-1: USB disconnect, device number 2 [ 76.672713][ T4321] input: syz1 as /devices/virtual/input/input5 [ 78.903216][ T4332] sched: RT throttling activated [ 78.903731][ T2301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.478657][ T4330] ODEBUG: Out of memory. ODEBUG disabled [ 81.374672][ T4353] syz.4.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.408576][ T4353] ubi31: attaching mtd0 [ 81.420293][ T4353] ubi31: scanning is finished [ 81.425154][ T4353] ubi31: empty MTD device detected [ 81.564879][ T4353] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 81.769068][ T21] cfg80211: failed to load regulatory.db [ 82.354520][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.894608][ T4234] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.903714][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.029153][ T4234] usb 5-1: Product: syz [ 83.036168][ T4234] usb 5-1: Manufacturer: syz [ 83.040910][ T4234] usb 5-1: SerialNumber: syz [ 83.125309][ T4364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.344260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 83.614231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.792168][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.800250][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.874450][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.544833][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.545128][ T4234] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 84.558257][ T21] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 84.584402][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.667591][ T21] usb 4-1: config 0 descriptor?? [ 85.080463][ T4379] netlink: 'syz.2.27': attribute type 39 has an invalid length. [ 85.105575][ T4357] udc-core: couldn't find an available UDC or it's busy [ 85.134167][ T4357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.235120][ T4367] syz.0.23 (4367) used greatest stack depth: 19952 bytes left [ 85.320735][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 85.337488][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 85.558133][ T21] usb 4-1: USB disconnect, device number 2 [ 86.494284][ T2301] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 87.087039][ T4234] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 87.104349][ T4234] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 87.116480][ T4234] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 87.127184][ T4234] lan78xx: probe of 5-1:1.0 failed with error -71 [ 87.144477][ T4234] usb 5-1: USB disconnect, device number 2 [ 87.424650][ T2301] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.448767][ T2301] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.506833][ T2301] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.650470][ T2301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.654181][ T4414] syz.2.37 uses old SIOCAX25GETINFO [ 87.782890][ T4414] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 87.914237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.540234][ T4420] process 'syz.1.38' launched './file1' with NULL argv: empty string added [ 89.154452][ T2301] usb 1-1: usb_control_msg returned -71 [ 89.164757][ T2301] usbtmc 1-1:16.0: can't read capabilities [ 89.200304][ T2301] usb 1-1: USB disconnect, device number 2 [ 89.269174][ T4414] device veth0_vlan left promiscuous mode [ 89.312070][ T4414] device veth0_vlan entered promiscuous mode [ 89.351798][ T4414] team0: Device veth0_vlan failed to register rx_handler [ 89.572831][ T4414] syz.2.37 (4414) used greatest stack depth: 18960 bytes left [ 90.014235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 91.381122][ T4468] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 91.684375][ T4234] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 91.934678][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.044854][ T4234] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.135738][ T4234] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.214391][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 92.334722][ T1110] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 92.393737][ T4234] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.424124][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.544631][ T1110] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 92.599701][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.670525][ T1110] usb 1-1: Product: syz [ 92.704407][ T4234] usb 4-1: usb_control_msg returned -32 [ 92.717965][ T4234] usbtmc 4-1:16.0: can't read capabilities [ 92.729587][ T1110] usb 1-1: Manufacturer: syz [ 92.744720][ T1110] usb 1-1: SerialNumber: syz [ 92.765470][ T1110] usb 1-1: config 0 descriptor?? [ 92.923302][ T1110] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 92.933523][ T1110] usb 1-1: setting power ON [ 92.955096][ T1110] dvb-usb: bulk message failed: -22 (2/0) [ 93.814594][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.848376][ T1110] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 93.874335][ T1110] usb 1-1: media controller created [ 93.908960][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.956239][ T1110] usb 1-1: selecting invalid altsetting 6 [ 93.974161][ T1110] usb 1-1: digital interface selection failed (-22) [ 94.004556][ T1110] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 94.015475][ T7] usb 4-1: USB disconnect, device number 3 [ 94.034504][ T2301] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.084709][ T1110] usb 1-1: setting power OFF [ 94.089733][ T1110] dvb-usb: bulk message failed: -22 (2/0) [ 94.114556][ T1110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 94.157673][ T1110] (NULL device *): no alternate interface [ 94.248824][ T1110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 94.362834][ T1110] usb 1-1: USB disconnect, device number 3 [ 94.584777][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.624250][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.634060][ T2301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.762531][ T2301] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.269162][ T2301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.292016][ T2301] usb 5-1: config 0 descriptor?? [ 96.529688][ T4187] cgroup: fork rejected by pids controller in /syz1 [ 96.798845][ T2301] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 96.894859][ T2301] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.947007][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 100.415742][ T4374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.720401][ T4374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.884261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 100.904267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 100.914245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 100.924248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 100.934247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 101.053124][ T1110] usb 5-1: USB disconnect, device number 3 [ 101.228980][ T4636] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.239668][ T4374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.335234][ T4374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.224319][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.744829][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 104.004655][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 104.030116][ T4234] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 104.050349][ T4234] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 104.070942][ T4234] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 104.091211][ T4234] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 104.142614][ T4234] usb 4-1: config 1 interface 0 has no altsetting 0 [ 104.166775][ T4234] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 104.198084][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.275509][ T4234] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 104.588675][ T4234] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 104.622979][ T4234] usb 4-1: USB disconnect, device number 4 [ 104.629563][ T1110] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.696178][ T4666] chnl_net:caif_netlink_parms(): no params data found [ 104.962659][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.991560][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.021700][ T4666] device bridge_slave_0 entered promiscuous mode [ 105.114489][ T1110] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 105.188855][ T1110] usb 5-1: config 0 has no interface number 0 [ 105.584509][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.598657][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.608238][ T1110] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 105.618623][ T1110] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.633737][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 105.649220][ T4666] device bridge_slave_1 entered promiscuous mode [ 105.765404][ T4666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.788183][ T4666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.826519][ T4725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 106.146456][ T4374] device hsr_slave_0 left promiscuous mode [ 106.193550][ T4374] device hsr_slave_1 left promiscuous mode [ 106.221975][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.260777][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.315305][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.343119][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.387024][ T4374] device bridge_slave_1 left promiscuous mode [ 106.394721][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.412973][ T4374] device bridge_slave_0 left promiscuous mode [ 106.421476][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.429708][ T1110] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 106.439103][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.447786][ T1110] usb 5-1: Product: syz [ 106.452308][ T1110] usb 5-1: Manufacturer: syz [ 106.457110][ T1110] usb 5-1: SerialNumber: syz [ 106.464004][ T1110] usb 5-1: config 0 descriptor?? [ 106.484755][ T4697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.505581][ T1110] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 106.537379][ T1110] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 106.562208][ T4374] device veth1_macvtap left promiscuous mode [ 106.574303][ T4374] device veth0_macvtap left promiscuous mode [ 106.586209][ T4374] device veth1_vlan left promiscuous mode [ 106.592575][ T4374] device veth0_vlan left promiscuous mode [ 106.764527][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 107.183833][ T4697] capability: warning: `syz.4.116' uses deprecated v2 capabilities in a way that may be insecure [ 107.680287][ T4374] team0 (unregistering): Port device team_slave_1 removed [ 107.687845][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 107.698566][ T4374] team0 (unregistering): Port device team_slave_0 removed [ 107.718059][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.738151][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.910474][ T4374] bond0 (unregistering): Released all slaves [ 108.062804][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.546680][ T4666] team0: Port device team_slave_0 added [ 109.055243][ T4666] team0: Port device team_slave_1 added [ 109.208912][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.217553][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.319326][ T4666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.059422][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 110.102068][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.476021][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.518868][ T4666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.980591][ T4268] usb 5-1: USB disconnect, device number 4 [ 112.018886][ T4268] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 112.111429][ T4268] cyberjack 5-1:0.69: device disconnected [ 112.119557][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 112.171904][ T4666] device hsr_slave_0 entered promiscuous mode [ 112.203862][ T4666] device hsr_slave_1 entered promiscuous mode [ 112.244715][ T4666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.263672][ T4666] Cannot create hsr debugfs directory [ 113.171208][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.284364][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.645244][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.663873][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.694355][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.713917][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.734659][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.376541][ T7] usb 3-1: USB disconnect, device number 3 [ 115.886457][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.176541][ T4855] loop0: detected capacity change from 0 to 512 [ 116.234365][ T4236] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.290500][ T4857] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 116.614605][ T4236] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 116.632278][ T4236] usb 5-1: config 0 has no interface number 0 [ 116.640061][ T4236] usb 5-1: config 0 interface 89 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 116.682071][ T4236] usb 5-1: config 0 interface 89 has no altsetting 0 [ 116.687817][ T4855] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.846210][ T4855] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.915032][ T4236] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 116.938548][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.969364][ T4236] usb 5-1: Product: syz [ 116.979312][ T4236] usb 5-1: Manufacturer: syz [ 116.988552][ T4236] usb 5-1: SerialNumber: syz [ 117.020268][ T4236] usb 5-1: config 0 descriptor?? [ 117.316579][ T1107] usb 5-1: USB disconnect, device number 5 [ 117.383032][ T4666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.696215][ T4666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.534650][ T4666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.750066][ T4666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.945193][ T4919] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 122.521838][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.614983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.640689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.816461][ T4666] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.944738][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.953693][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.156035][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.163184][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.386543][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.396905][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.415920][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.423070][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.468797][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.494492][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.503986][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.576317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.640446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.695143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.698824][ T4946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 123.729581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.794427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.829776][ T4666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.963461][ T4666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.983799][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.035345][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.406959][ T4268] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.425146][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.450248][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.484052][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.513856][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 124.684284][ T4268] usb 1-1: Using ep0 maxpacket: 8 [ 124.814657][ T4268] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 124.836733][ T4268] usb 1-1: config 0 has no interface number 0 [ 124.874980][ T4268] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 124.932935][ T4268] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 124.966158][ T4268] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.998224][ T4268] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.014576][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.055447][ T4268] usb 1-1: config 0 descriptor?? [ 125.125432][ T4268] ldusb 1-1:0.55: Interrupt in endpoint not found [ 125.318906][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.349563][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.394067][ T4666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.495680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.516886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.625427][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.649902][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.228429][ T23] usb 1-1: USB disconnect, device number 4 [ 126.275348][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.325968][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.421983][ T4666] device veth0_vlan entered promiscuous mode [ 126.430830][ T4994] loop4: detected capacity change from 0 to 1024 [ 126.477246][ T4994] ======================================================= [ 126.477246][ T4994] WARNING: The mand mount option has been deprecated and [ 126.477246][ T4994] and is ignored by this kernel. Remove the mand [ 126.477246][ T4994] option from the mount to silence this warning. [ 126.477246][ T4994] ======================================================= [ 126.557347][ T4666] device veth1_vlan entered promiscuous mode [ 