last executing test programs: 9.271492167s ago: executing program 2 (id=184): socket$nl_route(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket(0x11, 0x800000003, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$vim2m(&(0x7f0000000140), 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r3], 0x1000f) 8.580049699s ago: executing program 2 (id=192): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 7.315911334s ago: executing program 2 (id=198): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7.021196305s ago: executing program 2 (id=200): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) pselect6(0x40, &(0x7f00000001c0)={0x3d, 0x300, 0x0, 0x1, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) 5.53993663s ago: executing program 3 (id=205): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0x0, 0x2]}}) sendfile(r0, r1, &(0x7f0000000000)=0x6, 0x7) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 4.826160353s ago: executing program 3 (id=207): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') r1 = memfd_create(&(0x7f0000000800)='uid<', 0x4) fstatfs(r1, &(0x7f00000003c0)=""/146) lseek(r0, 0x59, 0x0) 4.641172034s ago: executing program 4 (id=209): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000006cf5aa540"], 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_targets\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x294}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 4.614100684s ago: executing program 3 (id=210): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f000001fb00)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001004900000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000000000000000000080005000600000004001780"], 0x44}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bind$can_j1939(r7, 0x0, 0x0) sendmsg$can_j1939(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 3.975733276s ago: executing program 3 (id=212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@null={0x40, 0x40, 0x40, 0x40, 0x8}) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000000)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 3.868405106s ago: executing program 1 (id=213): unshare(0x2040600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 3.747940927s ago: executing program 0 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[], 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'sha384-avx\x00'}}) 3.747843857s ago: executing program 1 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 3.629763107s ago: executing program 1 (id=216): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x17) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/59, 0x3b) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f00000006c0)=""/4096, &(0x7f0000000380)=""/61, &(0x7f00000004c0)=""/207, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000009508000000f7ff0000000000000000000000000000000050f6c30da1d1a4af9c173b7e65c26325b9826af7b3f59595279874e493e66dacdb3b93a5e442c442a24ba03d9c5b0ab2c69d4c195130ff074514bc558072257f38e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20000015) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x10, 0x20000001, 0x801}, &(0x7f00000005c0), &(0x7f0000000300)) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 2.83267152s ago: executing program 1 (id=217): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0x0, 0x2]}}) sendfile(r0, r1, &(0x7f0000000000)=0x6, 0x7) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 2.75849245s ago: executing program 4 (id=218): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x375b8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x6, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0021002bbd7000f8dbdf250a100002fd0000090010000008000400038ccbda1845500c2cfa96df57c2652341f0d5984c", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r6, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 2.707861691s ago: executing program 3 (id=219): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b00010000000009040000"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd, 0x0, 0x0, 0x0, {0x9208}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.611515831s ago: executing program 1 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}}, 0x0) 1.827720723s ago: executing program 4 (id=221): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000060c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x73, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xac}, {0x5, 0x4, 0x6, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}}, 0x0) 1.742351084s ago: executing program 0 (id=222): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f000001fb00)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001004900000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000000000000000000080005000600000004001780"], 0x44}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bind$can_j1939(r7, 0x0, 0x0) sendmsg$can_j1939(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.667934614s ago: executing program 1 (id=223): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000240)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsmount(r1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r3, 0xfbff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.550046774s ago: executing program 0 (id=224): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.549305754s ago: executing program 4 (id=225): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="d383", 0x2}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000002540)=""/4092, 0xffc}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 1.428753905s ago: executing program 4 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0f15d93d9295f084d07bb3a390631a4d7d3997e3d227395d010015c07f1bf6226da49c292e639c71b8ac340759d73316823e7b2e91c401fe14c3d071d95b6e42b1537f5ce8b0a4984323445dea70c84ee152f6463545662877cd2facd6f323181618bfe5d17a9d0c7f3e46acc32f0b96654d1950e8d2c0ab95", 0x79) 1.373100555s ago: executing program 0 (id=227): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x2d, 0x0, 0x2}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.165169156s ago: executing program 0 (id=228): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000006cf5aa540"], 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_targets\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x294}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 1.059947426s ago: executing program 4 (id=229): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) read$dsp(r0, &(0x7f0000000140)=""/48, 0x30) 963.212987ms ago: executing program 2 (id=230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r1 = memfd_secret(0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x1, &(0x7f000003d000/0x1000)=nil, &(0x7f000055f000/0x4000)=nil, 0x8, &(0x7f0000000080)=[{0xc, 0x1, 0x1}, {0x7fffffffffffffff, 0x7, 0x1c}], 0x2, 0x6, 0x10, 0x0, 0x0, 0x10}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x112, r1, 0x8000000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0x0, 0x2]}}) sendfile(r4, r5, &(0x7f0000000000)=0x6, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 632.059888ms ago: executing program 2 (id=231): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x375b8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x6, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0021002bbd7000f8dbdf250a100002fd0000090010000008000400038ccbda1845500c2cfa96df57c2652341f0d5984c", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r6, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 465.993178ms ago: executing program 0 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[], 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'sha384-avx\x00'}}) 0s ago: executing program 3 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="14000000100001006d000000000000000000000a50000000060a0b0400000000000000000200000014000480f1ff00800b00010065787468647200000900010073797a30000000000900020073797a3200"], 0x68}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 55.567069][ T4153] cgroup: Unknown subsys name 'net' [ 55.730571][ T4153] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.169148][ T4153] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.487222][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 58.568707][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 58.595198][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 58.646524][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 58.739579][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.748064][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.756393][ T4180] device bridge_slave_0 