last executing test programs: 8.734708381s ago: executing program 0 (id=284): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000304"], 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 7.761792875s ago: executing program 4 (id=285): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0x0, 0x97, 0xe, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.611986779s ago: executing program 2 (id=286): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e80"], 0x68}, 0x1, 0x0, 0x0, 0x2400c894}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0xd, 0x800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000400)={0x3, r4, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000001c0)={0x9, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x2a0, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x880, 0x0, 0x8000}, {0x891, 0x0, 0x13}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000380)={r0, &(0x7f0000000040)='\x00', 0x8a00, &(0x7f00000003c0)={@_ha_fsid={[0x2, 0x4]}, {0x6, 0x80, 0x0, 0x4134fa68}}, 0xffff0001, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000340)=0x2}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="140200002000010003000000fbdbdf2502"], 0x214}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$hidraw(0x0, 0x5, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000000, 0x0, 0xfffffffffffffffd}, {0x40000001, 0x0, 0x80}]}) write(r9, &(0x7f0000000300)='1\x00', 0x2) openat$cgroup_pressure(r7, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000240)={{0x2e, @rand_addr=0x64010102, 0x4e20, 0x3, 'none\x00', 0x8, 0x5000000, 0x71}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4e23, 0x4, 0x95, 0x5, 0x2}}, 0x44) sendmsg$nl_route(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000550001002cbd7000fc9bdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010304ffffffffffffffe200000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 7.538027511s ago: executing program 1 (id=287): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) epoll_create(0x567) socketpair(0x1a, 0x6, 0x80000001, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 7.470014262s ago: executing program 0 (id=288): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5.9702896s ago: executing program 0 (id=291): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x74}}, 0x40) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0xffffffff}) close_range(r4, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(0x0, r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r8 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) rt_tgsigqueueinfo(r8, r8, 0x43d, &(0x7f00000001c0)={0x7, 0xc4, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) 5.96941498s ago: executing program 1 (id=292): timer_create(0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x45, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1f3cd27b}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5.918266112s ago: executing program 3 (id=293): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r2, 0x8924, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x756b, 0xb}}]}) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="100e61d84101000001000000dc000000"], 0x10}, 0xc010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x8000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x6, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x8, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xc, 0x9, 0x7f, '\x00', 0x40}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0x5, 0x47, 0xb, '\x00', 0x43}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x68, 0x87, 0x1, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0xc, 0xd1, '\x00', 0x80}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x94, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) 4.093061368s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) futex(&(0x7f0000000240), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) chroot(&(0x7f0000000040)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00') pwrite64(r1, &(0x7f0000000500)="000000a0", 0x4, 0x89) pwrite64(r1, &(0x7f0000000600)='\nBTO', 0x4, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)="3e000000bffcff1e1b", 0x9) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xfffffffe, 0xf2d5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x19c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe800000000069ad6455911abb05000000000000000000aa010590780200000000000000000000000100"/95], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x8, 0x19, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x29, 0x84, 0x14, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) 4.087077188s ago: executing program 4 (id=295): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x820000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0x20000}], 0x1}, 0x85) accept4(r0, 0x0, 0x0, 0x80000) 3.923214582s ago: executing program 0 (id=296): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00030400000004030a5044b27dfb9a20a958c9502b12fcd3066cff2c0df1b8098045849d8d13dfa2ae23465646ce920e2337d9c7f4543cf61461768589d24c111d9a3901cb9f81d1ab3f04851070ac413d7f88bf747944"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400903000000451cd732fe62ebd7b6179fa5e6c9cc57eb47019ac175f73ae25214df4f1fb87ec40f3b65b33f25ef721b67bb86443e647fc8e1e30128062c1a8f6d0bf529ce78942c1779eb19ca9bd66aa314c835a920bac74bd847e728858bf056b8dd6264e9361ed6bc66c4370f06dfd9c9e68257406be84a36b73de2abdbdb91db94147474d55c155d51ef557fa015ed33da7c4ce57995beee8fb9aa90b5a3674300192b452806133613139bc2014b2bc5033a962638bcc3330edb"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0xfffffffffffffde9, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x2020) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000100)={0xac, 0x2, 0x4, "0000087aba10fdffe13c417debfffffd00", 0x49433554}) open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x112) 3.18918029s ago: executing program 4 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 3.050670864s ago: executing program 4 (id=298): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000304"], 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2.764775971s ago: executing program 0 (id=299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101002) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x24000000) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x5, {0x42, 0x200, 0xfffffffd}}, 0x10) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0a4586d, &(0x7f0000000240)={0x0, r4, r0, 0x7, 0xffff, '\x00', {0xfe, 0x4, 0x0, 0x31a, 0x7fffffff, 0xa, 0x1, 0x643, {0x0, 0x6}, {0x1, 0xfffffffe}, {0x3, 0x1}, 0x4, 0x3ff, 0x9, 0x10000, 0x0, 0x7, 0x9, 0xffff, 0xff, 0x0, '\x00', 0x8, 0x73580, 0x0, 0x2c0}}) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr, 0x8}, 0x1c) shutdown(r9, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xc4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r10, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf00, 0x2e}) 2.41373478s ago: executing program 1 (id=300): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$packet(0x11, 0x3, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1004000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='h', 0x1) 2.324589622s ago: executing program 4 (id=301): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.324231542s ago: executing program 2 (id=302): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.323488272s ago: executing program 3 (id=303): semget(0x0, 0x2, 0x311) 2.217778775s ago: executing program 0 (id=304): r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x80140) syz_open_dev$hidraw(0x0, 0x100000000, 0x420082) r1 = syz_open_dev$evdev(&(0x7f0000005bc0), 0x4, 0x100) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 1.97414094s ago: executing program 3 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0xa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) write(0xffffffffffffffff, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x8001, 0x0, r0}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1.299590838s ago: executing program 2 (id=306): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x460}, 0x40004) 1.244853669s ago: executing program 2 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="031b0000330000000700000001000000", 0xfffffffffffffedb) 1.20114264s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 995.424616ms ago: executing program 1 (id=309): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0x9, 0x6, {"5191fb42eeb90d00"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x2000000a}}, 0x10) 976.718876ms ago: executing program 2 (id=310): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000380)=""/155) 185.319666ms ago: executing program 1 (id=311): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000304"], 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 129.032697ms ago: executing program 3 (id=312): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4}, 0x38) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x181, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x3, 0x0, {[0x100000000, 0x2, 0xfffffffffffffffb, 0x10, 0xfea, 0x4, 0x5, 0x3]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 128.760447ms ago: executing program 4 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) 4.79674ms ago: executing program 3 (id=314): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) 0s ago: executing program 1 (id=315): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, r0, 0x0) remap_file_pages(&(0x7f0000b7c000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x169140, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 57.881972][ T4174] cgroup: Unknown subsys name 'net' [ 58.006260][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.202648][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.488417][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.515743][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.530849][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.584088][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.628863][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.668223][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.678447][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.686436][ T4194] device bridge_slave_0 entered promiscuous mode [ 60.715908][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.723015][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.730591][ T4194] device bridge_slave_1 entered promiscuous mode [ 60.743210][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.750258][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.758265][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.769485][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.776583][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.784925][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.833941][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.847722][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.854988][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.863878][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.875055][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.885513][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.902644][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.914765][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.922061][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.929623][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.945792][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.952905][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.960451][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.989925][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.997011][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.004892][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.018230][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.025375][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.033655][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.048236][ T4194] team0: Port device team_slave_0 added [ 61.061667][ T4194] team0: Port device team_slave_1 added [ 61.067561][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.074658][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.082814][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.091509][ T4189] team0: Port device team_slave_0 added [ 61.105634][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.127775][ T4189] team0: Port device team_slave_1 added [ 61.134842][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.145600][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.174953][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.190129][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.205630][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.212741][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.238908][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.255864][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.288319][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.295409][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.321673][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.333279][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.340205][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.366134][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.379376][ T4192] team0: Port device team_slave_0 added [ 61.387332][ T4187] team0: Port device team_slave_0 added [ 61.395186][ T4188] team0: Port device team_slave_0 added [ 61.402745][ T4188] team0: Port device team_slave_1 added [ 61.411407][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.418353][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.444440][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.457208][ T4192] team0: Port device team_slave_1 added [ 61.469980][ T4187] team0: Port device team_slave_1 added [ 61.494148][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.501313][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.527535][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.559975][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.567118][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.593256][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.623064][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.630015][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.656182][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.668693][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.675722][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.702302][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.713816][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.720753][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.746982][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.787368][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.794357][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.820405][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.836655][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.843332][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.853163][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.860447][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.866947][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.874999][ T4188] Cannot create hsr debugfs directory [ 61.882808][ T4194] device hsr_slave_0 entered promiscuous mode [ 61.889926][ T4194] device hsr_slave_1 entered promiscuous mode [ 61.896662][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.904247][ T4194] Cannot create hsr debugfs directory [ 61.994065][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.000650][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.007176][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.014820][ T4187] Cannot create hsr debugfs directory [ 62.035784][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.042473][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.048905][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.057144][ T4192] Cannot create hsr debugfs directory [ 62.262414][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 62.268861][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 62.275449][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 62.281825][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 62.287836][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 62.330347][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.343797][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.352939][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.362504][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.393411][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.413151][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.429715][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.439198][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.489893][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.499353][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.523526][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.539382][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.609196][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.617175][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.626703][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.647269][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.655329][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.669505][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.685196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.695465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.716415][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.729501][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.740602][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.751475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.761682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.782593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.792409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.801266][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.808451][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.817241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.827217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.835679][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.842744][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.850665][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.867126][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.875091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.884267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.904871][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.931981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.940556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.952753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.961797][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.968842][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.976999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.985932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.994798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.003278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.011901][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.018939][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.026679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.035470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.044613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.052826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.092900][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.102123][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.111363][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.119553][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.128171][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.137901][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.156363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.176417][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.187711][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.201903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.217483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.231859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.253350][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.263060][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.270659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.284399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.294378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.306288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.316724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.325398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.346878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.355340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.364041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.373954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.382579][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.389615][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.397439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.405997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.415858][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.422930][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.442256][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.455232][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.468954][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.478303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.487077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.494684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.502212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.510624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.519600][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.526688][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.536121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.544691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.552999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.561973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.570202][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.577253][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.585615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.616061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.625115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.634632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.648764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.657922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.670908][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.680503][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.700218][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.717530][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.760340][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.773439][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.784154][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.792589][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.802059][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.810215][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.819418][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.828131][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.837091][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.845852][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.854657][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.863726][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.873030][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.880940][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.891605][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.899891][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.919442][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.931747][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.946860][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.962782][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.985380][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.001517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.008962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.016954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.025420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.035306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.043136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.052370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.060072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.092247][ T4194] device veth0_vlan entered promiscuous mode [ 64.105370][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.144824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.154266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.169293][ T4194] device veth1_vlan entered promiscuous mode [ 64.189481][ T4189] device veth0_vlan entered promiscuous mode [ 64.207159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.215633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.224247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.234703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.243202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.251060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.259530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.268574][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.275651][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.284451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.304510][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.320153][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.331167][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 64.332076][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.337184][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 64.345058][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 64.359223][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.371756][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 64.381965][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.386260][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 64.396783][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.420248][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.427365][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.435421][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.450060][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.458584][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.478966][ T4194] device veth0_macvtap entered promiscuous mode [ 64.490040][ T4189] device veth1_vlan entered promiscuous mode [ 64.509748][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.524726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.533483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.546998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.556131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.566136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.575307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.585867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.594426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.602005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.609368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.618445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.626885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.635526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.649147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.659975][ T4194] device veth1_macvtap entered promiscuous mode [ 64.703284][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.719240][ T4189] device veth0_macvtap entered promiscuous mode [ 64.730491][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.753149][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.762253][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.770838][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.780104][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.789133][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.813724][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.833270][ T4189] device veth1_macvtap entered promiscuous mode [ 64.850682][ T4188] device veth0_vlan entered promiscuous mode [ 64.860242][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.869844][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.879148][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.888373][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.898439][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.906935][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.915794][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.923632][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.947649][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.959214][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.973068][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.984264][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.997375][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.007810][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.017307][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.028905][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040373][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.050292][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.063053][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.074252][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.091479][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.100185][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.109178][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.118724][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.129369][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.138432][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.147412][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.155977][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.166561][ T4188] device veth1_vlan entered promiscuous mode [ 65.207214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.215911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.223768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.236215][ T4187] device veth0_vlan entered promiscuous mode [ 65.252247][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.266729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.283302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.295066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.304052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.314069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.333560][ T4187] device veth1_vlan entered promiscuous mode [ 65.391650][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.399761][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.410351][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.419204][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.438554][ T4188] device veth0_macvtap entered promiscuous mode [ 65.456079][ T4187] device veth0_macvtap entered promiscuous mode [ 65.481873][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.490216][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.499878][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.508712][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.520054][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.528812][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.557128][ T4188] device veth1_macvtap entered promiscuous mode [ 65.565903][ T4187] device veth1_macvtap entered promiscuous mode [ 65.571577][ T515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.582209][ T515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.596037][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.605227][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.609411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.623337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.631847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.639613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.648149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.657051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.664961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.672900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.695785][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.706329][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.716596][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.727951][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.740020][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.756656][ T4192] device veth0_vlan entered promiscuous mode [ 65.772578][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.783175][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.793248][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.804297][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.814129][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.824783][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.835907][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.843733][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.853541][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.863695][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.872437][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.882717][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.893293][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.903384][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.913926][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.925222][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.944162][ T4192] device veth1_vlan entered promiscuous mode [ 