last executing test programs: 7.153945855s ago: executing program 2 (id=454): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000500)={0xfffffffc, 0x800010, 0xcc, 0x3, 0x4, "0ade441d7df1cc3ac6b4f68bcf000000000080"}) 6.636753448s ago: executing program 2 (id=456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000340)={0x1, 0x20000, 0x80, 0xd, 0x10, 0x3e8, 0x4, 0x0, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000400)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000006800010000001000fdffff7f00000000000000000c00020001000000150000000c000c800630c6000500000006000300", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x25, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x26}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x10d000, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r8}, [@multipath={0x0, 0x400, 0x0, 0xa8, 'multipath\x00', {'2 queue_mode bio', 0x20, '1 emc', 0x20, 0x1, 0x20, 0xfffffffffffffffe, [{0x20, 'io-affinity 0', 0x20, 0x1, 0x20, '2', [{0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000'}]}]}}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r9, 0xc138fd0b, &(0x7f0000000800)="0400000000000000000000009001000038010000010000000000000000300000000000000000000000000000000000006d") sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000040000000000000040000000c00018008000100", @ANYRES32=r6, @ANYBLOB="f827f13313e40f445ba525fef5011cad88ba3217185ddf4fa251b1cfaa4b70b6f0fb7017e937549d7808542af182c4058a9835e3ff16c352a457888aa4b0a7cd08efa1a0fcd1001fa1908816c6ba450c9002a245f782d1fe61cba14b7eb5a356190dd5c3b808af172c"], 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1, 0xa, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x3f, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000dc0)={r10, &(0x7f0000000e00)}, 0x20) 6.195778014s ago: executing program 0 (id=457): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000198c0)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) bind$unix(0xffffffffffffffff, &(0x7f0000019900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000019980)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000019a00), 0x307017fdb7a66cb, 0x0) close(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000002c0)=""/11, 0xb) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x48091) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x25dd, 0x38}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x0) 5.100684986s ago: executing program 0 (id=462): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x400000000000041, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/netstat\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x180) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002a40)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000002a80)=0x7ff, 0x12) 5.099981747s ago: executing program 1 (id=463): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x800) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.825887684s ago: executing program 2 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x82, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x13, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000043000000870000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000080)=0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f0000000e40)=""/146, 0x20000000000000}, 0x20) 4.67467863s ago: executing program 1 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_rr_get_interval(r0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd804, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, 0x0, 0x0) 3.870618053s ago: executing program 1 (id=467): r0 = syz_open_dev$vbi(&(0x7f0000026ec0), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000026f00)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x2800, 0x722, 0xe72, 0x7, 0x9, 0x2e, 0x0, {0xffff945a, 0x1}, 0x5, 0xed}}) 3.756505224s ago: executing program 3 (id=469): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0x208e24b) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000001a00), 0x0, 0x4000801) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ac0)={'dummy0\x00', &(0x7f0000001b00)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x11f7, &(0x7f0000000300)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x3100) 3.70272089s ago: executing program 1 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x4) syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f000001ac80)=0x410000002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0x3}, 0x6) 3.640402646s ago: executing program 2 (id=472): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7fffffff, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./mydev\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000014c0), 0x2, 0x143102) writev(r0, &(0x7f0000001500)=[{&(0x7f0000001540)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') mount$afs(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x0, &(0x7f0000001700)={[{@dyn}]}) 3.470671824s ago: executing program 4 (id=473): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000198c0)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) bind$unix(0xffffffffffffffff, &(0x7f0000019900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000019980)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000019a00), 0x307017fdb7a66cb, 0x0) close(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000002c0)=""/11, 0xb) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x48091) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x25dd, 0x38}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x0) 2.44086582s ago: executing program 3 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001000000e087f107dbd19ee5831e4c75a527009b3e5e0073f3bfafc88acbe3c1c1a4e2cd7278e5ea9d8e34f377569751b6bdf246fa33b1fe06a6bf991fae2ef5c6420b71ebc42126ae86ee8ffc65f65b6ad1a96eb58a9a4bcb97dd7c6f549cfc4cef97592e735e08c54d937b87e43491a27154a259b831526abe0de5c70e150f759771e3562fee861437742429d5c2ae9ad8a047e5df"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000600)={{r3, r4+60000000}, {0x0, 0x989680}}, &(0x7f0000000640)) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)='t', 0x1}], 0x1) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) 2.252827789s ago: executing program 1 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000340)={0x1, 0x20000, 0x80, 0xd, 0x10, 0x3e8, 0x4, 0x0, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000400)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000006800010000001000fdffff7f00000000000000000c00020001000000150000000c000c800630c6000500000006000300", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x25, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x26}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x10d000, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r8}, [@multipath={0x0, 0x400, 0x0, 0xa8, 'multipath\x00', {'2 queue_mode bio', 0x20, '1 emc', 0x20, 0x1, 0x20, 0xfffffffffffffffe, [{0x20, 'io-affinity 0', 0x20, 0x1, 0x20, '2', [{0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000'}]}]}}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r9, 0xc138fd0b, &(0x7f0000000800)="0400000000000000000000009001000038010000010000000000000000300000000000000000000000000000000000006d") sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000040000000000000040000000c00018008000100", @ANYRES32=r6, @ANYBLOB="f827f13313e40f445ba525fef5011cad88ba3217185ddf4fa251b1cfaa4b70b6f0fb7017e937549d7808542af182c4058a9835e3ff16c352a457888aa4b0a7cd08efa1a0fcd1001fa1908816c6ba450c9002a245f782d1fe61cba14b7eb5a356190dd5c3b808af172c"], 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1, 0xa, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x3f, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000dc0)={r10, &(0x7f0000000e00)}, 0x20) 2.086405806s ago: executing program 2 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x5}, 0x20) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) 2.032073222s ago: executing program 3 (id=477): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000300)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000340)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000380)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f00000003c0)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, 0x0, 0x0, 0x1e8030) pwrite64(r0, &(0x7f0000000640)='\x00\x00', 0x2, 0x1e8123) r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.030625112s ago: executing program 4 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x1300, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xac}}, 0x0) 1.954789379s ago: executing program 4 (id=479): r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 1.95458667s ago: executing program 4 (id=480): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) 1.910027814s ago: executing program 4 (id=481): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)="3235303a30209a", 0x7) 1.733278953s ago: executing program 3 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x82, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x13, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000043000000870000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000080)=0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f0000000e40)=""/146, 0x20000000000000}, 0x20) 1.219271015s ago: executing program 0 (id=483): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x36, 0x30, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x49b9b7e4dbfa7a3a, 0x30, 0x66, 0x30, 0x30, 0x63]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x38, 0x31, 0x61, 0x39, 0x66, 0x65, 0x66, 0x36, 0x32, 0x34, 0x65, 0x64, 0x36, 0x36, 0x37, 0x39]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000fc0)={0x0, "0011223344552233445566778899aabbccddeefb00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @desc3}, &(0x7f00000010c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001140), 0x0, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1.203101657s ago: executing program 1 (id=484): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0x208e24b) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000001a00), 0x0, 