entered promiscuous mode [ 58.792614][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.799843][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.807740][ T4180] device bridge_slave_1 entered promiscuous mode [ 58.820018][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 58.836399][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.843627][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.851276][ T4167] device bridge_slave_0 entered promiscuous mode [ 58.859886][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.866983][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.875082][ T4167] device bridge_slave_1 entered promiscuous mode [ 58.898222][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.905483][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.913131][ T4168] device bridge_slave_0 entered promiscuous mode [ 58.957109][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.964379][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.972036][ T4168] device bridge_slave_1 entered promiscuous mode [ 58.988450][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.997852][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.005369][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.013388][ T4169] device bridge_slave_0 entered promiscuous mode [ 59.039435][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.051705][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.061016][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.068865][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.077202][ T4169] device bridge_slave_1 entered promiscuous mode [ 59.098052][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.132732][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.155255][ T4180] team0: Port device team_slave_0 added [ 59.172980][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.184495][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.202425][ T4180] team0: Port device team_slave_1 added [ 59.216664][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.240987][ T4167] team0: Port device team_slave_0 added [ 59.260678][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.267823][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.276360][ T4166] device bridge_slave_0 entered promiscuous mode [ 59.290593][ T4167] team0: Port device team_slave_1 added [ 59.310513][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.317942][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.326666][ T4166] device bridge_slave_1 entered promiscuous mode [ 59.336671][ T4168] team0: Port device team_slave_0 added [ 59.350991][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.358039][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.384107][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.398831][ T4169] team0: Port device team_slave_0 added [ 59.414821][ T4168] team0: Port device team_slave_1 added [ 59.429106][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.436113][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.462285][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.474624][ T4169] team0: Port device team_slave_1 added [ 59.499754][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.507200][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.533242][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.545626][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.552564][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.578803][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.614904][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.643046][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.656873][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.683015][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.696312][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.706177][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.713122][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.739264][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.753069][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.760076][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.786218][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.812505][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.819749][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.846367][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.884325][ T4180] device hsr_slave_0 entered promiscuous mode [ 59.891090][ T4180] device hsr_slave_1 entered promiscuous mode [ 59.922515][ T4167] device hsr_slave_0 entered promiscuous mode [ 59.929734][ T4167] device hsr_slave_1 entered promiscuous mode [ 59.936420][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.944473][ T4167] Cannot create hsr debugfs directory [ 59.962157][ T4166] team0: Port device team_slave_0 added [ 59.970715][ T4168] device hsr_slave_0 entered promiscuous mode [ 59.978930][ T4168] device hsr_slave_1 entered promiscuous mode [ 59.985874][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.993959][ T4168] Cannot create hsr debugfs directory [ 60.014834][ T4166] team0: Port device team_slave_1 added [ 60.073379][ T4169] device hsr_slave_0 entered promiscuous mode [ 60.080221][ T4169] device hsr_slave_1 entered promiscuous mode [ 60.086870][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.094820][ T4169] Cannot create hsr debugfs directory [ 60.115440][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.122403][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.148552][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.168208][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.175715][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.201693][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.204933][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 60.212664][ T4172] Bluetooth: hci4: command 0x0409 tx timeout [ 60.224659][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 60.232400][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 60.238571][ T4172] Bluetooth: hci0: command 0x0409 tx timeout [ 60.331622][ T4166] device hsr_slave_0 entered promiscuous mode [ 60.338533][ T4166] device hsr_slave_1 entered promiscuous mode [ 60.345357][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.352915][ T4166] Cannot create hsr debugfs directory [ 60.575397][ T4180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.591850][ T4180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.617972][ T4180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.637114][ T4180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.670462][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.704624][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.717492][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.728073][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.795871][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.825347][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.835171][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.860370][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.886667][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.928590][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.942519][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.956835][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.985863][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.997345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.007726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.017815][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.025071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.034832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.044510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.053154][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.060255][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.076435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.093207][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.107784][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.137881][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.148511][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.167848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.198216][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.210347][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.220599][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.238704][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.256120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.265865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.309105][