65.954204][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.965361][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977539][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.989056][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.999175][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.009599][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.021865][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.029260][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.037776][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.046933][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.055557][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.066467][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.067427][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.074370][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.094080][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102825][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111541][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133284][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.142462][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.151658][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.160350][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171026][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.209917][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.223589][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.235822][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.246890][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.271802][ T4192] device veth0_macvtap entered promiscuous mode [ 66.288538][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.303172][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.360016][ T4192] device veth1_macvtap entered promiscuous mode [ 66.413107][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 66.444739][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 66.456135][ T515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.457301][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 66.466148][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.481366][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 66.485778][ T515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.498758][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.509014][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 66.523572][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.540131][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.550264][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.561308][ T4277] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 66.574100][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.588074][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.600832][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.618927][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.681941][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.690813][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814c9cb800: rx timeout, send abort [ 66.835000][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.457023][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.466214][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.481647][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.491064][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.567164][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.625758][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.641004][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.661117][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.678217][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.690132][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.701042][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.711941][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.725017][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.753477][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.780828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.783912][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.799984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.809978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.827991][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.838722][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.847735][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.856745][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.890505][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.957957][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.998227][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.034133][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.059806][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.078545][ T2304] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 68.086794][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.092707][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.103949][ T4310] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 68.122109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.129959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.199570][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.220340][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.230676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.492333][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 68.502938][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 68.585056][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 68.701531][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 68.718797][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 69.177372][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.561100][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 69.831211][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.845568][ T4315] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.863288][ T4315] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.058071][ T4354] 9pnet: Insufficient options for proto=fd [ 70.072877][ T25] audit: type=1800 audit(1785975114.890:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name="out_ports" dev="configfs" ino=33243 res=0 errno=0 [ 70.296916][ T25] audit: type=1800 audit(1785975115.120:3): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name="in_ports" dev="configfs" ino=33242 res=0 errno=0 [ 70.780979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.802599][ T4315] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 70.812599][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.820606][ T4315] usb 4-1: Product: syz [ 70.824817][ T4315] usb 4-1: Manufacturer: syz [ 70.831079][ T4315] usb 4-1: SerialNumber: syz [ 71.049113][ T4365] jffs2: notice: (4365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.135880][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.142725][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.152485][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.333564][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.481412][ T4234] usb 1-1: Dual-Role OTG device on HNP port [ 71.501271][ T4234] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 71.564949][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.581180][ T4315] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 71.590545][ T4315] usb 4-1: clock source 0 is not valid, cannot use [ 71.621364][ T4315] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 71.642030][ T4315] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 71.673226][ T4234] gspca_main: spca501-2.14.0 probing 0000:0000 [ 71.731058][ T4235] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.741401][ T4234] gspca_spca501: reg write: error -32 [ 71.811826][ T4234] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 71.875175][ T4234] spca501: probe of 1-1:1.0 failed with error -22 [ 71.951401][ T4315] usb 4-1: USB disconnect, device number 2 [ 72.110718][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 72.217528][ T4387] Zero length message leads to an empty skb [ 72.231285][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 72.329384][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 72.521621][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.640412][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.662097][ T4235] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 72.727307][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.800483][ T4235] usb 5-1: Product: syz [ 72.821442][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 72.837672][ T4235] usb 5-1: Manufacturer: syz [ 72.867310][ T4235] usb 5-1: SerialNumber: syz [ 72.947066][ T4235] usb 5-1: config 0 descriptor?? [ 72.972769][ T4315] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 72.999581][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.065649][ T4235] hub 5-1:0.0: bad descriptor, ignoring hub [ 73.100898][ T4235] hub: probe of 5-1:0.0 failed with error -5 [ 73.111034][ T4315] usb 4-1: config 0 descriptor?? [ 73.248948][ T4235] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 73.314795][ T4315] as10x_usb: device has been detected [ 73.362781][ T4315] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 73.525409][ T4399] 9pnet: Insufficient options for proto=fd [ 73.651072][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 73.852156][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 73.891560][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 74.131856][ T4234] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 74.149232][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.180217][ T4234] usb 3-1: Product: syz [ 74.195948][ T4234] usb 3-1: Manufacturer: syz [ 74.212782][ T4234] usb 3-1: SerialNumber: syz [ 74.303555][ T4383] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.419006][ T4315] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 74.483145][ T4235] input: failed to attach handler mousedev to device input5, error: -5 [ 74.527077][ T4315] as10x_usb: error during firmware upload part1 [ 74.534625][ T4235] usb 5-1: USB disconnect, device number 2 [ 74.541352][ T4315] Registered device nBox DVB-T Dongle [ 74.550666][ T4315] usb 4-1: USB disconnect, device number 3 [ 74.692526][ T4234] usb 3-1: MIDIStreaming interface descriptor not found [ 74.794747][ T4315] Unregistered device nBox DVB-T Dongle [ 74.799387][ T4315] as10x_usb: device has been disconnected [ 74.830722][ T25] audit: type=1800 audit(1785975119.650:4): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.30" name="out_ports" dev="configfs" ino=33395 res=0 errno=0 [ 75.353416][ T25] audit: type=1800 audit(1785975119.680:5): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.30" name="in_ports" dev="configfs" ino=33394 res=0 errno=0 [ 75.466956][ T4234] usb 3-1: USB disconnect, device number 2 [ 76.079018][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 76.398613][ T4448] 9pnet: Insufficient options for proto=fd [ 76.941326][ T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 77.338457][ T25] audit: type=1800 audit(1785975122.160:6): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="out_ports" dev="configfs" ino=33959 res=0 errno=0 [ 77.370780][ T4458] jffs2: notice: (4458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.411526][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 77.432141][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 77.593076][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 77.608789][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 77.625068][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 77.674748][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 77.690111][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.702356][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.714013][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.726466][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.731335][ T21] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 