0x4000801) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ac0)={'dummy0\x00', &(0x7f0000001b00)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x11f7, &(0x7f0000000300)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x3100) 1.17966123s ago: executing program 0 (id=485): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x4) syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f000001ac80)=0x410000002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0x3}, 0x6) 1.123661845s ago: executing program 0 (id=486): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) 1.010786707s ago: executing program 4 (id=487): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7fffffff, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./mydev\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000014c0), 0x2, 0x143102) writev(r0, &(0x7f0000001500)=[{&(0x7f0000001540)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') mount$afs(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x0, &(0x7f0000001700)={[{@dyn}]}) 923.653946ms ago: executing program 2 (id=488): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r9, 0x13}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r9, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x4000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000600)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 801.019208ms ago: executing program 3 (id=489): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d04, &(0x7f0000000480)) 10.77159ms ago: executing program 3 (id=490): ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r1, 0xa) r2 = socket$inet_smc(0x2b, 0x1, 0x0) geteuid() connect$inet(r2, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000940)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000980)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 47.158534][ T4173] cgroup: Unknown subsys name 'net' [ 47.256184][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.456063][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.083865][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.097146][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 50.119564][ T4189] rdma_rxe: failed to add rxe_eth0 [ 50.132004][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.139405][ T4199] rdma_rxe: rxe_register_device failed with error -23 [ 50.146304][ T4199] rdma_rxe: failed to add rxe_eth0 [ 50.151928][ T4200] rdma_rxe: rxe_register_device failed with error -23 [ 50.159037][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 50.165920][ T4196] rdma_rxe: failed to add rxe_eth0 [ 50.173182][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.180718][ T4200] rdma_rxe: failed to add rxe_eth0 [ 50.294274][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.377672][ T4188] infiniband rxe0: set active [ 50.383196][ T4188] infiniband rxe0: added rxe_eth0 [ 50.391147][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.415004][ T4188] RDS/IB: rxe0: added [ 50.419476][ T4188] smc: adding ib device rxe0 with port count 1 [ 50.425716][ T4188] smc: ib device rxe0 port 1 has pnetid [ 50.444437][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.452683][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.578992][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.589194][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.597548][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.626419][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.629576][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.647794][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.658697][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.666685][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.697910][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 50.751503][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.762615][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.780765][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 50.831758][ T4189] team0: Port device team_slave_0 added [ 50.841884][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.860369][ T4189] team0: Port device team_slave_1 added [ 50.910568][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.917647][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.927003][ T4196] device bridge_slave_0 entered promiscuous mode [ 50.934793][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.942668][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.950818][ T4199] device bridge_slave_0 entered promiscuous mode [ 50.968872][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.975813][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.001807][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.013277][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.020458][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.028377][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.041137][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.048197][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.055886][ T4199] device bridge_slave_1 entered promiscuous mode [ 51.073946][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.074239][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.087306][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.113262][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.161280][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.170637][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.177850][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.186469][ T4200] device bridge_slave_0 entered promiscuous mode [ 51.195805][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.214276][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.223554][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.230852][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.239602][ T4200] device bridge_slave_1 entered promiscuous mode [ 51.247533][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.264537][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.271800][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.306824][ T4199] team0: Port device team_slave_0 added [ 51.314365][ T4199] team0: Port device team_slave_1 added [ 51.326008][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.329073][ T4196] team0: Port device team_slave_0 added [ 51.340481][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.363743][ T4196] team0: Port device team_slave_1 added [ 51.371406][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.424039][ T4200] team0: Port device team_slave_0 added [ 51.431132][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.438067][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.464140][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.485038][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.492635][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.519033][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.531398][ T4200] team0: Port device team_slave_1 added [ 51.537389][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.544946][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.570976][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.587483][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.595349][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.621274][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.656554][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.663564][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.689556][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.717038][ T4196] device hsr_slave_0 entered promiscuous mode [ 51.723909][ T4196] device hsr_slave_1 entered promiscuous mode [ 51.731348][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.739142][ T4196] Cannot create hsr debugfs directory [ 51.751198][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.758136][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.784086][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.837872][ T4199] device hsr_slave_0 entered promiscuous mode [ 51.844887][ T4199] device hsr_slave_1 entered promiscuous mode [ 51.851425][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.859342][ T4199] Cannot create hsr debugfs directory [ 51.921776][ T4200] device hsr_slave_0 entered promiscuous mode [ 51.928281][ T4200] device hsr_slave_1 entered promiscuous mode [ 51.935226][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.942945][ T4200] Cannot create hsr debugfs directory [ 52.029269][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 52.035710][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 52.109501][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.115537][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 52.162820][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 52.222870][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.233599][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.260041][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.294573][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.304486][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.325683][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.335731][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.354505][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.373292][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.411358][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.418479][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.426981][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.435269][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.442473][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.450638][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.471458][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.484965][ T3854] infiniband rxe0: set active [ 52.495596][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.521445][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.535381][ T4188] team0: Port device team_slave_0 added [ 52.551740][ T4188] team0: Port device team_slave_1 added [ 