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.319847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.332150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.341722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.351132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.362493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.372421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.385610][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.401886][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.411498][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.421083][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.456535][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.469531][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.493140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.505372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.514574][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.521977][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.530627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.539533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.548370][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.555454][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.564345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.573187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.595011][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.609616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.617933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.626684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.636308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.647962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.656771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.666221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.676213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.683304][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.691780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.701562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.716586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.726118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.753192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.771847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.781666][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.788835][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.798162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.837372][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.849333][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.870419][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.881778][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.900059][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.910371][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.920632][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.932559][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.957948][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.972563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.988029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.024520][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.036230][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.045596][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.055558][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.072582][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.085894][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.133867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.145137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.164599][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.186005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.196655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.210071][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.239148][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.263127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.283809][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 62.290012][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 62.294392][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 62.302635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.303832][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 62.323748][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 62.330749][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.337883][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.361981][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.386438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.405503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.413158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.426798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.440259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.449628][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.456808][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.469101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.496849][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.508500][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.517827][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.526165][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.535920][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.544846][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.585282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.597110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.607934][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.615141][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.624080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.633285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.642620][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.649728][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.658094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.666139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.674953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.684244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.696747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.705821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.719155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.729042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.747026][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.775375][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.785097][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.796791][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.806136][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.815138][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.830256][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.871727][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.884240][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.900066][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.916327][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.932700][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.943300][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.952408][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.961815][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.970499][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.979209][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.988153][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.997847][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.007228][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.016105][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.051350][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.072266][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.085400][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.097884][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.107155][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.119462][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.128129][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.140979][ T4180] device veth0_vlan entered promiscuous mode [ 63.155122][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.164644][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.177254][ T4167] device veth0_vlan entered promiscuous mode [ 63.200518][ T4180] device veth1_vlan entered promiscuous mode [ 63.208251][ T4168] device veth0_vlan entered promiscuous mode [ 