126.666714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.688004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.709045][ T4994] EXT4-fs (loop4): Ignoring removed oldalloc option [ 126.726344][ T4994] EXT4-fs (loop4): Ignoring removed bh option [ 126.735247][ T4666] device veth0_macvtap entered promiscuous mode [ 126.770533][ T4666] device veth1_macvtap entered promiscuous mode [ 126.809598][ T4994] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.858809][ T4994] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 126.858809][ T4994] [ 126.930810][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.951823][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.972905][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.020402][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.050944][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.121617][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.341999][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.453612][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.526239][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.615876][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.661458][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.765207][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.788736][ T5015] syz.0.187 uses obsolete (PF_INET,SOCK_PACKET) [ 127.844456][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.911435][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.983791][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.076772][ T5023] loop4: detected capacity change from 0 to 256 [ 128.791738][ T4666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.804470][ T4666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.833600][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.899074][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.945045][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.965067][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.988150][ T5023] FAT-fs (loop4): IO charset cp86 not found [ 129.017440][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.046140][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.071562][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.337305][ T4666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.749501][ T26] audit: type=1326 audit(1776530964.771:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 129.794318][ T4666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.824344][ T4666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.833793][ T26] audit: type=1326 audit(1776530964.771:3): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 129.913772][ T4666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.031315][ T26] audit: type=1326 audit(1776530964.791:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.070287][ T26] audit: type=1326 audit(1776530964.791:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.099555][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.107003][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.116091][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.123347][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.144410][ T26] audit: type=1326 audit(1776530964.791:6): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.204721][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.214958][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.232592][ T26] audit: type=1326 audit(1776530964.791:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.267439][ T5041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.294805][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.307697][ T26] audit: type=1326 audit(1776530964.791:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.404500][ T21] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 130.528790][ T26] audit: type=1326 audit(1776530964.801:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 130.652869][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.691548][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.764652][ T21] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 130.812365][ T21] usb 4-1: config 0 has no interface number 0 [ 130.901568][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.922762][ T21] usb 4-1: config 0 interface 89 has no altsetting 0 [ 130.937314][ T26] audit: type=1326 audit(1776530964.801:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 131.224825][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 131.278858][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.332606][ T26] audit: type=1326 audit(1776530964.801:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f69e618c819 code=0x7ffc0000 [ 131.415506][ T21] usb 4-1: Product: syz [ 131.470917][ T21] usb 4-1: Manufacturer: syz [ 131.527062][ T21] usb 4-1: SerialNumber: syz [ 131.659230][ T21] usb 4-1: config 0 descriptor?? [ 131.731782][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.790139][ T21] em28xx 4-1:0.89: New device syz syz @ 12 Mbps (0ccd:10af, interface 89, class 89) [ 131.820613][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.836489][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.984268][ T21] em28xx 4-1:0.89: Device initialization failed. [ 132.042065][ T21] em28xx 4-1:0.89: Device must be connected to a high-speed USB 2.0 port. [ 132.075614][ T21] usb 4-1: USB disconnect, device number 5 [ 132.336725][ T5088] loop0: detected capacity change from 0 to 1024 [ 132.361247][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 132.400985][ T5088] EXT4-fs (loop0): Ignoring removed oldalloc option [ 132.457367][ T5088] EXT4-fs (loop0): Ignoring removed bh option [ 132.483283][ T5088] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.518732][ T5088] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 132.518732][ T5088] [ 132.604298][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.903918][ T5105] loop0: detected capacity change from 0 to 256 [ 132.913020][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919479][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.180531][ T5105] FAT-fs (loop0): IO charset cp86 not found [ 134.554587][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.049152][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.059498][ T21] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 135.069204][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.090501][ T21] usb 3-1: config 0 descriptor?? [ 135.175912][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 135.187071][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 135.194716][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.204901][ T4197] Workqueue: hci0 hci_rx_work [ 135.209637][ T4197] Call Trace: [ 135.213315][ T4197] [ 135.216275][ T4197] dump_stack_lvl+0x188/0x250 [ 135.220997][ T4197] ? show_regs_print_info+0x20/0x20 [ 135.226399][ T4197] ? load_image+0x400/0x400 [ 135.230944][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 135.236180][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 135.241037][ T4197] ? process_one_work+0x85f/0x1010 [ 135.246463][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 135.251832][ T4197] kobject_add_internal+0x6e0/0xd90 [ 135.257175][ T4197] kobject_add+0x160/0x230 [ 135.261742][ T4197] ? kobject_init+0x1d0/0x1d0 [ 135.266799][ T4197] ? klist_children_get+0x50/0x50 [ 135.271850][ T4197] ? get_device_parent+0x121/0x3f0 [ 135.277085][ T4197] device_add+0x483/0xfb0 [ 135.281462][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 135.286442][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 135.291785][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 135.297181][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 135.302859][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 135.307885][ T4197] ? hci_event_packet+0x37b/0x1370 [ 135.313052][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 135.318135][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 135.324238][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.329911][ T4197] ? mark_lock+0x94/0x320 [ 135.334557][ T4197] ? mutex_unlock+0x10/0x10 [ 135.339103][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.345123][ T4197] ? lock_chain_count+0x20/0x20 [ 135.350103][ T4197] ? __rwlock_init+0x140/0x140 [ 135.355174][ T4197] hci_event_packet+0xe48/0x1370 [ 135.360241][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 135.365801][ T4197] ? rcu_lock_release+0x20/0x20 [ 135.370784][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 135.376106][ T4197] hci_rx_work+0x255/0xa10 [ 135.380613][ T4197] process_one_work+0x85f/0x1010 [ 135.385607][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 135.391273][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 135.396758][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 135.401898][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 135.407496][ T4197] ? wq_worker_running+0x97/0x170 [ 135.412562][ T4197] worker_thread+0xaa6/0x1290 [ 135.417305][ T4197] kthread+0x436/0x520 [ 135.421577][ T4197] ? rcu_lock_release+0x20/0x20 [ 135.426466][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 135.431177][ T4197] ret_from_fork+0x1f/0x30 [ 135.435738][ T4197] [ 135.462106][ T4197] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.476094][ T4197] Bluetooth: hci0: failed to register connection device [ 135.531559][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 135.553152][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.586039][ T21] usb 3-1: USB disconnect, device number 4 [ 135.784817][ T5148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.479986][ T5234] block nbd4: shutting down sockets [ 141.558423][ T5246] binder: 5244:5246 ioctl c0306201 200000000680 returned -14 [ 141.604621][ T4887] Bluetooth: hci0: command 0x0406 tx timeout [ 143.554421][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.101811][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 144.281338][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 144.464669][ T7] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 144.492006][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.534715][ T7] usb 5-1: Product: syz [ 144.543451][ T7] usb 5-1: Manufacturer: syz [ 144.556026][ T7] usb 5-1: SerialNumber: syz [ 145.330794][ T7] usb 5-1: config 0 descriptor?? [ 145.674269][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.711844][ T4230] usb 5-1: USB disconnect, device number 6 [ 146.234582][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.246047][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.254786][ T7] usb 2-1: Product: syz [ 146.259591][ T7] usb 2-1: Manufacturer: syz [ 146.264986][ T7] usb 2-1: SerialNumber: syz [ 146.760143][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.934521][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 147.154305][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 147.427791][ T5333] kvm [5332]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 147.514562][ T23] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 147.523870][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.564241][ T23] usb 3-1: Product: syz [ 147.568572][ T23] usb 3-1: Manufacturer: syz [ 147.573303][ T23] usb 3-1: SerialNumber: syz [ 147.591919][ T23] usb 3-1: config 0 descriptor?? [ 147.634589][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.888199][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 148.104490][ T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 148.150291][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.164922][ T4233] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 148.196887][ T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 148.205074][ T23] usb 3-1: media controller created [ 148.214810][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.221427][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.233195][ T4233] usb 1-1: Product: syz [ 148.260452][ T4233] usb 1-1: Manufacturer: syz [ 148.286217][ T4233] usb 1-1: SerialNumber: syz [ 148.349275][ T4233] usb 1-1: config 0 descriptor?? [ 148.411797][ T4233] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 148.458816][ T5346] Zero length message leads to an empty skb [ 148.560924][ T5346] device syzkaller0 entered promiscuous mode [ 148.784432][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 148.814533][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 148.825953][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 148.836569][ T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 148.854312][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 148.870844][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 148.957311][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 148.994341][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 149.024356][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 149.054413][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 149.176469][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 149.204943][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 149.222504][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.243081][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.263226][ T7] lan78xx: probe of 2-1:1.0 failed with error -71 [ 150.064331][ T4233] gspca_sonixj: reg_w1 err -110 [ 150.069292][ T4233] sonixj: probe of 1-1:0.0 failed with error -110 [ 150.133588][ T7] usb 2-1: USB disconnect, device number 3 [ 150.209244][ T5367] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 150.448511][ T5370] overlayfs: failed to clone upperpath [ 150.560655][ T5371] overlayfs: failed to clone upperpath [ 151.909035][ T7] usb 3-1: USB disconnect, device number 5 [ 151.928619][ T23] usb 1-1: USB disconnect, device number 5 [ 151.946005][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 152.044701][ T5377] loop3: detected capacity change from 0 to 1024 [ 152.191379][ T5377] EXT4-fs (loop3): Ignoring removed oldalloc option [ 152.289929][ T5377] EXT4-fs (loop3): Ignoring removed bh option [ 152.368374][ T5377] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.615500][ T5377] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 152.615500][ T5377] [ 153.215184][ T5404] loop3: detected capacity change from 0 to 256 [ 154.110941][ T5404] FAT-fs (loop3): IO charset cp86 not found [ 155.105069][ T5431] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 157.583130][ T5450] loop3: detected capacity change from 0 to 1024 [ 157.643365][ T5448] device syzkaller0 entered promiscuous mode [ 157.733850][ T5450] EXT4-fs (loop3): Ignoring removed oldalloc option [ 157.751372][ T5450] EXT4-fs (loop3): Ignoring removed bh option [ 157.768060][ T5450] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.821991][ T5450] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 157.821991][ T5450] [ 158.217471][ T5461] loop3: detected capacity change from 0 to 256 [ 159.082694][ T5461] FAT-fs (loop3): IO charset cp86 not found [ 161.113959][ T5503] loop0: detected capacity change from 0 to 1024 [ 161.201833][ T5503] EXT4-fs (loop0): Ignoring removed oldalloc option [ 161.234517][ T5503] EXT4-fs (loop0): Ignoring removed bh option [ 161.257007][ T5503] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.288957][ T5503] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 161.288957][ T5503] [ 163.208829][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 163.454124][ T5536] loop1: detected capacity change from 0 to 1024 [ 163.503723][ T5536] EXT4-fs (loop1): Ignoring removed oldalloc option [ 163.541606][ T5536] EXT4-fs (loop1): Ignoring removed bh option [ 163.598063][ T5536] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.650716][ T5536] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 163.650716][ T5536] [ 164.121298][ T5548] loop1: detected capacity change from 0 to 256 [ 165.029382][ T5547] device syzkaller0 entered promiscuous mode [ 165.121870][ T5548] FAT-fs (loop1): IO charset cp86 not found [ 165.653969][ T5569] loop3: detected capacity change from 0 to 512 [ 165.798688][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.830796][ T5569] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.857822][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.936889][ T5588] binder: 5587:5588 unknown command 0 [ 167.956152][ T5588] binder: 5587:5588 ioctl c0306201 200000000080 returned -22 [ 168.124321][ T5595] loop3: detected capacity change from 0 to 1024 [ 168.171703][ T5596] device syzkaller0 entered promiscuous mode [ 168.194561][ T5595] EXT4-fs (loop3): Ignoring removed oldalloc option [ 168.229287][ T5595] EXT4-fs (loop3): Ignoring removed bh option [ 168.274785][ T5595] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.299163][ T5595] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 168.299163][ T5595] [ 168.394662][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 168.420362][ T7] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 168.431342][ T7] usb 5-1: Product: syz [ 168.474090][ T7] usb 5-1: Manufacturer: syz [ 168.507993][ T7] usb 5-1: SerialNumber: syz [ 168.554977][ T7] usb 5-1: config 0 descriptor?? [ 168.605843][ T7] ch341 5-1:0.0: ch341-uart converter detected [ 168.795624][ T5611] loop3: detected capacity change from 0 to 256 [ 169.594453][ T7] usb 5-1: failed to receive control message: -71 [ 169.601188][ T7] ch341-uart: probe of ttyUSB0 failed with error -71 [ 169.663153][ T7] usb 5-1: USB disconnect, device number 7 [ 169.798405][ T7] ch341 5-1:0.0: device disconnected [ 169.830513][ T5611] FAT-fs (loop3): IO charset cp86 not found [ 170.703066][ T4231] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 170.749357][ T5625] loop4: detected capacity change from 0 to 512 [ 171.001985][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.053931][ T5625] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.114451][ T4231] usb 1-1: config 251 has an invalid interface number: 33 but max is 0 [ 171.122989][ T4231] usb 1-1: config 251 has no interface number 0 [ 171.136684][ T4231] usb 1-1: config 251 interface 33 has no altsetting 