52.567284][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.597656][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.621664][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.635411][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.642831][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.670055][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.682286][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.696150][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.703616][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.729847][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.772325][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.781665][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.800025][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.826017][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.833450][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.840785][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.848337][ T4188] Cannot create hsr debugfs directory [ 52.854833][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.945896][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.002879][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.020536][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.039548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.048421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.056918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.065966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.075494][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.082733][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.091881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.100868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.109575][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.116610][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.124657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.146069][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.153507][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.162538][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.178933][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.198176][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.207352][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.216294][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.226041][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.233147][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.241669][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.251621][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.280133][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.290039][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.298320][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.305395][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.314060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.323172][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.332443][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.341638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.350759][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.359729][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.367970][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.383915][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.398032][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.409658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.417377][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.425271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.435186][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.443686][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.450774][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.458407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.466990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.475581][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.484380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.495467][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.506795][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.524495][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.533534][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.541796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.550735][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.559993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.568430][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.577082][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.584168][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.592059][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.600615][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.609019][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.621784][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.630376][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.642705][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.651754][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.660857][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.671656][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.682462][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.692530][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.705197][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.719715][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.726588][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.740600][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.750669][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.760068][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.768499][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.780078][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.789860][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.804813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.813828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.822520][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.829628][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.847314][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.858525][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.878017][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.892522][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.904569][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.920989][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.935220][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.945116][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.954536][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.963478][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.970548][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.978187][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.993586][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.017703][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.053329][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.066613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.074690][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.108128][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.108967][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 54.116876][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 54.131099][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.145268][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.154795][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.184959][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.192052][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 54.198319][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 54.205976][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.217598][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.231543][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.240159][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.247534][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.255614][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.263265][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.268976][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 54.271466][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.285006][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.293660][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.302663][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.311803][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.320414][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.331341][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.344315][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.394975][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.404146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.413737][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.422826][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.432589][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.440498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.455395][ T4189] device veth0_vlan entered promiscuous mode [ 54.478443][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.502768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.518694][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.537549][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.550851][ T4189] device veth1_vlan entered promiscuous mode [ 54.563604][ T4200] device veth0_vlan entered promiscuous mode [ 54.571507][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.581200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.589520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.597745][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.608067][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.616491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.625629][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.633858][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.641654][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.649945][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.662900][ T4196] device veth0_vlan entered promiscuous mode [ 