63.224123][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.232717][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.245113][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.256143][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.265121][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.286842][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.295677][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.303354][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.315062][ T4168] device veth1_vlan entered promiscuous mode [ 63.328437][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.345299][ T4167] device veth1_vlan entered promiscuous mode [ 63.380088][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.407700][ T4180] device veth0_macvtap entered promiscuous mode [ 63.422295][ T4180] device veth1_macvtap entered promiscuous mode [ 63.467517][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.477856][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.487809][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.497522][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.506166][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.515634][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.525314][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.533370][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.590323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.601881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.625960][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.643237][ T4167] device veth0_macvtap entered promiscuous mode [ 63.668576][ T4167] device veth1_macvtap entered promiscuous mode [ 63.677746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.686667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.696936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.706313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.716320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.728055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.738127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.748131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.762309][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.791092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.803078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.816844][ T4168] device veth0_macvtap entered promiscuous mode [ 63.845866][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.856861][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.866561][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.875834][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.892544][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.905715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.913858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.924503][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.936028][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.948561][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.977542][ T4168] device veth1_macvtap entered promiscuous mode [ 63.989104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.998510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.007887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.017254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.028233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.036843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.048600][ T4169] device veth0_vlan entered promiscuous mode [ 64.077506][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.088230][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.100783][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.117052][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.132069][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.141158][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.150819][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178575][ T4169] device veth1_vlan entered promiscuous mode [ 64.187271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.196405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.206209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.215700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.226834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.307113][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.320776][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.330747][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.341939][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.355232][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.365231][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 64.367752][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 64.372724][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 64.384070][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 64.384260][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 64.428286][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.437205][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.447886][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.461070][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.472008][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.482421][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.493199][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.507575][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.544487][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.552609][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.560673][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.581249][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.590688][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.600062][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.612109][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.622494][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.632148][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.641998][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.650930][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.667846][ T4169] device veth0_macvtap entered promiscuous mode [ 64.682679][ T4166] device veth0_vlan entered promiscuous mode [ 64.694452][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.703231][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.713159][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.722122][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.762893][ T4169] device veth1_macvtap entered promiscuous mode [ 64.794322][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.806611][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.819787][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.821219][ T4166] device veth1_vlan entered promiscuous mode [ 64.828943][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.846157][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.918048][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.928743][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.933964][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.958433][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969224][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.980376][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.990670][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.001995][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.019039][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.042513][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.052324][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.080346][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.094651][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.104602][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.114918][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.126428][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.138490][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.148809][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.159812][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.170227][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.182398][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.196123][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.211231][ T4166] device veth0_macvtap entered promiscuous mode [ 65.243951][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.253166][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.291567][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.306104][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.317572][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.344501][ T4166] device veth1_macvtap entered promiscuous mode [ 65.370158][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.381112][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.391514][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.400706][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.444198][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.452202][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.530112][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.550447][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.562947][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.578338][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.588585][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.600659][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.611116][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.622060][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.637107][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.667566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.678968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.679012][ T4245] process 'syz.1.2' launched '/dev/fd/5/éq‰Y’3aK' with NULL argv: empty string added [ 65.691820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.707007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.719453][ T4247] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 65.761018][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.778673][ T4247] team0: Port device batadv0 added [ 65.793093][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.819321][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.834144][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.849511][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861017][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.894522][ T4247] syz.4.5 (4247) used greatest stack depth: 18872 bytes left [ 65.896868][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.920525][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.939948][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.955344][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.987793][ T4253] device geneve0 entered promiscuous mode [ 66.002066][ T4253] device geneve0 left promiscuous mode [ 66.070909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.083251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.116076][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.117706][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.137005][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.142125][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153870][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162657][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.207662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.352050][ T4260] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.374380][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.430881][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.444537][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 66.447012][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 66.472049][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 66.482525][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 66.499104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.517279][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 66.517796][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.517848][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.571994][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.622689][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.647742][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.676785][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.706316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.734881][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.745026][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.831615][ T4270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.845432][ T4272] tun0: tun_chr_ioctl cmd 1074025677 [ 66.850908][ T4272] tun0: linktype set to 800 [ 67.393576][ T4172] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.455925][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.565231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.621089][ T4282] mmap: syz.1.13 (4282) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 67.674130][ T4172] usb 1-1: Using ep0 maxpacket: 8 [ 67.716096][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 67.807388][ T4172] usb 1-1: config 64 has an invalid interface number: 23 but max is 1 [ 67.819526][ T4172] usb 1-1: config 64 has an invalid interface number: 83 but max is 1 [ 67.830268][ T4172] usb 1-1: config 64 has no interface number 0 [ 67.838855][ T4172] usb 1-1: config 64 has no interface number 1 [ 67.847236][ T4172] usb 1-1: config 64 interface 23 has no altsetting 0 [ 67.863286][ T4172] usb 1-1: config 64 interface 83 has no altsetting 0 [ 67.874411][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 67.894463][ T13] usb 4-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 67.957071][ T13] usb 4-1: config 0 interface 0 has no altsetting 1 [ 67.983569][ T13] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 68.004565][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.073908][ T4172] usb 1-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=3e.66 [ 68.086541][ T13] usb 4-1: config 0 descriptor?? [ 68.095829][ T4172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.111620][ T4172] usb 1-1: Product: syz [ 68.116455][ T4172] usb 1-1: Manufacturer: syz [ 68.121131][ T4172] usb 1-1: SerialNumber: syz [ 68.132446][ T13] rndis_host: probe of 4-1:0.0 failed with error -22 [ 68.408398][ T1111] usb 4-1: USB disconnect, device number 2 [ 68.410358][ T4276] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 68.423510][ T4211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.581610][ T4172] usb 1-1: USB disconnect, device number 2 [ 68.606258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 68.673483][ T4211] usb 2-1: Using ep0 maxpacket: 8 [ 68.793792][ T4211] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 68.808200][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.856784][ T4211] usb 2-1: config 0 descriptor?? [ 69.073364][ T26] audit: type=1326 audit(1734149493.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 69.131655][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 69.140722][ T26] audit: type=1326 audit(1734149493.916:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 69.325474][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.588258][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 69.822373][ T4314] input: syz0 as /devices/virtual/input/input5 [ 69.843762][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.874084][ T1111] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.895691][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.913684][ T1111] usb 4-1: Product: syz [ 69.922124][ T1111] usb 4-1: Manufacturer: syz [ 69.935351][ T1111] usb 4-1: SerialNumber: syz [ 69.950576][ T1111] r8152-cfgselector 4-1: config 0 descriptor?? [ 69.994132][ T4211] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.014704][ T4211] asix: probe of 2-1:0.0 failed with error -71 [ 70.039744][ T4211] usb 2-1: USB disconnect, device number 2 [ 70.103572][ T4214] usb 5-1: Using ep0 maxpacket: 16 [ 70.223755][ T4214] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 70.232519][ T4214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.239647][ T26] audit: type=1326 audit(1734149495.036:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8f242f680 code=0x7ffc0000 [ 70.261122][ T4214] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 70.271457][ T26] audit: type=1326 audit(1734149495.036:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 70.275182][ T4214] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 70.312001][ T26] audit: type=1326 audit(1734149495.036:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 70.334551][ T4214] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.340262][ T26] audit: type=1326 audit(1734149495.116:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f243091b code=0x7ffc0000 [ 70.373256][ T26] audit: type=1326 audit(1734149495.116:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f243091b code=0x7ffc0000 [ 70.404462][ T26] audit: type=1326 audit(1734149495.146:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8f24635c5 code=0x7ffc0000 [ 70.524204][ T4212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.530697][ T4214] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.537383][ T26] audit: type=1326 audit(1734149495.