77.776913][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.788224][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.799738][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.821634][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.833217][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.844459][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 77.923279][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 77.936180][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 77.950472][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 78.462416][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.470544][ T21] usb 4-1: Product: syz [ 78.474813][ T21] usb 4-1: Manufacturer: syz [ 78.479416][ T21] usb 4-1: SerialNumber: syz [ 78.487476][ T21] usb 4-1: config 0 descriptor?? [ 78.496467][ T4466] syz.4.47 (4466) used greatest stack depth: 21136 bytes left [ 78.541783][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 78.561331][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 78.953016][ T21] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 79.093051][ T25] audit: type=1800 audit(1785975123.920:7): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="in_ports" dev="configfs" ino=33530 res=0 errno=0 [ 79.374535][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.391606][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 79.408182][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 79.569324][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 79.582561][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 79.928067][ T4502] 9pnet: Insufficient options for proto=fd [ 80.140975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.160976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 80.612587][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 80.690216][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 80.750545][ T4506] jffs2: notice: (4506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.830283][ T4512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.848457][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.862995][ T25] audit: type=1800 audit(1785975125.690:8): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.59" name="out_ports" dev="configfs" ino=34010 res=0 errno=0 [ 80.870832][ T4515] lo speed is unknown, defaulting to 1000 [ 80.883063][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.939587][ T4515] lo speed is unknown, defaulting to 1000 [ 80.961026][ T4515] lo speed is unknown, defaulting to 1000 [ 81.113466][ T25] audit: type=1800 audit(1785975125.940:9): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.64" name="in_ports" dev="configfs" ino=34048 res=0 errno=0 [ 81.383958][ T1325] cfg80211: failed to load regulatory.db [ 83.172528][ T4232] lo speed is unknown, defaulting to 1000 [ 83.170727][ T4515] infiniband syz1: set active [ 83.209939][ T4515] infiniband syz1: added lo [ 83.240973][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.250974][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.260972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.270971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.280972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.290971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.300971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.325899][ T4515] infiniband syz1: Couldn't open port 1 [ 84.168418][ T4515] RDS/IB: syz1: added [ 84.181987][ T4515] smc: adding ib device syz1 with port count 1 [ 84.366482][ T4515] smc: ib device syz1 port 1 has pnetid [ 84.446328][ T1325] lo speed is unknown, defaulting to 1000 [ 84.492575][ T4515] lo speed is unknown, defaulting to 1000 [ 84.634059][ T25] audit: type=1800 audit(1785975129.460:10): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.72" name="out_ports" dev="configfs" ino=33647 res=0 errno=0 [ 84.634200][ T21] usb 4-1: USB disconnect, device number 4 [ 84.818059][ T4560] jffs2: notice: (4560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.975157][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.990713][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 85.006019][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 85.017661][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 85.104110][ T4564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.178374][ T4567] udc-core: couldn't find an available UDC or it's busy [ 85.185483][ T4567] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.225216][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 85.234981][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 85.343552][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 85.362028][ T4515] lo speed is unknown, defaulting to 1000 [ 85.506978][ T4515] lo speed is unknown, defaulting to 1000 [ 85.653986][ T25] audit: type=1800 audit(1785975130.480:11): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.77" name="in_ports" dev="configfs" ino=33698 res=0 errno=0 [ 85.765667][ T4515] lo speed is unknown, defaulting to 1000 [ 85.927629][ T4515] lo speed is unknown, defaulting to 1000 [ 86.580417][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.598078][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 86.606251][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 86.613998][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 86.621850][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 87.061009][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 87.068772][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 87.135441][ T4605] jffs2: notice: (4605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.591767][ T4613] rdma_rxe: ignoring netdev event = 23 for lo [ 87.600093][ T4613] rdma_rxe: lo changed mtu to 68 [ 87.605195][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 87.613301][ T4613] infiniband syz1: set active [ 87.619418][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 87.629239][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 87.638952][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 87.642732][ T4616] sctp_transport_update_pmtu: 48 callbacks suppressed [ 87.642746][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.663675][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.665483][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 87.674283][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.691882][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.692975][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 87.706081][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.719812][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.721545][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 87.730361][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 87.764524][ T4232] lo speed is unknown, defaulting to 1000 [ 87.869893][ T4629] 9pnet: Insufficient options for proto=fd [ 88.035329][ T4630] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 88.681919][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.698820][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.784973][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.842735][ T4637] device gretap1 entered promiscuous mode [ 89.169602][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.180781][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 89.188601][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 89.196262][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 89.204136][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 89.212673][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 89.334267][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 89.403477][ T4659] gadgetfs: bound to dummy_udc driver [ 89.461065][ T4327] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.226279][ T4679] 9pnet: Insufficient options for proto=fd [ 90.581114][ T4327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.591447][ T4327] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 90.607483][ T4327] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 90.616644][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.668038][ T4327] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 90.683629][ T4327] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 91.890648][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.902443][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.910399][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.918277][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 91.926309][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 91.935443][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 92.320027][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 92.539756][ T4646] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 92.581312][ T4646] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 92.630774][ T4646] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 92.672544][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 93.404381][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 93.414038][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 93.422503][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 93.432095][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 93.440585][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 93.449176][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 93.497268][ T4726] sctp_transport_update_pmtu: 49 callbacks suppressed [ 93.497283][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.514205][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.630666][ T25] audit: type=1800 audit(1785975138.450:12): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="in_ports" dev="configfs" ino=34977 res=0 errno=0 [ 93.651143][ T4642] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 93.663042][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.695075][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.708874][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.719318][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.729644][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.740203][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.756847][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.778331][ T4726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.871281][ T1325] usb 5-1: USB disconnect, device number 3 [ 93.883842][ T1325] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 93.934356][ T1325] spcp8x5 5-1:1.0: device disconnected [ 93.946944][ T4746] 9pnet: Insufficient options for proto=fd [ 94.046548][ T4748] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 94.997798][ T25] audit: type=1800 audit(1785975139.820:13): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.127" name="out_ports" dev="configfs" ino=34562 res=0 errno=0 [ 95.100213][ T25] audit: type=1800 audit(1785975139.860:14): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.127" name="in_ports" dev="configfs" ino=34561 res=0 errno=0 [ 95.394209][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.405427][ T4772] infiniband syz1: set active [ 95.410813][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 95.419658][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 95.427510][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 95.435490][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 95.691207][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 95.721292][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 96.094960][ T4235] lo speed is unknown, defaulting to 1000 [ 97.191757][ T4796] netlink: 348 bytes leftover after parsing attributes in process `syz.3.137'. [ 97.201040][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 97.531103][ T1325] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.605473][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.617904][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 97.626125][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 97.634122][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 97.642268][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.650740][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 97.815321][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 97.846344][ T25] audit: type=1800 audit(1785975142.670:15): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.142" name="out_ports" dev="configfs" ino=34658 res=0 errno=0 [ 98.121199][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.153480][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.419012][ T1325] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 98.875749][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.940047][ T1325] usb 3-1: Product: syz [ 98.954136][ T1325] usb 3-1: Manufacturer: syz [ 98.980785][ T1325] usb 3-1: SerialNumber: syz [ 99.015253][ T1325] usb 3-1: config 0 descriptor?? [ 99.017561][ T4839] lo speed is unknown, defaulting to 1000 [ 99.051988][ T1325] hub 3-1:0.0: bad descriptor, ignoring hub [ 99.063524][ T1325] hub: probe of 3-1:0.0 failed with error -5 [ 99.077629][ T1325] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 99.190786][ T4848] 9pnet: Insufficient options for proto=fd [ 99.754403][ T4840] sctp: failed to load transform for md5: -4 [ 99.862367][ T4834] sctp: failed to load transform for md5: -2 [ 99.943097][ T1325] usb 3-1: USB disconnect, device number 3 [ 100.111606][ T25] audit: type=1800 audit(1785975144.940:16): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="out_ports" dev="configfs" ino=35298 res=0 errno=0 [ 100.130845][ T4866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.155'. [ 100.164410][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 100.259675][ T4871] jffs2: notice: (4871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.934812][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 101.651841][ T4901] 9pnet: Insufficient options for proto=fd [ 102.139072][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 102.378399][ T25] audit: type=1800 audit(1785975147.200:17): pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.169" name="out_ports" dev="configfs" ino=35430 res=0 errno=0 [ 102.648450][ T4924] block nbd3: shutting down sockets [ 102.705987][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 103.075938][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 104.951329][ T25] audit: type=1800 audit(1785975149.780:18): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.183" name="out_ports" dev="configfs" ino=35569 res=0 errno=0 [ 105.054732][ T25] audit: type=1800 audit(1785975149.780:19): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.183" name="in_ports" dev="configfs" ino=35568 res=0 errno=0 [ 105.511114][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.771025][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 105.971315][ T4233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.988848][ T4233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.001173][ T4233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.011397][ T4233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.024584][ T4233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.033745][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.282678][ T5003] jffs2: notice: (5003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.301147][ T4233] usb 2-1: GET_CAPABILITIES returned 0 [ 106.306720][ T4233] usbtmc 2-1:16.0: can't read capabilities [ 106.810435][ T5017] Bluetooth: Error in BCSP hdr checksum [ 106.845903][ T4233] usb 2-1: USB disconnect, device number 2 [ 106.896993][ T5019] jffs2: notice: (5019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.922635][ T5019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.985640][ T5019] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.076197][ T25] audit: type=1800 audit(1785975151.900:20): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="out_ports" dev="configfs" ino=35624 res=0 errno=0 [ 107.106505][ T25] audit: type=1800 audit(1785975151.900:21): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="in_ports" dev="configfs" ino=35623 res=0 errno=0 [ 107.456875][ T5043] 9pnet: Insufficient options for proto=fd [ 107.504958][ T5043] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 107.661380][ T4327] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.081648][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.143004][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.390159][ T5057] jffs2: notice: (5057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.411569][ T4327] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 108.413958][ T5053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.208'. [ 108.431540][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.486892][ T4327] usb 5-1: Product: syz [ 108.506698][ T25] audit: type=1800 audit(1785975153.330:22): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="out_ports" dev="configfs" ino=36160 res=0 errno=0 [ 108.532153][ T4327] usb 5-1: Manufacturer: syz [ 108.540541][ T4327] usb 5-1: SerialNumber: syz [ 108.558120][ T4327] usb 5-1: config 0 descriptor?? [ 108.578428][ T25] audit: type=1800 audit(1785975153.350:23): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="in_ports" dev="configfs" ino=36159 res=0 errno=0 [ 108.598596][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.651814][ T4327] hub 5-1:0.0: bad descriptor, ignoring hub [ 108.657864][ T4327] hub: probe of 5-1:0.0 failed with error -5 [ 108.672401][ T5069] Bluetooth: hci0: unsupported parameter 8978 [ 108.678879][ T5069] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 108.693240][ T4327] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 108.908802][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 109.175155][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 109.211418][ T7] usb 5-1: USB disconnect, device number 4 [ 109.963907][ T5089] 9pnet: Insufficient options for proto=fd [ 110.034984][ T5089] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 110.531223][ T5102] program syz.4.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.791983][ T4327] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.887982][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.899727][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.908003][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 110.915842][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 110.923848][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 110.932700][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 110.940886][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 110.959342][ T5108] sctp_transport_update_pmtu: 49 callbacks suppressed [ 110.959393][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.978089][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.991984][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.002311][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.039315][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.051116][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.063052][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.074587][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.169719][ T5103] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 111.214856][ T5102] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 111.329664][ T4235] Bluetooth: hci5: command 0x1001 tx timeout [ 111.401665][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 111.511193][ T4327] usb 2-1: Using ep0 maxpacket: 8 [ 111.560505][ T25] audit: type=1800 audit(1785975156.380:24): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="out_ports" dev="configfs" ino=36233 res=0 errno=0 [ 111.580866][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.642365][ T4327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.740741][ T4327] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.831453][ T4327] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.870552][ T25] audit: type=1800 audit(1785975156.550:25): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="in_ports" dev="configfs" ino=36232 res=0 errno=0 [ 112.044351][ T4235] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 112.079589][ T5095] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 112.162420][ T4327] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 112.191299][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.270098][ T4327] usb 2-1: Product: syz [ 112.303246][ T4327] usb 2-1: Manufacturer: syz [ 112.332966][ T4327] usb 2-1: SerialNumber: syz [ 112.685942][ T5118] 9pnet_virtio: no channels available for device syz [ 113.864026][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 114.277548][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.321754][ T5108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.421218][ T4327] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 114.430097][ T4327] usb 2-1: clock source 0 is not valid, cannot use [ 114.451258][ T5125] jffs2: notice: (5125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.456107][ T4327] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 114.608511][ T4327] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 114.837282][ T4327] usb 2-1: USB disconnect, device number 3 [ 115.065198][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.101308][ T5140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.159876][ T5145] 9pnet: Insufficient options for proto=fd [ 115.195112][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 116.026242][ T5147] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 116.029270][ T5140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.166504][ T25] audit: type=1800 audit(1785975160.990:26): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.234" name="out_ports" dev="configfs" ino=36898 res=0 errno=0 [ 116.232654][ T25] audit: type=1800 audit(1785975160.990:27): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.234" name="in_ports" dev="configfs" ino=36897 res=0 errno=0 [ 116.705640][ T5165] udc-core: couldn't find an available UDC or it's busy [ 116.851608][ T5165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.011339][ T4327] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.491034][ T4327] usb 2-1: device descriptor read/64, error -71 [ 117.707196][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 117.720028][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 117.735693][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 117.743779][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 117.751626][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 117.762067][ T5176] sctp_transport_update_pmtu: 48 callbacks suppressed [ 117.762161][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.779003][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.790617][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.807062][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.818618][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.829943][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.841954][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.853655][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.864842][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.876249][ T5176] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.974757][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 117.982911][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 