54.680211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.692569][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.701229][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.708253][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.717466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.730380][ T4200] device veth1_vlan entered promiscuous mode [ 54.751952][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.760299][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.768115][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.777062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.786178][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.793263][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.801874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.809390][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.816753][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.830671][ T4196] device veth1_vlan entered promiscuous mode [ 54.840133][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.870952][ T4200] device veth0_macvtap entered promiscuous mode [ 54.880760][ T4200] device veth1_macvtap entered promiscuous mode [ 54.888176][ T4189] device veth0_macvtap entered promiscuous mode [ 54.895985][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.904323][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.914672][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.923079][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.932991][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.941669][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.950711][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.959355][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.967113][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.975641][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.002075][ T4189] device veth1_macvtap entered promiscuous mode [ 55.009818][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.017633][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.027971][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.037104][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.047474][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.061401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.071849][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.084345][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.097208][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.106306][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.115979][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.124919][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.153422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.162736][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.171653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.181883][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.190597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.199365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.207453][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.216011][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.234641][ T4196] device veth0_macvtap entered promiscuous mode [ 55.250465][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.262986][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.275349][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.283154][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.291639][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.300232][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.309838][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.318012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.326290][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.334931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.346051][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.364763][ T4196] device veth1_macvtap entered promiscuous mode [ 55.378480][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.394641][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.405726][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.444386][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.454280][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.465774][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.476452][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.485063][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.499035][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.506887][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.519874][ T4199] device veth0_vlan entered promiscuous mode [ 55.527856][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.540181][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.550700][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.561328][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.573402][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.601709][ T4199] device veth1_vlan entered promiscuous mode [ 55.610828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.620543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.645166][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.654504][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.663271][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.672425][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.688010][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.699301][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.710166][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.720653][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.732112][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.751593][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.760844][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.770394][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.778307][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.787415][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.795915][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.803510][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.814484][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.823613][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.832320][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.841045][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.871166][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.915648][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.919166][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.929585][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.937720][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.960542][ T4199] device veth0_macvtap entered promiscuous mode [ 55.983592][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.994699][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.005672][ T4199] device veth1_macvtap entered promiscuous mode [ 56.064115][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.090306][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.104215][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.114978][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.125828][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.136506][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.147947][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.164317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.173169][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.182303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.189003][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 56.196600][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 56.220651][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.235875][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.252485][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.265317][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.269376][ T4190] Bluetooth: hci4: command 0x040f tx timeout [ 56.275774][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.291838][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.303634][ T4190] Bluetooth: hci3: command 0x040f tx timeout [ 56.304006][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.350237][ T4190] Bluetooth: hci2: command 0x040f tx timeout [ 57.124443][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.134241][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.142274][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.162765][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.171610][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180575][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.189822][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.203139][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.217178][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.231288][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.239735][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.254577][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.287775][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.301449][ T4188] device veth0_vlan entered promiscuous mode [ 57.314404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.327374][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.336787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.380449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.388282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.424164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.438038][ T4188] device veth1_vlan entered promiscuous mode [ 57.460238][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.468069][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.523415][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.525275][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.531544][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.542936][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.554915][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.564527][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.717653][ T4309] block device autoloading is deprecated and will be removed. [ 58.269893][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 58.276851][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 