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 70.553545][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.581475][ T4214] usb 5-1: Product: syz [ 70.587123][ T4214] usb 5-1: Manufacturer: syz [ 70.599535][ T4214] usb 5-1: SerialNumber: syz [ 70.613761][ T1111] r8152-cfgselector 4-1: Unknown version 0x0000 [ 70.623867][ T1111] r8152-cfgselector 4-1: bad CDC descriptors [ 70.630039][ T4329] tun0: tun_chr_ioctl cmd 1074025677 [ 70.645971][ T4329] tun0: linktype set to 800 [ 70.651011][ T26] audit: type=1326 audit(1734149495.336:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f2430d19 code=0x7ffc0000 [ 70.673695][ T1111] r8152-cfgselector 4-1: Unknown version 0x0000 [ 70.691972][ T1111] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 70.793727][ T4212] usb 1-1: Using ep0 maxpacket: 8 [ 70.813894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 70.964705][ T4214] usb 5-1: 0:2 : does not exist [ 71.014087][ T4214] usb 5-1: USB disconnect, device number 2 [ 71.085447][ T4172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.105521][ T4212] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 71.120360][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.141934][ T4212] usb 1-1: Product: syz [ 71.162280][ T4212] usb 1-1: Manufacturer: syz [ 71.180014][ T4212] usb 1-1: SerialNumber: syz [ 71.192188][ T4212] usb 1-1: config 0 descriptor?? [ 71.343533][ T4172] usb 3-1: Using ep0 maxpacket: 32 [ 71.456543][ T4212] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.486776][ T4172] usb 3-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 71.508564][ T4172] usb 3-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 71.543595][ T4172] usb 3-1: config 0 interface 0 has no altsetting 1 [ 71.562203][ T4172] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 71.589156][ T4172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.612614][ T4172] usb 3-1: config 0 descriptor?? [ 71.679246][ T4172] rndis_host: probe of 3-1:0.0 failed with error -22 [ 71.817930][ T4340] input: syz0 as /devices/virtual/input/input6 [ 71.901792][ T4172] usb 3-1: USB disconnect, device number 2 [ 71.980459][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 72.200549][ T4212] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 72.694328][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.700782][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.874967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 73.003631][ T4212] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.090565][ T4369] device hsr_slave_0 left promiscuous mode [ 73.101338][ T4369] device hsr_slave_1 left promiscuous mode [ 73.273655][ T4212] usb 3-1: Using ep0 maxpacket: 32 [ 73.391913][ T4172] usb 1-1: USB disconnect, device number 3 [ 73.398122][ T4212] usb 3-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 73.416882][ T4212] usb 3-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 73.438866][ T4212] usb 3-1: config 0 interface 0 has no altsetting 1 [ 73.447026][ T4212] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 73.459260][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.487999][ T4212] usb 3-1: config 0 descriptor?? [ 73.535209][ T4212] rndis_host: probe of 3-1:0.0 failed with error -22 [ 73.583685][ T4214] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.609125][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 73.652110][ T4382] device erspan0 entered promiscuous mode [ 73.669497][ T4382] device macvtap1 entered promiscuous mode [ 73.738446][ T4172] usb 3-1: USB disconnect, device number 3 [ 73.845696][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 73.966708][ T4214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.997635][ T4214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.207968][ T4214] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.228858][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.238688][ T4214] usb 5-1: Product: syz [ 74.242871][ T4214] usb 5-1: Manufacturer: syz [ 74.255838][ T4214] usb 5-1: SerialNumber: syz [ 74.596858][ T4214] usb 5-1: 0:2 : does not exist [ 74.613686][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.674542][ T4214] usb 5-1: USB disconnect, device number 3 [ 74.748520][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.853620][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 74.945913][ T4212] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.134537][ T1111] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.798622][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.807884][ T1111] usb 1-1: Product: syz [ 75.813869][ T1111] usb 1-1: Manufacturer: syz [ 75.818697][ T1111] usb 1-1: SerialNumber: syz [ 75.840104][ T1111] usb 1-1: config 0 descriptor?? [ 75.885091][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.093728][ T4212] usb 2-1: config 0 has no interfaces? [ 76.123822][ T1111] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 76.203684][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.249943][ T4453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.261323][ T4212] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 76.271028][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.307913][ T4212] usb 2-1: Product: syz [ 76.313368][ T4212] usb 2-1: Manufacturer: syz [ 76.319762][ T4212] usb 2-1: SerialNumber: syz [ 76.331497][ T4212] usb 2-1: config 0 descriptor?? [ 76.474802][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 76.593657][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 76.610258][ T23] usb 5-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 76.630471][ T23] usb 5-1: config 0 interface 0 has no altsetting 1 [ 76.641833][ T23] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 76.656421][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.668641][ T23] usb 5-1: config 0 descriptor?? [ 76.705278][ T23] rndis_host: probe of 5-1:0.0 failed with error -22 [ 76.863631][ T1111] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 76.908473][ T1108] usb 5-1: USB disconnect, device number 4 [ 77.322352][ T4469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 77.332140][ T4469] netlink: 165 bytes leftover after parsing attributes in process `syz.3.82'. [ 77.909585][ T4211] usb 1-1: USB disconnect, device number 4 [ 78.103729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.113476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.123448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.133444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.143453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.196853][ T4441] usb 2-1: USB disconnect, device number 3 [ 79.088557][ T26] audit: type=1326 audit(1734149503.896:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.141680][ T26] audit: type=1326 audit(1734149503.896:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.269127][ T26] audit: type=1326 audit(1734149503.896:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.370285][ T26] audit: type=1326 audit(1734149503.896:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.463199][ T26] audit: type=1326 audit(1734149503.896:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.485717][ T26] audit: type=1326 audit(1734149503.896:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.533189][ T26] audit: type=1326 audit(1734149503.926:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 79.564156][ T4510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 79.577446][ T4510] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 79.595936][ T4510] netlink: 165 bytes leftover after parsing attributes in process `syz.1.96'. [ 79.825954][ T26] audit: type=1326 audit(1734149503.926:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 80.102157][ T26] audit: type=1326 audit(1734149503.926:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f262c4d19 code=0x7ffc0000 [ 80.294045][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.301682][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.555590][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 80.560819][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 81.463700][ T1108] usb 3-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 81.485074][ T1108] usb 3-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 81.513790][ T1108] usb 3-1: config 0 interface 0 has no altsetting 1 [ 81.539207][ T1108] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 81.561301][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.589849][ T1108] usb 3-1: config 0 descriptor?? [ 