0 [ 171.492244][ T4231] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=94.85 [ 172.233922][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.253840][ T4231] usb 1-1: Product: syz [ 172.283111][ T4231] usb 1-1: Manufacturer: syz [ 172.310456][ T4231] usb 1-1: SerialNumber: syz [ 172.597541][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 172.725262][ T4231] smsc95xx v2.0.0 [ 172.729153][ T4231] smsc95xx 1-1:251.33 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 172.755751][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 172.760305][ T4231] smsc95xx: probe of 1-1:251.33 failed with error -22 [ 172.776407][ T4231] usb 1-1: USB disconnect, device number 6 [ 172.885771][ T5654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 172.944055][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 172.967374][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.114337][ T7] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 173.135017][ T21] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.574482][ T21] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 173.614307][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.630462][ T21] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 173.640342][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.644471][ T7] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 173.669216][ T21] usb 5-1: config 0 descriptor?? [ 173.717576][ T5652] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.819451][ T7] usb 4-1: config 0 has no interface number 0 [ 173.844958][ T7] usb 4-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 174.198562][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.227294][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.234371][ T7] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.257748][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.273906][ T7] usb 4-1: config 0 interface 113 has no altsetting 0 [ 174.288963][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.309212][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.338273][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.354466][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.372687][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.399594][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.417641][ T5686] loop0: detected capacity change from 0 to 512 [ 174.427827][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.445020][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.462090][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.464502][ T7] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 174.499133][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.522831][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.526619][ T7] usb 4-1: Product: syz [ 174.551601][ T7] usb 4-1: Manufacturer: syz [ 174.552692][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.574840][ T7] usb 4-1: SerialNumber: syz [ 174.582528][ T5686] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.593071][ T7] usb 4-1: config 0 descriptor?? [ 174.604628][ T5686] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.635250][ T7] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 174.801187][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.809814][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.824513][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.832308][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.864267][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.894094][ T4233] usb 4-1: USB disconnect, device number 6 [ 174.937106][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.946702][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.955940][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.963950][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.974221][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 174.982302][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.030784][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.044360][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.053168][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.065305][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.074010][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.086627][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.097737][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.108738][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.119760][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.130487][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.141485][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.235620][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.418377][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.462238][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.564298][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.582559][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.589220][ T5697] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 175.598784][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.614236][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.623112][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.664481][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.672326][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.705238][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.713501][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.761511][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.780857][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.802378][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.828148][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.846592][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.872512][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.888429][ T21] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 175.918899][ T21] creative-sb0540 0003:041E:3100.0002: unexpected long global item [ 175.937193][ T21] creative-sb0540 0003:041E:3100.0002: parse failed [ 175.943940][ T21] creative-sb0540: probe of 0003:041E:3100.0002 failed with error -22 [ 175.961987][ T21] usb 5-1: USB disconnect, device number 8 [ 176.234398][ T5715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 177.260968][ T5750] loop4: detected capacity change from 0 to 512 [ 177.416319][ T5750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.464123][ T5750] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.038943][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 182.429578][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 185.091728][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.136264][ T5863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.430'. [ 185.336776][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 185.614466][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 185.639795][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 185.661528][ T23] usb 2-1: Product: syz [ 185.668426][ T23] usb 2-1: Manufacturer: syz [ 185.679865][ T23] usb 2-1: SerialNumber: syz [ 185.709445][ T23] usb 2-1: config 0 descriptor?? [ 185.796450][ T23] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 185.994596][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.224352][ T23] gspca_sn9c2028: read1 error -71 [ 186.244429][ T23] gspca_sn9c2028: read1 error -71 [ 186.250476][ T23] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 186.285200][ T23] usb 2-1: USB disconnect, device number 4 [ 186.404525][ T4234] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.443573][ T4234] usb 5-1: config 0 has no interface number 0 [ 186.614493][ T4234] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 186.633837][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.654293][ T4234] usb 5-1: Product: syz [ 186.664407][ T4234] usb 5-1: Manufacturer: syz [ 186.669328][ T4234] usb 5-1: SerialNumber: syz [ 186.715888][ T4234] usb 5-1: config 0 descriptor?? [ 187.294483][ T4234] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 187.379397][ T4234] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.424524][ T4234] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 187.440254][ T4234] usb 5-1: media controller created [ 187.491753][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.824380][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.885354][ T23] usb 5-1: USB disconnect, device number 9 [ 188.174307][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 189.056753][ T7] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.074925][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.081861][ T7] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 189.091476][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.110033][ T7] usb 1-1: config 0 descriptor?? [ 189.599523][ T7] hid-generic 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 190.062674][ T7] usb 1-1: USB disconnect, device number 7 [ 191.384868][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.999620][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 