58.379532][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 58.386741][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 58.402217][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.428828][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 58.461900][ T4188] device veth0_macvtap entered promiscuous mode [ 58.474665][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.477255][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.491729][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.502217][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.510795][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.512246][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.527195][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.540480][ T4188] device veth1_macvtap entered promiscuous mode [ 58.668340][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.820190][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.168367][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.207192][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.220096][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.252146][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.269618][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.281889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.292631][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.306889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.361662][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.756644][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.788264][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.805278][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.816982][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.835927][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.845941][ T4339] device-mapper: table: 248:0: ram3 too small for target: start=0, len=8216, dev_size=8192 [ 60.846504][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.861789][ T4339] device-mapper: core: Cannot calculate initial queue limits [ 60.866508][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.879028][ T4339] device-mapper: ioctl: unable to set up device queue for new table. [ 60.885418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.902226][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.914707][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.926708][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.049712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.066590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.107978][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.125202][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.134395][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.150316][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.232241][ T4348] sched: RT throttling activated [ 62.251620][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 62.668791][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.676632][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.697532][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.705962][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.713931][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.728106][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.978888][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.388827][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 64.530253][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 64.551318][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.589644][ T26] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 64.687273][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.145798][ T26] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 65.255772][ T26] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 65.267397][ T4406] FAULT_INJECTION: forcing a failure. [ 65.267397][ T4406] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 65.281245][ T26] usb 1-1: USB disconnect, device number 2 [ 65.309249][ T4406] CPU: 1 PID: 4406 Comm: syz.2.24 Not tainted syzkaller #0 [ 65.316476][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.326551][ T4406] Call Trace: [ 65.329847][ T4406] [ 65.332779][ T4406] dump_stack_lvl+0x188/0x250 [ 65.337483][ T4406] ? show_regs_print_info+0x20/0x20 [ 65.342690][ T4406] ? load_image+0x410/0x410 [ 65.347202][ T4406] ? verify_lock_unused+0x140/0x140 [ 65.352415][ T4406] should_fail+0x383/0x4b0 [ 65.356844][ T4406] prepare_alloc_pages+0x1e3/0x5b0 [ 65.361970][ T4406] __alloc_pages+0x11b/0x480 [ 65.366577][ T4406] ? zone_statistics+0x170/0x170 [ 65.371521][ T4406] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 65.377509][ T4406] ? __lock_acquire+0x7d40/0x7d40 [ 65.382577][ T4406] ? alloc_pages+0x452/0x560 [ 65.387174][ T4406] new_slab+0xc0/0x4b0 [ 65.391253][ T4406] ___slab_alloc+0x807/0xdd0 [ 65.395854][ T4406] ? sk_prot_alloc+0x57/0x210 [ 65.400537][ T4406] ? sk_prot_alloc+0x57/0x210 [ 65.405227][ T4406] kmem_cache_alloc+0xf0/0x280 [ 65.410001][ T4406] sk_prot_alloc+0x57/0x210 [ 65.414510][ T4406] ? sk_alloc+0x1d/0x310 [ 65.418768][ T4406] sk_alloc+0x2f/0x310 [ 65.422837][ T4406] ? inet_create+0x702/0xee0 [ 65.427433][ T4406] inet_create+0x71e/0xee0 [ 65.431860][ T4406] __sock_create+0x473/0x910 [ 65.436468][ T4406] __sys_socket+0xe2/0x170 [ 65.440900][ T4406] __x64_sys_socket+0x76/0x80 [ 65.445587][ T4406] do_syscall_64+0x4c/0xa0 [ 65.450007][ T4406] ? clear_bhb_loop+0x30/0x80 [ 65.454690][ T4406] ? clear_bhb_loop+0x30/0x80 [ 65.459383][ T4406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.465298][ T4406] RIP: 0033:0x7efe13629559 [ 65.469729][ T4406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.489334][ T4406] RSP: 002b:00007efe11880028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.497753][ T4406] RAX: ffffffffffffffda RBX: 00007efe138affa0 RCX: 00007efe13629559 [ 65.505738][ T4406] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 65.513716][ T4406] RBP: 00007efe136c0b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.521696][ T4406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.529669][ T4406] R13: 00007efe138b0038 R14: 00007efe138affa0 R15: 00007fff8edf1968 [ 65.537664][ T4406] [ 65.540713][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.590466][ T26] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 65.611312][ T26] kobil_sct 1-1:1.0: device disconnected [ 66.046037][ T4425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.27'. [ 67.141734][ T4271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.268573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.288566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.298564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.308564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.318567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.328563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.368573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.378563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.388560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.398559][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.733245][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.778619][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 68.589581][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.648861][ T4264] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.922312][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.108315][ T4271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.156236][ T4474] ODEBUG: Out of memory. ODEBUG disabled [ 70.788618][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 70.800095][ T4271] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 70.808327][ T4271] usb 5-1: can't read configurations, error -71 [ 70.918841][ T4474] syz.3.37 (4474): drop_caches: 2 [ 70.978777][ T26] usb 1-1: device descriptor read/all, error -71 [ 71.036359][ T4481] process 'syz.0.40' launched './file0' with NULL argv: empty string added [ 71.085937][ T4264] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 71.148702][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.181843][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190552][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.258728][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.300133][ T4264] usb 2-1: Product: syz [ 71.350237][ T4264] usb 2-1: Manufacturer: syz [ 71.386879][ T4264] usb 2-1: SerialNumber: syz [ 71.471515][ T4264] usb 2-1: config 0 descriptor?? [ 71.508846][ T4264] usb 2-1: can't set config #0, error -71 [ 71.756729][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 72.388875][ T4264] usb 2-1: USB disconnect, device number 2 [ 72.567565][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 72.907781][ T4260] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.158089][ T4271] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.560560][ T4264] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.858972][ T4260] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 73.871852][ T4260] usb 3-1: can't read configurations, error -71 [ 74.252120][ T4522] x86/PAT: syz.2.52:4522 freeing invalid memtype [mem 0xfe001000-0xfe001fff] [ 74.273618][ T4522] x86/PAT: syz.2.52:4522 freeing invalid memtype [mem 0xfe000000-0xfe000fff] [ 74.288002][ T4522] x86/PAT: syz.2.52:4522 freeing invalid memtype [mem 0xfe002000-0xfe00efff] [ 74.328894][ T4271] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 74.337967][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.357110][ T4271] usb 5-1: Product: syz [ 74.364542][ T4271] usb 5-1: Manufacturer: syz [ 74.370649][ T4271] usb 5-1: SerialNumber: syz [ 74.377985][ T4271] usb 5-1: config 0 descriptor?? [ 74.388705][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.435627][ T4271] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 74.459650][ T4527] autofs4:pid:4527:autofs_fill_super: called with bogus options [ 74.573362][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.608688][ T4264] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.617748][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.632032][ T4271] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 