81.679329][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 81.689573][ T1108] rndis_host: probe of 3-1:0.0 failed with error -22 [ 82.643618][ T4563] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 82.913599][ T4563] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 82.945670][ T4562] sched: RT throttling activated [ 82.956387][ T7] cfg80211: failed to load regulatory.db [ 82.968513][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.202242][ T4563] netlink: 165 bytes leftover after parsing attributes in process `syz.1.112'. [ 83.482460][ T4566] device hsr0 entered promiscuous mode [ 83.525268][ T1108] usb 3-1: USB disconnect, device number 4 [ 83.531747][ T13] usb 4-1: Product: syz [ 83.538714][ T13] usb 4-1: Manufacturer: syz [ 83.543297][ T13] usb 4-1: SerialNumber: syz [ 83.564536][ T4568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.594480][ T13] usb 4-1: config 0 descriptor?? [ 83.713572][ T13] usb 4-1: can't set config #0, error -71 [ 83.721624][ T13] usb 4-1: USB disconnect, device number 4 [ 83.733472][ T4566] device hsr_slave_0 left promiscuous mode [ 83.783558][ T4566] device hsr_slave_1 left promiscuous mode [ 84.833247][ T4590] netlink: 'syz.4.122': attribute type 9 has an invalid length. [ 86.741871][ T4606] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 86.786399][ T4606] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 86.803714][ T4606] netlink: 165 bytes leftover after parsing attributes in process `syz.0.127'. [ 87.343823][ T4214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.673881][ T4214] usb 5-1: Using ep0 maxpacket: 32 [ 87.825083][ T4214] usb 5-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 87.957658][ T4214] usb 5-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 87.967001][ T4619] device hsr0 entered promiscuous mode [ 87.972047][ T4214] usb 5-1: config 0 interface 0 has no altsetting 1 [ 87.983263][ T4214] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 87.993831][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.010377][ T4214] usb 5-1: config 0 descriptor?? [ 88.020631][ T4623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.054646][ T4214] rndis_host: probe of 5-1:0.0 failed with error -22 [ 88.158227][ T4619] device hsr_slave_0 left promiscuous mode [ 88.209152][ T4619] device hsr_slave_1 left promiscuous mode [ 88.270852][ T4214] usb 5-1: USB disconnect, device number 5 [ 89.569718][ T4648] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 89.581136][ T4648] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 89.998994][ T4652] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 1024 [ 90.777356][ T4667] device hsr0 entered promiscuous mode [ 90.792596][ T4667] device hsr_slave_0 left promiscuous mode [ 90.841327][ T4667] device hsr_slave_1 left promiscuous mode [ 91.905653][ T4693] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 91.914225][ T4693] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 92.428892][ T4701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.644041][ T4705] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 92.656797][ T4705] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 93.452891][ T4710] tipc: Started in network mode [ 93.466617][ T4710] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.500671][ T4710] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.541534][ T4710] tipc: Enabled bearer , priority 10 [ 93.644666][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.765750][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 93.783694][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.923722][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.025252][ T4746] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 94.036143][ T4746] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 94.063604][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.203749][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.343796][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.483909][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.585333][ T13] tipc: Node number set to 2886997162 [ 95.643578][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.743664][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.770214][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.923712][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.993846][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.048022][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.128256][ T7] usb 3-1: Product: syz [ 96.132470][ T7] usb 3-1: Manufacturer: syz [ 96.222317][ T7] usb 3-1: SerialNumber: syz [ 96.493979][ T7] usb 3-1: 0:2 : does not exist [ 96.677984][ T7] usb 3-1: USB disconnect, device number 5 [ 97.343229][ T4786] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 97.350115][ T4786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.359511][ T4786] vhci_hcd vhci_hcd.0: Device attached [ 97.399742][ T4790] vhci_hcd: connection closed [ 97.421830][ T144] vhci_hcd: stop threads [ 97.430890][ T4785] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 97.437391][ T4785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.445836][ T4785] vhci_hcd vhci_hcd.0: Device attached [ 97.451680][ T4789] vhci_hcd: connection closed [ 97.452945][ T144] vhci_hcd: release socket [ 97.462487][ T144] vhci_hcd: disconnect device [ 97.477804][ T144] vhci_hcd: stop threads [ 97.515865][ T4784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 97.522418][ T4784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.530011][ T4784] vhci_hcd vhci_hcd.0: Device attached [ 97.538206][ T4788] vhci_hcd: connection closed [ 97.654973][ T144] vhci_hcd: release socket [ 97.660312][ T144] vhci_hcd: disconnect device [ 97.667615][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.687165][ T144] vhci_hcd: stop threads [ 97.711957][ T144] vhci_hcd: release socket [ 98.084609][ T144] vhci_hcd: disconnect device [ 98.928488][ C0] net_ratelimit: 2 callbacks suppressed [ 98.928529][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 99.542554][ T4820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.598310][ T4822] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.663319][ T4824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.813590][ T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 99.963596][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 100.953771][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.965961][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.013601][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 101.330926][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.375582][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.975163][ T23] usb 1-1: Product: syz [ 101.993660][ T23] usb 1-1: Manufacturer: syz [ 101.998300][ T23] usb 1-1: SerialNumber: syz [ 102.043611][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 102.472231][ T4865] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 102.473753][ T23] usb 1-1: 0:2 : does not exist [ 103.093730][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.298898][ T23] usb 1-1: USB disconnect, device number 5 [ 103.407463][ T4878] binder: 4877:4878 ioctl c0306201 20000940 returned -14 [ 103.639609][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.123619][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.201296][ T4892] program syz.0.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.218688][ T4890] autofs4:pid:4890:autofs_fill_super: called with bogus options [ 105.163648][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.260469][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.433604][ T1108] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.620915][ T4923] autofs4:pid:4923:autofs_fill_super: called with bogus options [ 106.845412][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.934095][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.034099][ T1108] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 107.052165][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.101086][ T1108] usb 4-1: Product: syz [ 107.119260][ T1108] usb 4-1: Manufacturer: syz [ 107.128027][ T1108] usb 4-1: SerialNumber: syz [ 107.157992][ T1108] usb 4-1: config 0 descriptor?? [ 107.233579][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 107.323690][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.449974][ T1108] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 107.478558][ T1108] usb 4-1: USB disconnect, device number 5 [ 107.501788][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.564399][ T7] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 107.578770][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.596322][ T7] usb 2-1: Product: syz [ 107.602434][ T7] usb 2-1: Manufacturer: syz [ 107.624960][ T7] usb 2-1: SerialNumber: syz [ 107.641421][ T7] usb 2-1: config 0 descriptor?? [ 107.698690][ T7] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 108.203851][ C0] [ 108.206521][ C0] ============================= [ 108.211374][ C0] WARNING: suspicious RCU usage [ 108.216266][ C0] 5.15.173-syzkaller #0 Not tainted [ 108.221463][ C0] ----------------------------- [ 108.226333][ C0] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 108.234743][ C0] [ 108.234743][ C0] other info that might help us debug this: [ 108.234743][ C0] [ 108.245040][ C0] [ 108.245040][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 108.253160][ C0] 8 locks held by syz.2.231/4949: [ 108.258253][ C0] #0: ffff88807715fd98 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x24d/0x1260 [ 108.268200][ C0] #1: ffffc90000007be0 ((&peer->hb_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 108.277887][ C0] #2: ffff88807c3b24a0 (slock-AF_INET6){+.