118.208352][ T5174] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 118.361114][ T4327] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.651356][ T4327] usb 2-1: device descriptor read/64, error -71 [ 118.782150][ T4327] usb usb2-port1: attempt power cycle [ 118.917233][ T4265] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 118.991653][ T5162] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 119.231227][ T4327] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 119.371912][ T4327] usb 2-1: device descriptor read/8, error -71 [ 119.681161][ T4327] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 119.821263][ T4327] usb 2-1: device descriptor read/8, error -71 [ 119.952054][ T4327] usb usb2-port1: unable to enumerate USB device [ 120.624616][ T5201] 9pnet: Insufficient options for proto=fd [ 120.677964][ T5201] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 121.467441][ T25] audit: type=1800 audit(1785975166.290:28): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.242" name="out_ports" dev="configfs" ino=36931 res=0 errno=0 [ 121.509005][ T25] audit: type=1800 audit(1785975166.320:29): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.242" name="in_ports" dev="configfs" ino=36930 res=0 errno=0 [ 121.532946][ T5199] nvmet: adding nsid 1 to subsystem testnqn [ 121.604075][ T5208] i2c i2c-0: new_device: Extra parameters [ 122.357164][ T25] audit: type=1800 audit(1785975167.180:30): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="enable" dev="configfs" ino=36936 res=0 errno=0 [ 122.386909][ T5199] nvmet_rdma: address family 255 not supported [ 122.441395][ T25] audit: type=1800 audit(1785975167.210:31): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="addr_trtype" dev="configfs" ino=36942 res=0 errno=0 [ 122.462454][ T25] audit: type=1800 audit(1785975167.210:32): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="addr_traddr" dev="configfs" ino=36943 res=0 errno=0 [ 122.482870][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.490875][ T25] audit: type=1800 audit(1785975167.210:33): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="addr_trsvcid" dev="configfs" ino=36944 res=0 errno=0 [ 122.530726][ T25] audit: type=1800 audit(1785975167.260:34): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.247" name="out_ports" dev="configfs" ino=36458 res=0 errno=0 [ 122.550970][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.392860][ T25] audit: type=1800 audit(1785975167.280:35): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.247" name="in_ports" dev="configfs" ino=36457 res=0 errno=0 [ 123.826338][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.837923][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 123.845798][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 123.853581][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 123.861522][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 123.869943][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 123.974719][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 124.841112][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.889771][ T5244] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 124.899653][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 124.914240][ T25] audit: type=1800 audit(1785975169.740:36): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="in_ports" dev="configfs" ino=37056 res=0 errno=0 [ 125.121443][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 125.171214][ T5249] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.261258][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.325249][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.387528][ T4232] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 125.429827][ T25] audit: type=1800 audit(1785975170.250:37): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.260" name="out_ports" dev="configfs" ino=37070 res=0 errno=0 [ 125.450135][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.537552][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.589447][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 125.692920][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.030153][ T4232] usb 3-1: config 0 descriptor?? [ 127.768356][ T4232] usb 3-1: USB disconnect, device number 4 [ 127.929149][ T5273] program syz.2.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.967734][ T5273] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 131.327822][ T5265] syz.0.264 (5265) used greatest stack depth: 18032 bytes left [ 131.369963][ T5290] jffs2: notice: (5290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.549127][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 131.549168][ T25] audit: type=1800 audit(1785975176.330:41): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.273" name="out_ports" dev="configfs" ino=37125 res=0 errno=0 [ 131.727162][ T5306] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 132.573729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.580042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.612121][ T5321] 9pnet: Insufficient options for proto=fd [ 133.615960][ T5330] 9pnet: Insufficient options for proto=fd [ 133.656978][ T5330] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 135.002501][ T5351] netlink: 774 bytes leftover after parsing attributes in process `syz.2.286'. [ 135.156392][ T5351] netlink: 52 bytes leftover after parsing attributes in process `syz.2.286'. [ 135.176799][ T5346] netlink: 512 bytes leftover after parsing attributes in process `syz.2.286'. [ 135.341012][ T5286] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.007004][ T25] audit: type=1800 audit(1785975180.830:42): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="out_ports" dev="configfs" ino=37193 res=0 errno=0 [ 136.108466][ T25] audit: type=1800 audit(1785975180.870:43): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="in_ports" dev="configfs" ino=37191 res=0 errno=0 [ 136.201069][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 136.341109][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.076278][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 138.100510][ T5286] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.109784][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.133204][ T5286] usb 5-1: config 0 descriptor?? [ 138.161224][ T5286] usb 5-1: can't set config #0, error -71 [ 138.171256][ T5286] usb 5-1: USB disconnect, device number 5 [ 138.565030][ T5387] overlayfs: failed to resolve './bus': -2 [ 138.639628][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.647655][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.661500][ T5393] udc-core: couldn't find an available UDC or it's busy [ 138.668458][ T5393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.727800][ T5286] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 138.744228][ T5389] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 138.840126][ T5399] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 139.312683][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.351783][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.693225][ T5374] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.703195][ T5374] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.712567][ T5374] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.725368][ T5374] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.884189][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 140.127352][ T5435] sctp_transport_update_pmtu: 47 callbacks suppressed [ 140.127402][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.145761][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.157760][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.172291][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.211204][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.848685][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.893853][ T5439] udc-core: couldn't find an available UDC or it's busy [ 140.903740][ T25] audit: type=1800 audit(1785975185.730:44): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.305" name="out_ports" dev="configfs" ino=37298 res=0 errno=0 [ 140.931523][ T25] audit: type=1800 audit(1785975185.750:45): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.305" name="in_ports" dev="configfs" ino=37297 res=0 errno=0 [ 140.969301][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.984025][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.991113][ T5439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 141.024012][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 141.036266][ T5435] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 141.558347][ T5439] udc-core: couldn't find an available UDC or it's busy [ 141.984720][ T5439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.226422][ T4232] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 142.336466][ T5481] 9pnet: Insufficient options for proto=fd [ 142.411037][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.636420][ T5485] mmap: syz.1.315 (5485) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 142.691069][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 142.812858][ C0] [ 142.815202][ C0] ================================ [ 142.820286][ C0] WARNING: inconsistent lock state [ 142.825386][ C0] syzkaller #0 Not tainted [ 142.829776][ C0] -------------------------------- [ 142.834861][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 142.841699][ C0] syz.3.314/5479 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 142.847917][ C0] ffff8880233e8120 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x83/0x120 [ 142.857114][ C0] {SOFTIRQ-ON-W} state was registered at: [ 142.862804][ C0] lock_acquire+0x19e/0x400 [ 142.867374][ C0] lock_sock_nested+0x44/0x100 [ 142.872202][ C0] x25_bind+0x18a/0x3b0 [ 142.876422][ C0] __sys_bind+0x2e9/0x3e0 [ 142.880815][ C0] __x64_sys_bind+0x76/0x80 [ 142.885380][ C0] do_syscall_64+0x4c/0xa0 [ 142.889861][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.895815][ C0] irq event stamp: 291616 [ 142.900112][ C0] hardirqs last enabled at (291616): [] __local_bh_enable_ip+0x136/0x1c0 [ 142.910151][ C0] hardirqs last disabled at (291615): [] __local_bh_enable_ip+0xd7/0x1c0 [ 142.920103][ C0] softirqs last enabled at (280324): [] __irq_exit_rcu+0x13b/0x230 [ 142.929628][ C0] softirqs last disabled at (291517): [] __irq_exit_rcu+0x13b/0x230 [ 142.939152][ C0] [ 142.939152][ C0] other info that might help us debug this: [ 142.947189][ C0] Possible unsafe locking scenario: [ 142.947189][ C0] [ 142.954624][ C0] CPU0 [ 142.958099][ C0] ---- [ 142.961358][ C0] lock(sk_lock-AF_X25); [ 142.965667][ C0] [ 142.969120][ C0] lock(sk_lock-AF_X25); [ 142.973644][ C0] [ 142.973644][ C0] *** DEADLOCK *** [ 142.973644][ C0] [ 142.981773][ C0] 1 lock held by syz.3.314/5479: [ 142.986684][ C0] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 142.995964][ C0] [ 142.995964][ C0] stack backtrace: [ 143.001828][ C0] CPU: 0 PID: 5479 Comm: syz.3.314 Not tainted syzkaller #0 [ 143.009093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.019146][ C0] Call Trace: [ 143.022406][ C0] [ 143.025229][ C0] dump_stack_lvl+0x188/0x250 [ 143.029904][ C0] ? show_regs_print_info+0x20/0x20 [ 143.035083][ C0] ? unwind_get_return_address+0x49/0x80 [ 143.040699][ C0] valid_state+0x13b/0x1d0 [ 143.045105][ C0] mark_lock_irq+0xa9/0x900 [ 143.049583][ C0] ? stack_trace_save+0xa6/0xf0 [ 143.054420][ C0] ? save_trace+0xad0/0xad0 [ 143.058897][ C0] ? save_trace+0x5a/0xad0 [ 143.063288][ C0] mark_lock+0x208/0x320 [ 143.067508][ C0] __lock_acquire+0xc63/0x7b50 [ 143.072253][ C0] ? verify_lock_unused+0x140/0x140 [ 143.077429][ C0] ? __napi_poll+0xbb/0x430 [ 143.081906][ C0] ? irq_exit_rcu+0x5/0x20 [ 143.086299][ C0] ? finish_lock_switch+0x12f/0x290 [ 143.091490][ C0] ? verify_lock_unused+0x140/0x140 [ 143.096662][ C0] ? verify_lock_unused+0x140/0x140 [ 143.101844][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.107825][ C0] ? lock_chain_count+0x20/0x20 [ 143.112675][ C0] ? __rwlock_init+0x140/0x140 [ 143.117415][ C0] lock_acquire+0x19e/0x400 [ 143.121893][ C0] ? x25_kill_by_neigh+0x83/0x120 [ 143.126894][ C0] ? lock_chain_count+0x20/0x20 [ 143.131720][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 143.136987][ C0] ? read_lock_is_recursive+0x10/0x10 [ 143.142334][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 143.147706][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 143.152877][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 143.158220][ C0] ? _local_bh_enable+0xa0/0xa0 [ 143.163043][ C0] lock_sock_nested+0x44/0x100 [ 143.167780][ C0] ? x25_kill_by_neigh+0x83/0x120 [ 143.172781][ C0] x25_kill_by_neigh+0x83/0x120 [ 143.177614][ C0] x25_lapb_receive_frame+0x19d/0xf20 [ 143.182964][ C0] ? x25_device_event+0x250/0x250 [ 143.187964][ C0] netif_receive_skb_core+0x149/0x210 [ 143.193319][ C0] lapbeth_napi_poll+0x3e/0x80 [ 143.198061][ C0] __napi_poll+0xbb/0x430 [ 143.202367][ C0] net_rx_action+0x522/0xa80 [ 143.206932][ C0] ? net_tx_action+0x880/0x880 [ 143.211668][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.217627][ C0] ? detach_timer+0x2b0/0x2b0 [ 143.222281][ C0] ? lock_chain_count+0x20/0x20 [ 143.227106][ C0] ? handle_softirqs+0x209/0x830 [ 143.232018][ C0] handle_softirqs+0x336/0x830 [ 143.236755][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 143.241578][ C0] ? do_softirq+0x210/0x210 [ 143.246061][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 143.251151][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 143.256322][ C0] __irq_exit_rcu+0x13b/0x230 [ 143.260997][ C0] ? irq_exit_rcu+0x20/0x20 [ 143.265476][ C0] irq_exit_rcu+0x5/0x20 [ 143.269702][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 143.275308][ C0] [ 143.278213][ C0] [ 143.281117][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.287099][ C0] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 143.292880][ C0] Code: 83 c7 18 be ff ff ff ff e8 6e cb 6b 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 98 3a 75 08 e8 43 d7 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 143.312456][ C0] RSP: 0018:ffffc900033ff718 EFLAGS: 00000282 [ 143.318497][ C0] RAX: 0abf16a00f0f3d00 RBX: ffff88801dc11dc0 RCX: 0abf16a00f0f3d00 [ 143.326445][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 143.334391][ C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 143.342334][ C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b903b088 [ 143.350278][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 143.358242][ C0] finish_task_switch+0x12f/0x650 [ 143.363246][ C0] __schedule+0x11cb/0x4350 [ 143.367729][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.373598][ C0] ? rcu_is_watching+0x11/0xa0 [ 143.378347][ C0] ? release_firmware_map_entry+0x190/0x190 [ 143.384214][ C0] schedule+0x11b/0x1e0 [ 143.388342][ C0] schedule_timeout+0x184/0x2d0 [ 143.393167][ C0] ? console_conditional_schedule+0x40/0x40 [ 143.399031][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.404982][ C0] ? update_process_times+0x200/0x200 [ 143.410326][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 143.415494][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 143.420667][ C0] snd_rawmidi_write+0x3ca/0xb90 [ 143.425582][ C0] ? snd_rawmidi_read+0xaa0/0xaa0 [ 143.430593][ C0] ? sched_dynamic_update+0x210/0x210 [ 143.435952][ C0] ? _copy_from_user+0x111/0x170 [ 143.440868][ C0] ? end_current_label_crit_section+0x14b/0x170 [ 143.447081][ C0] ? common_file_perm+0x171/0x1c0 [ 143.452081][ C0] ? fsnotify_perm+0x5d/0x560 [ 143.456732][ C0] ? security_file_permission+0x75/0xa0 [ 143.462251][ C0] do_iter_write+0x3c3/0x7a0 [ 143.466836][ C0] do_writev+0x281/0x480 [ 143.471055][ C0] ? do_readv+0x460/0x460 [ 143.475360][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.481314][ C0] ? lock_chain_count+0x20/0x20 [ 143.486140][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 143.491311][ C0] do_syscall_64+0x4c/0xa0 [ 143.495698][ C0] ? clear_bhb_loop+0x30/0x80 [ 143.500348][ C0] ? clear_bhb_loop+0x30/0x80 [ 143.504995][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.510860][ C0] RIP: 0033:0x7f6bb665c0d9 [ 143.515252][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.534829][ C0] RSP: 002b:00007f6bb48b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 143.543227][ C0] RAX: ffffffffffffffda RBX: 00007f6bb68e3fa0 RCX: 00007f6bb665c0d9 [ 143.551174][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 143.559118][ C0] RBP: 00007f6bb66f3024 R08: 0000000000000000 R09: 0000000000000000 [ 143.567063][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.575005][ C0] R13: 00007f6bb68e4038 R14: 00007f6bb68e3fa0 R15: 00007ffc8a6a8ae8 [ 143.582960][ C0] [ 143.586058][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3261 [ 143.594796][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5479, name: syz.3.314 [ 143.603727][ C0] INFO: lockdep is turned off. [ 143.608468][ C0] Preemption disabled at: [ 143.608474][ C0] [] schedule+0x114/0x1e0 [ 143.618656][ C0] CPU: 0 PID: 5479 Comm: syz.3.314 Not tainted syzkaller #0 [ 143.625914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.635947][ C0] Call Trace: [ 143.639208][ C0] [ 143.642032][ C0] dump_stack_lvl+0x188/0x250 [ 143.646701][ C0] ? show_regs_print_info+0x20/0x20 [ 143.651877][ C0] ? load_image+0x410/0x410 [ 143.656362][ C0] ___might_sleep+0x493/0x610 [ 143.661032][ C0] ? schedule+0x114/0x1e0 [ 143.665338][ C0] ? __might_sleep+0xf0/0xf0 [ 143.669908][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 143.675167][ C0] ? read_lock_is_recursive+0x10/0x10 [ 143.680517][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 143.685862][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 143.691036][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 143.696382][ C0] ? _local_bh_enable+0xa0/0xa0 [ 143.701231][ C0] lock_sock_nested+0x5b/0x100 [ 143.705972][ C0] x25_kill_by_neigh+0x83/0x120 [ 143.710798][ C0] x25_lapb_receive_frame+0x19d/0xf20 [ 143.716146][ C0] ? x25_device_event+0x250/0x250 [ 143.721143][ C0] netif_receive_skb_core+0x149/0x210 [ 143.726493][ C0] lapbeth_napi_poll+0x3e/0x80 [ 143.731232][ C0] __napi_poll+0xbb/0x430 [ 143.735536][ C0] net_rx_action+0x522/0xa80 [ 143.740101][ C0] ? net_tx_action+0x880/0x880 [ 143.744838][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.750793][ C0] ? detach_timer+0x2b0/0x2b0 [ 143.755446][ C0] ? lock_chain_count+0x20/0x20 [ 143.760272][ C0] ? handle_softirqs+0x209/0x830 [ 143.765184][ C0] handle_softirqs+0x336/0x830 [ 143.769925][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 143.774749][ C0] ? do_softirq+0x210/0x210 [ 143.779226][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 143.784313][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 143.789487][ C0] __irq_exit_rcu+0x13b/0x230 [ 143.794139][ C0] ? irq_exit_rcu+0x20/0x20 [ 143.798623][ C0] irq_exit_rcu+0x5/0x20 [ 143.802861][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 143.808481][ C0] [ 143.811387][ C0] [ 143.814296][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.820252][ C0] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 143.826033][ C0] Code: 83 c7 18 be ff ff ff ff e8 6e cb 6b 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 98 3a 75 08 e8 43 d7 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 143.845619][ C0] RSP: 0018:ffffc900033ff718 EFLAGS: 00000282 [ 143.851665][ C0] RAX: 0abf16a00f0f3d00 RBX: ffff88801dc11dc0 RCX: 0abf16a00f0f3d00 [ 143.859619][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 143.867568][ C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 143.875516][ C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b903b088 [ 143.883462][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 143.891416][ C0] finish_task_switch+0x12f/0x650 [ 143.896419][ C0] __schedule+0x11cb/0x4350 [ 143.900902][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.906792][ C0] ? rcu_is_watching+0x11/0xa0 [ 143.911530][ C0] ? release_firmware_map_entry+0x190/0x190 [ 143.917400][ C0] schedule+0x11b/0x1e0 [ 143.921545][ C0] schedule_timeout+0x184/0x2d0 [ 143.926370][ C0] ? console_conditional_schedule+0x40/0x40 [ 143.932237][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.938191][ C0] ? update_process_times+0x200/0x200 [ 143.943536][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 143.948704][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 143.953875][ C0] snd_rawmidi_write+0x3ca/0xb90 [ 143.958815][ C0] ? snd_rawmidi_read+0xaa0/0xaa0 [ 143.963814][ C0] ? sched_dynamic_update+0x210/0x210 [ 143.969160][ C0] ? _copy_from_user+0x111/0x170 [ 143.974070][ C0] ? end_current_label_crit_section+0x14b/0x170 [ 143.980283][ C0] ? common_file_perm+0x171/0x1c0 [ 143.985278][ C0] ? fsnotify_perm+0x5d/0x560 [ 143.989931][ C0] ? security_file_permission+0x75/0xa0 [ 143.995450][ C0] do_iter_write+0x3c3/0x7a0 [ 144.000015][ C0] do_writev+0x281/0x480 [ 144.004233][ C0] ? do_readv+0x460/0x460 [ 144.008540][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.014496][ C0] ? lock_chain_count+0x20/0x20 [ 144.019319][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 144.024493][ C0] do_syscall_64+0x4c/0xa0 [ 144.028884][ C0] ? clear_bhb_loop+0x30/0x80 [ 144.033533][ C0] ? clear_bhb_loop+0x30/0x80 [ 144.038182][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.044047][ C0] RIP: 0033:0x7f6bb665c0d9 [ 144.048438][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.068028][ C0] RSP: 002b:00007f6bb48b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 144.076432][ C0] RAX: ffffffffffffffda RBX: 00007f6bb68e3fa0 RCX: 00007f6bb665c0d9 [ 144.084399][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 144.092344][ C0] RBP: 00007f6bb66f3024 R08: 0000000000000000 R09: 0000000000000000 [ 144.100286][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.108233][ C0] R13: 00007f6bb68e4038 R14: 00007f6bb68e3fa0 R15: 00007ffc8a6a8ae8 [ 144.116189][ C0] [ 144.129852][ T4231] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.186018][ T4231] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.200624][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.210843][ T4231] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.233879][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.256491][ T4231] usb 5-1: config 0 descriptor?? [ 144.311142][ T4232] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 144.320224][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 144.328408][ T4232] usb 3-1: Product: syz [ 144.332611][ T4232] usb 3-1: Manufacturer: syz [ 144.337200][ T4232] usb 3-1: SerialNumber: syz [ 144.342960][ T4232] usb 3-1: config 0 descriptor?? [ 144.435717][ T4232] usb 3-1: USB disconnect, device number 5 [ 144.742986][ T4231] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 144.750053][ T4231] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 144.757350][ T4231] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 144.764432][ T4231] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 144.771518][ T4231] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 144.779191][ T4231] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 144.945692][ T4231] usb 5-1: USB disconnect, device number 6