192.747040][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 192.984825][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 194.329411][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345540][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.544443][ T5299] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.563586][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.572996][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.582175][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.591543][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.600628][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.609708][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.619266][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.628677][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.637754][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 194.646855][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 195.524266][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 196.397105][ T5299] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 196.408776][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.481231][ T5299] pvrusb2: Hardware description: Terratec Grabster AV400 [ 196.489512][ T5299] pvrusb2: ********** [ 196.493793][ T5299] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 196.514373][ T5299] pvrusb2: Important functionality might not be entirely working. [ 196.522349][ T5299] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 196.533868][ T5299] pvrusb2: ********** [ 196.676758][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.695776][ T2426] pvrusb2: Invalid write control endpoint [ 196.924382][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 197.052624][ T23] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 197.595480][ T4268] usb 5-1: USB disconnect, device number 10 [ 197.635277][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.676247][ T23] usb 2-1: config 0 has no interface number 0 [ 197.722766][ T2426] pvrusb2: Invalid write control endpoint [ 197.739579][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 197.749657][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.757481][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.805015][ T2426] pvrusb2: Device being rendered inoperable [ 197.829331][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 197.840025][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.854708][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 197.874639][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 197.882564][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.907600][ T23] usb 2-1: Product: syz [ 197.919462][ T23] usb 2-1: Manufacturer: syz [ 197.931699][ T2426] pvrusb2: Attached sub-driver cx25840 [ 197.950232][ T23] usb 2-1: SerialNumber: syz [ 197.956175][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 197.971787][ T23] usb 2-1: config 0 descriptor?? [ 197.990733][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 198.107073][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.141024][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.179178][ T5964] device bridge_slave_0 entered promiscuous mode [ 198.222475][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.231614][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.239382][ T23] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 198.246532][ T23] usb 2-1: No valid video chain found. [ 198.268070][ T5964] device bridge_slave_1 entered promiscuous mode [ 198.324028][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.368472][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.414687][ T5299] Bluetooth: hci5: command 0x0409 tx timeout [ 198.468655][ T2301] usb 2-1: USB disconnect, device number 5 [ 198.499516][ T5964] team0: Port device team_slave_0 added [ 198.531383][ T5964] team0: Port device team_slave_1 added [ 198.600178][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.614362][ T4268] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 198.628479][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.746845][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.808572][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.823154][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.880849][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.894443][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 198.959574][ T5964] device hsr_slave_0 entered promiscuous mode [ 198.970504][ T5964] device hsr_slave_1 entered promiscuous mode [ 199.014540][ T4268] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.056176][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.068075][ T4268] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 199.072998][ T5964] Cannot create hsr debugfs directory [ 199.103787][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.467119][ T4268] usb 5-1: config 0 descriptor?? [ 200.619728][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 200.839520][ T5964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.855644][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 200.873654][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 200.888892][ T5964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.915426][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 200.949287][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 200.975452][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.002035][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.037080][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.044611][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.051906][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.061066][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.073702][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.093811][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.102481][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.110344][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.118019][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.125405][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.132880][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.151634][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.170090][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.177777][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.185385][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.192713][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.211011][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.218503][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.226008][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.233333][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.241063][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.248479][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.256130][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.273501][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.281119][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.288795][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.296252][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.305029][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.312224][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.320247][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.327887][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.335640][ T4268] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 201.360249][ T4268] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 201.371962][ T4268] zeroplus 0003:0C12:0030.0004: no inputs found [ 201.410502][ T4268] usb 5-1: USB disconnect, device number 11 [ 201.454860][ T5964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.480356][ T6008] fido_id[6008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 201.496518][ T5964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.678094][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.701537][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.745407][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.766635][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.817975][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.847657][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.867664][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.874790][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.910054][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.945678][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.985104][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.024741][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.031965][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.083965][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.093403][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.150316][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.170321][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.189001][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.035914][ T4268] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.048046][ T4234] Bluetooth: hci5: command 0x040f tx timeout [ 203.053701][ T5964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.094712][ T5964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.122912][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.154968][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.174657][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.201545][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.226577][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.243542][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.255373][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.284513][ T4268] usb 1-1: Using ep0 maxpacket: 8 [ 203.441339][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 203.449840][ T4268] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.479135][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 203.523794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.532074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.542138][ T4268] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 203.546564][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.558403][ T4268] usb 1-1: config 0 has no interface number 0 [ 203.569856][ T4268] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 203.591706][ T4268] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 203.625453][ T4268] usb 1-1: config 0 interface 88 has no altsetting 0 [ 203.934660][ T4268] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 203.945759][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.954928][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.963863][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 203.972408][ T4268] usb 1-1: Product: syz [ 203.978297][ T4268] usb 1-1: Manufacturer: ꨶ䥍띸᪀腤湭䱁瞽⫴鴤귏᝵噠䉫筗欩뗰콯ꉲ啕ර쏭믺ᐯ蝎堞䷢ଝ齥䟨젃ល永ᑥ富ᚎ씢踠℔刕ᣂ⿑瑩ਁ㏅쫯⢶並퉅工⠏歪볡鼢쁵斶⚄祼鞟鹺߭ⅷ鎪⅐菩突 [ 204.002835][ T4268] usb 1-1: SerialNumber: syz [ 204.003049][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.027022][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.055384][ T5964] device veth0_vlan entered promiscuous mode [ 204.082195][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.135908][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.185259][ T5964] device veth1_vlan entered promiscuous mode [ 204.204288][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.426453][ T4268] usb 1-1: config 0 descriptor?? [ 205.151441][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 205.258125][ T4268] input: ꨶ䥍띸᪀腤湭䱁瞽⫴鴤귏᝵噠䉫筗欩뗰콯ꉲ啕ර쏭믺ᐯ蝎堞䷢ଝ齥䟨젃ល永ᑥ富ᚎ씢踠℔刕ᣂ as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input8 [ 205.946270][ T4268] usb 1-1: USB disconnect, device number 8 [ 205.989753][ T6055] __nla_validate_parse: 44 callbacks suppressed [ 205.989766][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 206.021726][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.083118][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.120007][ T5964] device veth0_macvtap entered promiscuous mode [ 207.149735][ T4231] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.161519][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.225957][ T5964] device veth1_macvtap entered promiscuous mode [ 207.296680][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.424184][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.436657][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.449821][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.462547][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.590363][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 207.622444][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.677210][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.724851][ T4231] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 207.745911][ T4231] usb 5-1: config 0 has no interface number 0 [ 207.756719][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.816522][ T4231] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.154246][ T4231] usb 5-1: config 0 interface 89 has no altsetting 0 [ 208.166753][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.178497][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.191043][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.201258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.225025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.313889][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.369836][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.417990][ T4231] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 208.479703][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.520052][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.542712][ T4231] usb 5-1: Product: syz [ 208.587374][ T4231] usb 5-1: Manufacturer: syz [ 208.608682][ T4231] usb 5-1: SerialNumber: syz [ 208.650668][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.670745][ T4231] usb 5-1: config 0 descriptor?? [ 208.722398][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.780527][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.817789][ T4231] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 208.864983][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.905393][ T4231] em28xx 5-1:0.89: Video interface 89 found: [ 208.922643][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.994264][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.043410][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.067198][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.088294][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.127888][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.166267][ T5964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.254580][ T5964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.272618][ T5964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.290385][ T5964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.469585][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.491782][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.514430][ T4231] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 209.528163][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.544378][ T4296] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 209.566129][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.584810][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.598003][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.924606][ T4296] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 209.950251][ T4296] usb 1-1: config 0 has no interface number 0 [ 209.977416][ T4296] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 210.154856][ T4296] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 210.211084][ T4296] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 210.934379][ T4231] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 210.963206][ T4296] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.976564][ T4296] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.986001][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.000917][ T4296] usb 1-1: config 0 descriptor?? [ 211.034676][ T6079] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 211.114996][ T6079] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 211.125625][ T4231] em28xx 5-1:0.89: board has no eeprom [ 211.161650][ T4296] ldusb 1-1:0.55: Interrupt in endpoint not found [ 211.282343][ T4231] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 211.683601][ T4296] usb 1-1: USB disconnect, device number 9 [ 211.689678][ T4231] em28xx 5-1:0.89: analog set to bulk mode. [ 211.692479][ T21] em28xx 5-1:0.89: Registering V4L2 extension [ 211.756981][ T4231] usb 5-1: USB disconnect, device number 12 [ 211.937394][ T21] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 211.953344][ T4231] em28xx 5-1:0.89: Disconnecting em28xx [ 211.960746][ T21] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 211.970482][ T21] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 211.978274][ T21] em28xx 5-1:0.89: No AC97 audio processor [ 213.609933][ T21] usb 5-1: Decoder not found [ 213.695747][ T21] em28xx 5-1:0.89: failed to create media graph [ 213.944426][ T21] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 214.833063][ T21] em28xx 5-1:0.89: Registering snapshot button... [ 214.833598][ T6102] ================================================================== [ 214.842816][ T21] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9 [ 214.848381][ T6102] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 214.848414][ T6102] Read of size 8 at addr ffff888046f80900 by task v4l_id/6102 [ 214.848432][ T6102] [ 214.848438][ T6102] CPU: 0 PID: 6102 Comm: v4l_id Not tainted syzkaller #0 [ 214.848460][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.848471][ T6102] Call Trace: [ 214.848480][ T6102] [ 214.863090][ T21] em28xx 5-1:0.89: Remote control support is not available for this card. [ 214.866127][ T6102] dump_stack_lvl+0x188/0x250 [ 214.866158][ T6102] ? show_regs_print_info+0x20/0x20 [ 214.866177][ T6102] ? _printk+0xda/0x130 [ 214.866193][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 214.874311][ T4231] em28xx 5-1:0.89: Closing input extension [ 214.876020][ T6102] ? load_image+0x400/0x400 [ 214.876051][ T6102] print_address_description+0x60/0x2d0 [ 214.883519][ T4231] em28xx 5-1:0.89: Deregistering snapshot button [ 214.893269][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 214.893297][ T6102] kasan_report+0xdf/0x130 [ 214.893320][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 214.893341][ T6102] v4l2_fh_open+0xc6/0x430 [ 214.893365][ T6102] em28xx_v4l2_open+0x152/0x990 [ 214.893386][ T6102] ? __lock_acquire+0x7d10/0x7d10 [ 214.893418][ T6102] v4l2_open+0x20b/0x360 [ 214.893441][ T6102] chrdev_open+0x5c5/0x6a0 [ 214.893464][ T6102] ? cd_forget+0x160/0x160 [ 214.893491][ T6102] ? fsnotify_perm+0x3a7/0x560 [ 214.893514][ T6102] ? cd_forget+0x160/0x160 [ 214.893534][ T6102] do_dentry_open+0x7ff/0xf80 [ 214.893568][ T6102] path_openat+0x26f5/0x2fa0 [ 214.893609][ T6102] ? verify_lock_unused+0x140/0x140 [ 214.893633][ T6102] ? slab_post_alloc_hook+0x4c/0x380 [ 214.893659][ T6102] ? do_filp_open+0x410/0x410 [ 214.893698][ T6102] do_filp_open+0x1e2/0x410 [ 214.893723][ T6102] ? vfs_tmpfile+0x300/0x300 [ 214.893761][ T6102] ? _raw_spin_unlock+0x24/0x40 [ 214.893781][ T6102] ? alloc_fd+0x598/0x630 [ 214.893808][ T6102] do_sys_openat2+0x150/0x4b0 [ 214.893825][ T6102] ? __lock_acquire+0x7d10/0x7d10 [ 214.893859][ T6102] ? do_sys_open+0xe0/0xe0 [ 214.893878][ T6102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.893903][ T6102] ? lock_chain_count+0x20/0x20 [ 214.893924][ T6102] ? vtime_user_exit+0x2c8/0x3e0 [ 214.893947][ T6102] __x64_sys_openat+0x135/0x160 [ 214.893973][ T6102] do_syscall_64+0x4c/0xa0 [ 214.893992][ T6102] ? clear_bhb_loop+0x30/0x80 [ 214.894010][ T6102] ? clear_bhb_loop+0x30/0x80 [ 215.094391][ T6102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.100462][ T6102] RIP: 0033:0x7fc032844407 [ 215.105053][ T6102] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 215.124754][ T6102] RSP: 002b:00007ffc1b2cabc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 215.133201][ T6102] RAX: ffffffffffffffda RBX: 00007fc032756880 RCX: 00007fc032844407 [ 215.141446][ T6102] RDX: 0000000000000000 RSI: 00007ffc1b2cbf1c RDI: ffffffffffffff9c [ 215.149785][ T6102] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 215.157798][ T6102] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 215.165769][ T6102] R13: 00007ffc1b2cae10 R14: 00007fc032fd2000 R15: 000055dbe056d4d8 [ 215.173834][ T6102] [ 215.176844][ T6102] [ 215.179158][ T6102] The buggy address belongs to the page: [ 215.184775][ T6102] page:ffffea00011be000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46f80 [ 215.195109][ T6102] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 215.202714][ T6102] raw: 00fff00000000000 ffff8880b91409f0 ffff8880b91409f0 0000000000000000 [ 215.211671][ T6102] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 215.220278][ T6102] page dumped because: kasan: bad access detected [ 215.226708][ T6102] page_owner tracks the page as freed [ 215.232111][ T6102] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102cc0(GFP_USER|__GFP_NOWARN), pid 21, ts 214841685160, free_ts 214841690111 [ 215.247238][ T6102] get_page_from_freelist+0x1bbd/0x1ca0 [ 215.252937][ T6102] __alloc_pages+0x1ee/0x480 [ 215.257520][ T6102] stack_depot_save+0x342/0x440 [ 215.262377][ T6102] __kasan_kmalloc+0xcc/0xf0 [ 215.267171][ T6102] kstrdup_const+0x51/0x90 [ 215.271684][ T6102] __kernfs_new_node+0xa8/0x6c0 [ 215.276727][ T6102] kernfs_new_node+0x148/0x250 [ 215.281588][ T6102] kernfs_create_link+0xa3/0x200 [ 215.286517][ T6102] sysfs_do_create_link_sd+0x83/0x110 [ 215.291913][ T6102] device_add+0x7ed/0xfb0 [ 215.296234][ T6102] input_register_device+0xa5b/0x1140 [ 215.301601][ T6102] em28xx_register_snapshot_button+0x2d8/0x460 [ 215.307743][ T6102] em28xx_ir_init+0x625/0x1db0 [ 215.312498][ T6102] em28xx_init_extension+0x118/0x1b0 [ 215.317950][ T6102] process_one_work+0x85f/0x1010 [ 215.322878][ T6102] worker_thread+0xaa6/0x1290 [ 215.327630][ T6102] page last free stack trace: [ 215.332312][ T6102] free_unref_page_prepare+0x637/0x6c0 [ 215.337863][ T6102] free_unref_page+0x8f/0x2a0 [ 215.342794][ T6102] stack_depot_save+0x418/0x440 [ 215.347722][ T6102] __kasan_kmalloc+0xcc/0xf0 [ 215.352305][ T6102] kstrdup_const+0x51/0x90 [ 215.356795][ T6102] __kernfs_new_node+0xa8/0x6c0 [ 215.361758][ T6102] kernfs_new_node+0x148/0x250 [ 215.366802][ T6102] kernfs_create_link+0xa3/0x200 [ 215.371990][ T6102] sysfs_do_create_link_sd+0x83/0x110 [ 215.377352][ T6102] device_add+0x7ed/0xfb0 [ 215.381761][ T6102] input_register_device+0xa5b/0x1140 [ 215.387124][ T6102] em28xx_register_snapshot_button+0x2d8/0x460 [ 215.393371][ T6102] em28xx_ir_init+0x625/0x1db0 [ 215.398124][ T6102] em28xx_init_extension+0x118/0x1b0 [ 215.403399][ T6102] process_one_work+0x85f/0x1010 [ 215.408341][ T6102] worker_thread+0xaa6/0x1290 [ 215.413095][ T6102] [ 215.415512][ T6102] Memory state around the buggy address: [ 215.421223][ T6102] ffff888046f80800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 215.429368][ T6102] ffff888046f80880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 215.437517][ T6102] >ffff888046f80900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 215.445563][ T6102] ^ [ 215.449718][ T6102] ffff888046f80980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 215.457849][ T6102] ffff888046f80a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 215.465898][ T6102] ================================================================== [ 215.474030][ T6102] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc [ 215.480267][ C0] vkms_vblank_simulate: vblank timer overrun fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.825519][ T6102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.833000][ T6102] CPU: 0 PID: 6102 Comm: v4l_id Tainted: G B syzkaller #0 [ 215.841555][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.851847][ T6102] Call Trace: [ 215.855135][ T6102] [ 215.858155][ T6102] dump_stack_lvl+0x188/0x250 [ 215.862852][ T6102] ? show_regs_print_info+0x20/0x20 [ 215.868225][ T6102] ? load_image+0x400/0x400 [ 215.872932][ T6102] panic+0x2e5/0x810 [ 215.876973][ T6102] ? bpf_jit_dump+0xd0/0xd0 [ 215.881652][ T6102] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 215.887642][ T6102] ? _raw_spin_unlock+0x40/0x40 [ 215.892490][ T6102] ? print_memory_metadata+0x314/0x400 [ 215.897948][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 215.902530][ T6102] check_panic_on_warn+0x80/0xa0 [ 215.907466][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 215.912046][ T6102] end_report+0x6d/0xf0 [ 215.916196][ T6102] kasan_report+0x102/0x130 [ 215.920696][ T6102] ? v4l2_fh_open+0xc6/0x430 [ 215.925464][ T6102] v4l2_fh_open+0xc6/0x430 [ 215.929896][ T6102] em28xx_v4l2_open+0x152/0x990 [ 215.935017][ T6102] ? __lock_acquire+0x7d10/0x7d10 [ 215.940047][ T6102] v4l2_open+0x20b/0x360 [ 215.944314][ T6102] chrdev_open+0x5c5/0x6a0 [ 215.948853][ T6102] ? cd_forget+0x160/0x160 [ 215.953405][ T6102] ? fsnotify_perm+0x3a7/0x560 [ 215.958283][ T6102] ? cd_forget+0x160/0x160 [ 215.962703][ T6102] do_dentry_open+0x7ff/0xf80 [ 215.967492][ T6102] path_openat+0x26f5/0x2fa0 [ 215.972100][ T6102] ? verify_lock_unused+0x140/0x140 [ 215.977310][ T6102] ? slab_post_alloc_hook+0x4c/0x380 [ 215.982661][ T6102] ? do_filp_open+0x410/0x410 [ 215.987405][ T6102] do_filp_open+0x1e2/0x410 [ 215.991928][ T6102] ? vfs_tmpfile+0x300/0x300 [ 215.996528][ T6102] ? _raw_spin_unlock+0x24/0x40 [ 216.001480][ T6102] ? alloc_fd+0x598/0x630 [ 216.005842][ T6102] do_sys_openat2+0x150/0x4b0 [ 216.010524][ T6102] ? __lock_acquire+0x7d10/0x7d10 [ 216.015601][ T6102] ? do_sys_open+0xe0/0xe0 [ 216.020097][ T6102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 216.026070][ T6102] ? lock_chain_count+0x20/0x20 [ 216.031006][ T6102] ? vtime_user_exit+0x2c8/0x3e0 [ 216.036110][ T6102] __x64_sys_openat+0x135/0x160 [ 216.040969][ T6102] do_syscall_64+0x4c/0xa0 [ 216.045379][ T6102] ? clear_bhb_loop+0x30/0x80 [ 216.050075][ T6102] ? clear_bhb_loop+0x30/0x80 [ 216.055075][ T6102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.061070][ T6102] RIP: 0033:0x7fc032844407 [ 216.065797][ T6102] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 216.085402][ T6102] RSP: 002b:00007ffc1b2cabc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 216.094087][ T6102] RAX: ffffffffffffffda RBX: 00007fc032756880 RCX: 00007fc032844407 [ 216.102326][ T6102] RDX: 0000000000000000 RSI: 00007ffc1b2cbf1c RDI: ffffffffffffff9c [ 216.110478][ T6102] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 216.118550][ T6102] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 216.126722][ T6102] R13: 00007ffc1b2cae10 R14: 00007fc032fd2000 R15: 000055dbe056d4d8 [ 216.134905][ T6102] [ 216.138164][ T6102] Kernel Offset: disabled [ 216.147393][ T6102] Rebooting in 86400 seconds..