-.}-{2:2}, at: sctp_generate_heartbeat_event+0x8c/0x450 [ 108.288683][ C0] #3: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 108.298087][ C0] #4: ffffffff8cb1fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 108.307755][ C0] #5: ffffffff8cb1fcc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 108.317445][ C0] #6: ffff888021da1108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xc1f/0x32b0 [ 108.327104][ C0] #7: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 108.336522][ C0] [ 108.336522][ C0] stack backtrace: [ 108.342467][ C0] CPU: 0 PID: 4949 Comm: syz.2.231 Not tainted 5.15.173-syzkaller #0 [ 108.350535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.360654][ C0] Call Trace: [ 108.363960][ C0] [ 108.366814][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 108.371529][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 108.377178][ C0] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 108.382713][ C0] qdisc_lookup+0xa8/0x630 [ 108.387125][ C0] qdisc_tree_reduce_backlog+0x212/0x4f0 [ 108.392768][ C0] pfifo_tail_enqueue+0x2ca/0x400 [ 108.397813][ C0] tbf_enqueue+0x345/0x6a0 [ 108.402231][ C0] ? __rwlock_init+0x140/0x140 [ 108.406987][ C0] dev_qdisc_enqueue+0x47/0x240 [ 108.411845][ C0] ? __dev_queue_xmit+0xcba/0x32b0 [ 108.416965][ C0] __dev_queue_xmit+0xe32/0x32b0 [ 108.421920][ C0] ? dev_queue_xmit+0x20/0x20 [ 108.426594][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 108.432571][ C0] ? print_irqtrace_events+0x210/0x210 [ 108.438031][ C0] ? ip_finish_output2+0xadb/0x11a0 [ 108.443231][ C0] ip_finish_output2+0xcd7/0x11a0 [ 108.448242][ C0] ? ip_mc_finish_output+0x480/0x480 [ 108.453515][ C0] ? ip_fragment+0x210/0x210 [ 108.458089][ C0] ? ip_skb_dst_mtu+0x6de/0x9d0 [ 108.462923][ C0] ? __ip_finish_output+0x3dd/0x4a0 [ 108.468110][ C0] __ip_queue_xmit+0x12df/0x1d90 [ 108.473037][ C0] ? sctp_v4_xmit+0x3b0/0xbc0 [ 108.477716][ C0] sctp_packet_transmit+0x2565/0x2b70 [ 108.483267][ C0] ? sk_setup_caps+0x40e/0x5d0 [ 108.488027][ C0] sctp_outq_flush+0x13c7/0x3d70 [ 108.492969][ C0] ? sctp_outq_tail+0x910/0x910 [ 108.497802][ C0] ? sctp_transport_hold+0x1f0/0x2e0 [ 108.503076][ C0] ? sctp_transport_reset_hb_timer+0x19b/0x1d0 [ 108.509213][ C0] ? sctp_outq_uncork+0x4b/0xa0 [ 108.514049][ C0] sctp_do_sm+0x55e7/0x5c80 [ 108.518554][ C0] ? sctp_generate_t3_rtx_event+0x320/0x320 [ 108.524461][ C0] ? __rwlock_init+0x140/0x140 [ 108.529212][ C0] ? detach_timer+0x24/0x2f0 [ 108.533790][ C0] sctp_generate_heartbeat_event+0x321/0x450 [ 108.539762][ C0] call_timer_fn+0x16d/0x560 [ 108.544347][ C0] ? sctp_do_sm+0x5c80/0x5c80 [ 108.549005][ C0] ? __run_timers+0x890/0x890 [ 108.553667][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 108.558847][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 108.564034][ C0] ? sctp_do_sm+0x5c80/0x5c80 [ 108.568691][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 108.573874][ C0] ? sctp_do_sm+0x5c80/0x5c80 [ 108.578531][ C0] __run_timers+0x67c/0x890 [ 108.583033][ C0] ? detach_timer+0x2f0/0x2f0 [ 108.587687][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 108.593656][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 108.598928][ C0] run_timer_softirq+0x63/0xf0 [ 108.603681][ C0] handle_softirqs+0x3a7/0x930 [ 108.608435][ C0] ? __irq_exit_rcu+0x157/0x240 [ 108.613267][ C0] ? do_softirq+0x240/0x240 [ 108.617755][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 108.622944][ C0] __irq_exit_rcu+0x157/0x240 [ 108.627604][ C0] ? irq_exit_rcu+0x20/0x20 [ 108.632099][ C0] irq_exit_rcu+0x5/0x20 [ 108.636319][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 108.641948][ C0] [ 108.644860][ C0] [ 108.647787][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 108.653760][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 108.660248][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 b2 0e 82 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 57 3f 0f f7 65 8b 05 78 32 ba 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 108.679918][ C0] RSP: 0018:ffffc900031df5a0 EFLAGS: 00000206 [ 108.686055][ C0] RAX: 2728896624306a00 RBX: 1ffff9200063beb8 RCX: ffffffff81632d68 [ 108.694008][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2a80 RDI: 0000000000000001 [ 108.701971][ C0] RBP: ffffc900031df630 R08: dffffc0000000000 R09: fffffbfff2131037 [ 108.709921][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 108.717872][ C0] R13: 1ffff9200063beb4 R14: ffffc900031df5c0 R15: 0000000000000246 [ 108.725832][ C0] ? mark_lock+0x98/0x340 [ 108.730152][ C0] ? _raw_spin_unlock+0x40/0x40 [ 108.734988][ C0] ? __wake_up_common+0x2a0/0x4e0 [ 108.740006][ C0] __wake_up_sync_key+0x121/0x1c0 [ 108.745018][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 108.750987][ C0] ? __skb_try_recv_from_queue+0x770/0x770 [ 108.756783][ C0] ? consume_skb+0x103/0x140 [ 108.761357][ C0] __unix_dgram_recvmsg+0x5fe/0x1260 [ 108.766640][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 108.771648][ C0] ? unix_unhash+0x10/0x10 [ 108.776064][ C0] ? unix_dgram_recvmsg+0xb9/0xe0 [ 108.781067][ C0] ? unix_dgram_sendmsg+0x2090/0x2090 [ 108.786420][ C0] ____sys_recvmsg+0x286/0x530 [ 108.791176][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 108.796202][ C0] ___sys_recvmsg+0x1ec/0x690 [ 108.800865][ C0] ? __sys_recvmsg+0x260/0x260 [ 108.805645][ C0] ? __might_fault+0xb4/0x110 [ 108.810310][ C0] do_recvmmsg+0x36f/0x8f0 [ 108.814718][ C0] ? __sys_recvmmsg+0x270/0x270 [ 108.819566][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 108.824570][ C0] ? fd_install+0x2b1/0x4c0 [ 108.829069][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 108.834077][ C0] ? do_recvmmsg+0x8f0/0x8f0 [ 108.838648][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 108.844611][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 108.849791][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 108.855778][ C0] do_syscall_64+0x3b/0xb0 [ 108.860177][ C0] ? clear_bhb_loop+0x15/0x70 [ 108.864839][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.870718][ C0] RIP: 0033:0x7f50030a2d19 [ 108.875127][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.895060][ C0] RSP: 002b:00007f5000ef2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.903456][ C0] RAX: ffffffffffffffda RBX: 00007f5003293080 RCX: 00007f50030a2d19 [ 108.911407][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000006 [ 108.919358][ C0] RBP: 00007f500311ea20 R08: 0000000000000000 R09: 0000000000000000 [ 108.927309][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 108.935352][ C0] R13: 0000000000000000 R14: 00007f5003293080 R15: 00007fffd69ead78 [ 108.943323][ C0] [ 108.947915][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.974199][ T7] ssu100: probe of 2-1:0.0 failed with error -32 [ 109.173728][ T4960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 109.318671][ T4956] team0 (unregistering): Port device team_slave_0 removed [ 109.341302][ T4956] team0 (unregistering): Port device team_slave_1 removed [ 109.727141][ T1108] usb 2-1: USB disconnect, device number 4 [ 109.973618][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 111.003596][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 112.043636][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 113.083609][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.133594][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 115.163655][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.204455][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.243669][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available