74.694046][ T4509] dvb-usb: bulk message failed: -22 (7/0) [ 74.701889][ T4271] usb 5-1: media controller created [ 74.887487][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.326070][ T4264] usb 2-1: Product: syz [ 75.330332][ T4264] usb 2-1: Manufacturer: syz [ 75.334925][ T4264] usb 2-1: SerialNumber: syz [ 75.418688][ T4271] DVB: Unable to find symbol mt352_attach() [ 75.450688][ T4271] DVB: Unable to find symbol nxt6000_attach() [ 75.459562][ T4271] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 75.478839][ T4264] usb 2-1: can't set config #1, error -71 [ 75.531196][ T4264] usb 2-1: USB disconnect, device number 3 [ 76.124138][ T4541] overlayfs: unrecognized mount option "measure" or missing value [ 76.142648][ T4541] overlayfs: workdir and upperdir must reside under the same mount [ 76.155787][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 76.164095][ T4271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 76.198433][ T4271] dvb-usb: schedule remote query interval to 1000 msecs. [ 76.208071][ T4271] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 76.231863][ T4271] dvb-usb: bulk message failed: -22 (7/0) [ 76.238094][ T4271] dvb-usb: bulk message failed: -22 (7/0) [ 76.247645][ T4271] usb 5-1: USB disconnect, device number 3 [ 76.325305][ T4271] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 76.504355][ T13] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 76.513640][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.522465][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.523272][ T4559] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 76.530613][ T13] usb 1-1: Product: syz [ 76.530656][ T13] usb 1-1: Manufacturer: syz [ 76.530670][ T13] usb 1-1: SerialNumber: syz [ 76.553240][ T13] usb 1-1: config 0 descriptor?? [ 76.560763][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.568782][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.588642][ T4264] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.609771][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.609993][ T13] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 76.616873][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.632785][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.639876][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.651506][ T4559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.714195][ T4271] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.938725][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.949105][ T1108] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 76.958140][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.958641][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 76.969751][ T1108] usb 3-1: config 0 descriptor?? [ 76.998740][ T4264] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 77.006915][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.017453][ T4264] usb 2-1: config 0 has no interface number 0 [ 77.018895][ T26] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.026582][ T4264] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 77.042718][ T4264] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 77.052660][ T4264] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.228730][ T4264] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 77.237916][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.245951][ T4264] usb 2-1: Product: syz [ 77.250412][ T1108] ath6kl: Failed to submit usb control message: -71 [ 77.257017][ T1108] ath6kl: unable to send the bmi data to the device: -71 [ 77.264272][ T4264] usb 2-1: Manufacturer: syz [ 77.268843][ T4271] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 77.268866][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.268884][ T4271] usb 5-1: Product: syz [ 77.268897][ T4271] usb 5-1: Manufacturer: syz [ 77.268910][ T4271] usb 5-1: SerialNumber: syz [ 77.275889][ T4271] usb 5-1: config 0 descriptor?? [ 77.278017][ T1108] ath6kl: Unable to send get target info: -71 [ 77.310780][ T4264] usb 2-1: SerialNumber: syz [ 77.317055][ T4264] usb 2-1: config 0 descriptor?? [ 77.324398][ T4271] gspca_main: se401-2.14.0 probing 047d:5003 [ 77.348680][ T26] usb 4-1: not running at top speed; connect to a high speed hub [ 77.428679][ T26] usb 4-1: config 1 has an invalid interface number: 167 but max is 0 [ 77.436861][ T26] usb 4-1: config 1 has no interface number 0 [ 77.446024][ T26] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 77.457640][ T26] usb 4-1: config 1 interface 167 has no altsetting 0 [ 77.618735][ T26] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 77.627927][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.636006][ T26] usb 4-1: Product: syz [ 77.640252][ T26] usb 4-1: Manufacturer: syz [ 77.644859][ T26] usb 4-1: SerialNumber: syz [ 77.688862][ T13] ssu100: probe of 1-1:0.0 failed with error -71 [ 77.697513][ T13] usb 1-1: USB disconnect, device number 5 [ 77.788778][ T4271] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 77.798794][ T4271] se401: probe of 5-1:0.0 failed with error -71 [ 77.827190][ T4271] usb 5-1: USB disconnect, device number 4 [ 78.006360][ T26] usb 4-1: USB disconnect, device number 2 [ 78.034122][ T13] usb 2-1: USB disconnect, device number 4 [ 78.402862][ T4583] Zero length message leads to an empty skb [ 78.542114][ T4590] tmpfs: Bad value for 'mpol' [ 78.555187][ T4590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 80.467491][ T4616] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 80.492773][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.500164][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.583258][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.590387][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.598000][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.605117][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.619503][ T4616] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.914611][ T4264] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 81.392198][ T1111] cfg80211: failed to load regulatory.db [ 82.391511][ T1108] ath6kl: Failed to init ath6kl core: -71 [ 82.448832][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.087454][ T1108] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 83.098487][ T1108] usb 3-1: USB disconnect, device number 4 [ 83.148688][ T4264] usb 2-1: not running at top speed; connect to a high speed hub [ 83.238733][ T4264] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 83.246921][ T4264] usb 2-1: config 1 has no interface number 0 [ 83.259396][ T4264] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 83.271729][ T4264] usb 2-1: config 1 interface 167 has no altsetting 0 [ 83.367688][ T4676] overlayfs: unrecognized mount option "measure" or missing value [ 83.383676][ T4676] overlayfs: workdir and upperdir must reside under the same mount [ 83.492126][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.502710][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 83.511793][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.522902][ T7] usb 1-1: config 0 descriptor?? [ 83.538779][ T4264] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 83.548092][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.556316][ T4264] usb 2-1: Product: syz [ 83.558666][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.562922][ T4264] usb 2-1: Manufacturer: syz [ 83.573747][ T4264] usb 2-1: SerialNumber: syz [ 83.628871][ T4264] usb 2-1: can't set config #1, error -71 [ 83.638986][ T4264] usb 2-1: USB disconnect, device number 5 [ 83.658617][ T4271] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.788735][ T7] ath6kl: Failed to submit usb control message: -71 [ 83.795482][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 83.803206][ T7] ath6kl: Unable to send get target info: -71 [ 83.808675][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 83.814565][ T7] ath6kl: Failed to init ath6kl core: -71 [ 83.826656][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 83.837511][ T7] usb 1-1: USB disconnect, device number 6 [ 84.018692][ T4271] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 84.026936][ T4271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.040263][ T4271] usb 5-1: config 0 has no interface number 0 [ 84.046402][ T4271] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 84.058277][ T4271] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 84.068330][ T4271] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.098819][ T1111] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 84.107911][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.119282][ T1111] usb 4-1: Product: syz [ 84.123478][ T1111] usb 4-1: Manufacturer: syz [ 84.128088][ T1111] usb 4-1: SerialNumber: syz [ 84.136990][ T1111] usb 4-1: config 0 descriptor?? [ 84.180209][ T1111] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 84.276894][ T4271] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 84.286479][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.299516][ T4271] usb 5-1: Product: syz [ 84.304491][ T4271] usb 5-1: Manufacturer: syz [ 84.310835][ T4271] usb 5-1: SerialNumber: syz [ 84.324365][ T4271] usb 5-1: config 0 descriptor?? [ 85.605067][ T4706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.635542][ T4706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.666221][ T4706] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 85.800911][ T4705] x86/PAT: syz.1.108:4705 freeing invalid memtype [mem 0xfe001000-0xfe001fff] [ 85.815758][ T4705] x86/PAT: syz.1.108:4705 freeing invalid memtype [mem 0xfe000000-0xfe000fff] [ 85.929073][ T1111] ssu100: probe of 4-1:0.0 failed with error -71 [ 86.018602][ T4715] tmpfs: Bad value for 'mpol' [ 86.032567][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 86.041953][ T1111] usb 4-1: USB disconnect, device number 3 [ 86.159791][ T4271] usb 5-1: USB disconnect, device number 5 [ 87.858652][ T4271] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 88.178887][ T4271] usb 5-1: not running at top speed; connect to a high speed hub [ 88.279030][ T4271] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 88.300679][ T4271] usb 5-1: config 1 has no interface number 0 [ 88.343742][ T4271] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 88.420106][ T4271] usb 5-1: config 1 interface 167 has no altsetting 0 [ 88.818928][ T4271] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 88.852847][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.923970][ T4271] usb 5-1: Product: syz [ 89.087644][ T4271] usb 5-1: Manufacturer: syz [ 89.092554][ T4271] usb 5-1: SerialNumber: syz [ 89.413192][ T4761] tmpfs: Bad value for 'mpol' [ 89.725694][ T4271] usb 5-1: USB disconnect, device number 6 [ 90.278806][ T4775] overlayfs: unrecognized mount option "measure" or missing value [ 90.289512][ T4775] overlayfs: workdir and upperdir must reside under the same mount [ 90.568799][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.878613][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.973522][ T4795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.131'. [ 90.998380][ T4795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.131'. [ 91.049520][ T1111] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 91.063957][ T4795] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 91.073706][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.098051][ T1111] usb 4-1: config 0 has no interface number 0 [ 91.116691][ T1111] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 91.131044][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 91.299808][ T1111] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 91.323577][ T1111] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.398656][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.483778][ T26] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 91.495890][ T26] usb 1-1: config 0 has no interface number 0 [ 91.523774][ T26] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 91.535506][ T1111] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 91.551732][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.593702][ T1111] usb 4-1: Product: syz [ 91.597881][ T1111] usb 4-1: Manufacturer: syz [ 91.602528][ T26] usb 1-1: config 0 interface 88 has no altsetting 0 [ 91.618621][ T1111] usb 4-1: SerialNumber: syz [ 91.640269][ T1111] usb 4-1: config 0 descriptor?? [ 91.858776][ T26] usb 1-1: string descriptor 0 read error: -22 [ 91.865032][ T26] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 91.898705][ T26] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 91.910302][ T26] usb 1-1: config 0 descriptor?? [ 91.952047][ T26] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9 [ 92.405064][ T4264] usb 1-1: USB disconnect, device number 7 [ 92.550482][ T4303] usb 4-1: USB disconnect, device number 4 [ 92.783105][ T4819] tmpfs: Bad value for 'mpol' [ 94.022411][ T4833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.375840][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 94.528554][ C1] hrtimer: interrupt took 40960 ns [ 94.925884][ T4303] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 95.519251][ T4303] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.587047][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.614037][ T4303] usb 4-1: Product: syz [ 95.621337][ T4303] usb 4-1: Manufacturer: syz [ 95.626549][ T4303] usb 4-1: SerialNumber: syz [ 95.711949][ T4303] usb 4-1: config 0 descriptor?? [ 95.995963][ T4303] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.197565][ T4870] autofs4:pid:4870:autofs_fill_super: called with bogus options [ 98.508979][ T4303] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 99.313462][ T4303] usb 4-1: USB disconnect, device number 5 [ 100.319479][ T4931] tmpfs: Bad value for 'mpol' [ 101.826203][ T4958] FAULT_INJECTION: forcing a failure. [ 101.826203][ T4958] name failslab, interval 1, probability 0, space 0, times 1 [ 101.839087][ T4958] CPU: 1 PID: 4958 Comm: syz.3.177 Not tainted syzkaller #0 [ 101.846384][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.856436][ T4958] Call Trace: [ 101.859712][ T4958] [ 101.862642][ T4958] dump_stack_lvl+0x188/0x250 [ 101.867329][ T4958] ? show_regs_print_info+0x20/0x20 [ 101.872536][ T4958] ? load_image+0x410/0x410 [ 101.877045][ T4958] ? __lock_acquire+0x7d40/0x7d40 [ 101.882083][ T4958] should_fail+0x383/0x4b0 [ 101.886509][ T4958] should_failslab+0x5/0x20 [ 101.891010][ T4958] slab_pre_alloc_hook+0x51/0xc0 [ 101.895947][ T4958] ? __alloc_file+0x25/0x240 [ 101.900538][ T4958] kmem_cache_alloc+0x3d/0x280 [ 101.905307][ T4958] __alloc_file+0x25/0x240 [ 101.909731][ T4958] alloc_empty_file+0x90/0x180 [ 101.914499][ T4958] alloc_file+0x5c/0x510 [ 101.918742][ T4958] ? do_raw_spin_unlock+0x11d/0x230 [ 101.923944][ T4958] alloc_file_pseudo+0x180/0x200 [ 101.928886][ T4958] ? alloc_empty_file_noaccount+0x80/0x80 [ 101.934610][ T4958] ? alloc_fd+0x59e/0x650 [ 101.938943][ T4958] sock_alloc_file+0xb3/0x240 [ 101.943624][ T4958] __sys_socket+0x11d/0x170 [ 101.948136][ T4958] __x64_sys_socket+0x76/0x80 [ 101.952820][ T4958] do_syscall_64+0x4c/0xa0 [ 101.957236][ T4958] ? clear_bhb_loop+0x30/0x80 [ 101.961912][ T4958] ? clear_bhb_loop+0x30/0x80 [ 101.966591][ T4958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.972482][ T4958] RIP: 0033:0x7f3d7fa19559 [ 101.976899][ T4958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.996506][ T4958] RSP: 002b:00007f3d7dc70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.004920][ T4958] RAX: ffffffffffffffda RBX: 00007f3d7fc9ffa0 RCX: 00007f3d7fa19559 [ 102.012891][ T4958] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 102.020862][ T4958] RBP: 00007f3d7fab0b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.028840][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.036814][ T4958] R13: 00007f3d7fca0038 R14: 00007f3d7fc9ffa0 R15: 00007ffe3e1b84c8 [ 102.044804][ T4958] [ 102.135803][ T4961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.176'. [ 102.144886][ T4961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.176'. [ 102.153802][ T4961] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 106.612562][ T5033] overlayfs: failed to resolve './file2': -2 [ 106.756468][ T5044] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 106.786451][ T5044] device-mapper: table: 248:1: multipath: invalid initial priority group number [ 106.824110][ T5044] device-mapper: ioctl: error adding target to table [ 107.021504][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 108.601785][ T5070] netlink: 64 bytes leftover after parsing attributes in process `syz.1.196'. [ 108.610770][ T5070] netlink: 64 bytes leftover after parsing attributes in process `syz.1.196'. [ 108.619732][ T5070] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 108.809524][ T4271] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.864286][ T5077] overlayfs: failed to resolve './file2': -2 [ 109.048710][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 109.169653][ T4271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 109.357120][ T4271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.595637][ T5087] autofs4:pid:5087:autofs_fill_super: called with bogus options [ 109.777248][ T4271] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 109.810686][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.840759][ T5080] device-mapper: table: 248:2: ram9 too small for target: start=0, len=8216, dev_size=8192 [ 109.862991][ T5080] device-mapper: core: Cannot calculate initial queue limits [ 109.871381][ T5080] device-mapper: ioctl: unable to set up device queue for new table. [ 109.899773][ T4271] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 110.072203][ T4271] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 110.314869][ T4271] usb 3-1: USB disconnect, device number 5 [ 110.344806][ T4271] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 110.360888][ T4271] kobil_sct 3-1:1.0: device disconnected [ 112.797624][ T5140] autofs4:pid:5140:autofs_fill_super: called with bogus options [ 115.162739][ T5166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 115.171749][ T5166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 115.180711][ T5166] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 118.624741][ T25] audit: type=1800 audit(1792856793.213:2): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.254" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 119.059828][ T4249] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.333231][ T4249] usb 3-1: Using ep0 maxpacket: 8 [ 119.670825][ T4249] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 119.688764][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.697354][ T4249] usb 3-1: Product: syz [ 119.702746][ T4249] usb 3-1: Manufacturer: syz [ 119.707545][ T4249] usb 3-1: SerialNumber: syz [ 119.744304][ T4249] usb 3-1: config 0 descriptor?? [ 120.099434][ T4249] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.008695][ T4249] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 121.075625][ T4249] usb 3-1: USB disconnect, device number 6 [ 122.577436][ T5275] autofs4:pid:5275:autofs_fill_super: called with bogus options [ 123.908691][ T5288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.983687][ T5291] netlink: 64 bytes leftover after parsing attributes in process `syz.2.268'. [ 124.001040][ T5291] netlink: 64 bytes leftover after parsing attributes in process `syz.2.268'. [ 124.517010][ T5291] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 125.518312][ T5323] autofs4:pid:5323:autofs_fill_super: called with bogus options [ 127.263126][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.959061][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 128.966575][ T5374] autofs4:pid:5374:autofs_fill_super: called with bogus options [ 129.419111][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.468845][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.650523][ T7] usb 1-1: config 0 descriptor?? [ 129.768757][ T7] usb 1-1: can't set config #0, error -71 [ 130.206357][ T7] usb 1-1: USB disconnect, device number 8 [ 130.772866][ T5403] netlink: 64 bytes leftover after parsing attributes in process `syz.4.310'. [ 131.636400][ T5403] netlink: 64 bytes leftover after parsing attributes in process `syz.4.310'. [ 131.644700][ T5416] autofs4:pid:5416:autofs_fill_super: called with bogus options [ 131.653326][ T5403] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 132.619020][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.625365][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.717333][ T5445] overlayfs: failed to resolve './file2': -2 [ 133.744758][ T5460] autofs4:pid:5460:autofs_fill_super: called with bogus options [ 134.074826][ T5471] capability: warning: `syz.2.336' uses 32-bit capabilities (legacy support in use) [ 134.228694][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.476260][ T5491] overlayfs: failed to resolve './file2': -2 [ 135.699270][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.715771][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.733704][ T26] usb 1-1: Product: syz [ 135.738450][ T26] usb 1-1: Manufacturer: syz [ 135.743208][ T26] usb 1-1: SerialNumber: syz [ 136.725133][ T5502] autofs4:pid:5502:autofs_fill_super: called with bogus options [ 137.019153][ T26] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.148685][ T26] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 139.191666][ T26] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 139.234836][ T26] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 139.267534][ T26] lan78xx: probe of 1-1:1.0 failed with error -71 [ 139.295228][ T26] usb 1-1: USB disconnect, device number 9 [ 139.411075][ T5548] autofs4:pid:5548:autofs_fill_super: called with bogus options [ 142.919081][ T5576] crypto_alloc_aead failed rc=-2 [ 143.099988][ T5594] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 143.212604][ T5594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.220013][ T5598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'. [ 144.048233][ T5607] syz.2.367 (5607): drop_caches: 2 [ 144.056047][ T5607] syz.2.367 (5607): drop_caches: 2 [ 149.237471][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 149.918663][ T5705] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 149.943738][ T5705] bond0: option arp_ip_target: invalid value (-192.168.1.1) [ 158.147998][ T5826] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.154846][ T5826] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 161.582299][ T5859] autofs4:pid:5859:autofs_fill_super: called with bogus options [ 161.638358][ T5871] device bond2 entered promiscuous mode [ 162.093012][ T5885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.130988][ T5885] MTRR 1 not used [ 166.529430][ T5945] autofs4:pid:5945:autofs_fill_super: called with bogus options [ 166.916766][ T5951] xt_nfacct: accounting object `syz0' does not exist [ 166.976695][ T5956] loop0: detected capacity change from 0 to 3904 [ 167.043134][ T5962] tipc: Started in network mode [ 167.052679][ T5962] tipc: Node identity 4, cluster identity 4711 [ 167.059976][ T5962] tipc: Node number set to 4 [ 167.093616][ T5956] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 167.134370][ T5956] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 167.155644][ T5956] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 167.195276][ T5956] loop0: [ 169.079969][ T5992] autofs4:pid:5992:autofs_fill_super: called with bogus options [ 169.402100][ T5991] [ 169.404456][ T5991] ====================================================== [ 169.411462][ T5991] WARNING: possible circular locking dependency detected [ 169.418476][ T5991] syzkaller #0 Not tainted [ 169.422881][ T5991] ------------------------------------------------------ [ 169.429883][ T5991] syz.3.490/5991 is trying to acquire lock: [ 169.435763][ T5991] ffff888057ed0918 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 169.447161][ T5991] [ 169.447161][ T5991] but task is already holding lock: [ 169.454520][ T5991] ffff88807f138120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 169.463496][ T5991] [ 169.463496][ T5991] which lock already depends on the new lock. [ 169.463496][ T5991] [ 169.473887][ T5991] [ 169.473887][ T5991] the existing dependency chain (in reverse order) is: [ 169.482890][ T5991] [ 169.482890][ T5991] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 169.490631][ T5991] lock_sock_nested+0x44/0x100 [ 169.495921][ T5991] smc_listen_out+0xd4/0x3c0 [ 169.501033][ T5991] smc_listen_work+0x52a/0xd10 [ 169.506330][ T5991] process_one_work+0x867/0xff0 [ 169.511701][ T5991] worker_thread+0xad7/0x12a0 [ 169.516895][ T5991] kthread+0x42e/0x520 [ 169.521480][ T5991] ret_from_fork+0x1f/0x30 [ 169.526419][ T5991] [ 169.526419][ T5991] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 169.536575][ T5991] __lock_acquire+0x38f7/0x7d40 [ 169.541946][ T5991] lock_acquire+0x19f/0x400 [ 169.546970][ T5991] __flush_work+0x116/0x210 [ 169.551990][ T5991] __cancel_work_timer+0x3f4/0x560 [ 169.557612][ T5991] smc_clcsock_release+0x5c/0xe0 [ 169.563068][ T5991] __smc_release+0x644/0x7b0 [ 169.568176][ T5991] smc_close_non_accepted+0xd1/0x1f0 [ 169.573973][ T5991] smc_close_active+0xae2/0xea0 [ 169.579335][ T5991] __smc_release+0x9c/0x7b0 [ 169.584348][ T5991] smc_release+0x2c1/0x520 [ 169.589275][ T5991] sock_close+0xbf/0x210 [ 169.594031][ T5991] __fput+0x212/0x8c0 [ 169.598530][ T5991] task_work_run+0x125/0x1a0 [ 169.603641][ T5991] exit_to_user_mode_loop+0x10f/0x130 [ 169.609532][ T5991] exit_to_user_mode_prepare+0xee/0x180 [ 169.615602][ T5991] syscall_exit_to_user_mode+0x16/0x40 [ 169.621585][ T5991] do_syscall_64+0x58/0xa0 [ 169.626517][ T5991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.632933][ T5991] [ 169.632933][ T5991] other info that might help us debug this: [ 169.632933][ T5991] [ 169.643156][ T5991] Possible unsafe locking scenario: [ 169.643156][ T5991] [ 169.650598][ T5991] CPU0 CPU1 [ 169.655955][ T5991] ---- ---- [ 169.661311][ T5991] lock(sk_lock-AF_SMC/1); [ 169.665819][ T5991] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.675274][ T5991] lock(sk_lock-AF_SMC/1); [ 169.682301][ T5991] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.689233][ T5991] [ 169.689233][ T5991] *** DEADLOCK *** [ 169.689233][ T5991] [ 169.697365][ T5991] 2 locks held by syz.3.490/5991: [ 169.702378][ T5991] #0: ffff88805edfa010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 169.712568][ T5991] #1: ffff88807f138120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 169.721975][ T5991] [ 169.721975][ T5991] stack backtrace: [ 169.727853][ T5991] CPU: 0 PID: 5991 Comm: syz.3.490 Not tainted syzkaller #0 [ 169.735131][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 169.745179][ T5991] Call Trace: [ 169.748456][ T5991] [ 169.751382][ T5991] dump_stack_lvl+0x188/0x250 [ 169.756061][ T5991] ? load_image+0x410/0x410 [ 169.760564][ T5991] ? show_regs_print_info+0x20/0x20 [ 169.765764][ T5991] ? print_circular_bug+0x12b/0x1a0 [ 169.770966][ T5991] check_noncircular+0x2f8/0x400 [ 169.775898][ T5991] ? deref_stack_reg+0xd0/0x120 [ 169.780747][ T5991] ? look_up_lock_class+0x71/0x110 [ 169.785859][ T5991] ? print_deadlock_bug+0x5d0/0x5d0 [ 169.791051][ T5991] ? lockdep_lock+0xf1/0x1f0 [ 169.795644][ T5991] ? lock_release+0xb5/0x8a0 [ 169.800235][ T5991] ? mark_lock+0x94/0x320 [ 169.804558][ T5991] ? _find_first_zero_bit+0xd1/0xf0 [ 169.809751][ T5991] __lock_acquire+0x38f7/0x7d40 [ 169.814601][ T5991] ? deref_stack_reg+0xd0/0x120 [ 169.819457][ T5991] ? verify_lock_unused+0x140/0x140 [ 169.824649][ T5991] ? mark_lock+0x94/0x320 [ 169.828970][ T5991] ? __lock_acquire+0x13b3/0x7d40 [ 169.833993][ T5991] ? lockdep_lock+0xf1/0x1f0 [ 169.838583][ T5991] lock_acquire+0x19f/0x400 [ 169.843085][ T5991] ? __flush_work+0xfa/0x210 [ 169.847673][ T5991] ? read_lock_is_recursive+0x10/0x10 [ 169.853048][ T5991] __flush_work+0x116/0x210 [ 169.857546][ T5991] ? __flush_work+0xfa/0x210 [ 169.862127][ T5991] ? flush_work+0x20/0x20 [ 169.866448][ T5991] ? try_to_grab_pending+0xfb/0x820 [ 169.871641][ T5991] ? mark_lock+0x94/0x320 [ 169.875964][ T5991] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.881944][ T5991] ? lock_chain_count+0x20/0x20 [ 169.886795][ T5991] ? mark_lock+0x94/0x320 [ 169.891119][ T5991] ? __cancel_work_timer+0x36a/0x560 [ 169.896404][ T5991] __cancel_work_timer+0x3f4/0x560 [ 169.901516][ T5991] ? cancel_work_sync+0x20/0x20 [ 169.906362][ T5991] ? __local_bh_enable_ip+0x136/0x1c0 [ 169.911729][ T5991] ? lockdep_hardirqs_on+0x94/0x140 [ 169.916930][ T5991] ? __local_bh_enable_ip+0x136/0x1c0 [ 169.922298][ T5991] ? _local_bh_enable+0xa0/0xa0 [ 169.927146][ T5991] smc_clcsock_release+0x5c/0xe0 [ 169.932080][ T5991] __smc_release+0x644/0x7b0 [ 169.936670][ T5991] smc_close_non_accepted+0xd1/0x1f0 [ 169.941950][ T5991] smc_close_active+0xae2/0xea0 [ 169.946794][ T5991] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 169.952426][ T5991] __smc_release+0x9c/0x7b0 [ 169.956929][ T5991] smc_release+0x2c1/0x520 [ 169.961349][ T5991] sock_close+0xbf/0x210 [ 169.965585][ T5991] ? sock_mmap+0x90/0x90 [ 169.969820][ T5991] __fput+0x212/0x8c0 [ 169.973807][ T5991] task_work_run+0x125/0x1a0 [ 169.978398][ T5991] exit_to_user_mode_loop+0x10f/0x130 [ 169.983767][ T5991] exit_to_user_mode_prepare+0xee/0x180 [ 169.989305][ T5991] syscall_exit_to_user_mode+0x16/0x40 [ 169.994761][ T5991] do_syscall_64+0x58/0xa0 [ 169.999170][ T5991] ? clear_bhb_loop+0x30/0x80 [ 170.003844][ T5991] ? clear_bhb_loop+0x30/0x80 [ 170.008512][ T5991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.014401][ T5991] RIP: 0033:0x7f3d7fa19559 [ 170.018809][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.038406][ T5991] RSP: 002b:00007f3d7dc70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 170.046816][ T5991] RAX: 0000000000000000 RBX: 00007f3d7fc9ffa0 RCX: 00007f3d7fa19559 [ 170.054782][ T5991] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 170.062749][ T5991] RBP: 00007f3d7fab0b20 R08: 0000000000000000 R09: 0000000000000000 [ 170.070712][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.078678][ T5991] R13: 00007f3d7fca0038 R14: 00007f3d7fc9ffa0 R15: 00007ffe3e1b84c8 [ 170.086649][ T5991] [ 175.628611][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 175.628803][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 175.634634][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 175.640718][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 175.652622][ T4293] Bluetooth: hci4: command 0x0406 tx timeout