last executing test programs: 9.834860625s ago: executing program 0 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0x8, 0x7, 0x0, 0x3, 0x8d, 0x0, 0x20, 0x89, 0x9, 0x7, 0xa, 0x0, 0xe59, 0xb, 0x4, 0x8, 0x2, 0x1, '\x00', 0x9, 0x401}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.608754462s ago: executing program 0 (id=483): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 8.176121531s ago: executing program 2 (id=488): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) 7.333591749s ago: executing program 2 (id=490): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, &(0x7f00000011c0)='uid_map\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x149a82, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) fchown(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 7.146662138s ago: executing program 0 (id=493): syz_open_procfs(0x0, &(0x7f0000000780)='smaps\x00') fanotify_init(0x8, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000080)=""/153, 0x99) getdents64(r0, &(0x7f00000001c0)=""/147, 0x93) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) 5.579085094s ago: executing program 2 (id=494): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_restrict_self(0xffffffffffffffff, 0x0) 5.578755304s ago: executing program 3 (id=496): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7ff, 0x2, 0x6b, 0x0, 0x74, 0x1}) 5.557142904s ago: executing program 1 (id=497): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaadaaaabbaaaaaaaaaa8a8864ab0122fd27a70021"], 0x0) 5.532453624s ago: executing program 4 (id=498): ioperm(0x3, 0x57, 0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 5.464496614s ago: executing program 0 (id=499): syz_open_procfs(0x0, &(0x7f00000191c0)='smaps\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 5.461705824s ago: executing program 4 (id=500): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x80}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_DST={0x8, 0x1, @private}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4814}, 0x4000000) 5.417653154s ago: executing program 3 (id=501): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0xccbd, 0x10100, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x4c}}, 0xc0d2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0xa19000, 0x1000}, 0x20) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 5.348232694s ago: executing program 1 (id=502): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00', 0x0, &(0x7f0000000540)='&\'.\xad,^%,-!:\',!\\\x00']}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0) 5.228351313s ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmod(r0, 0x100) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r5, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}, 0x48) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0x7, {0x0, 0x0, 0x2}}, 0x18) 5.218145103s ago: executing program 4 (id=504): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount$bind(0x0, 0x0, 0x0, 0x314386f, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) write(r1, &(0x7f0000000040)="3abe9a0019002551075c0165ff0ffc0280200003031e000500e1000c040007", 0x1f) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004900)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000004a40)={&(0x7f0000004940)={0x1d, r5}, 0x10, &(0x7f0000004a00)={&(0x7f0000004980)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "c886ea5475c760d4ddd84f06d092e4643d02ed9c576a7551174cc336524f8253168837b5176f785111c488b4c0ca677adbe721b4ce05646ff17d0babcb6c1583"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), 0xffffffffffffffff) 3.90964617s ago: executing program 0 (id=505): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc724911f4", 0xda}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f", 0xe1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc25806000000", 0x5c}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.90953722s ago: executing program 1 (id=506): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c0}, 0xc094) 3.240060098s ago: executing program 1 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgid(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) wait4(r1, &(0x7f0000000000), 0x2, &(0x7f00000002c0)) listen(0xffffffffffffffff, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x0, 0xe8, 0x328, 0x328, 0x328, 0x4, &(0x7f00000001c0), {[{{@arp={@multicast1, @multicast2, 0xffffff00, 0x0, 0x5, 0x10, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x5b, 0x3, 0x101, 0x2, 0x7, 0x100, 'nr0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @local, @multicast1, 0x1}}}, {{@arp={@local, @local, 0xff, 0xff, 0xb, 0xc, {@empty, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xff, 0x7, 0xb9b, 0xea4c, 0x0, 0x1, 'wg1\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x209}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x300000, 0x3, 0x8, 0x1, 0x0, "dd092838e4e73d456d543731895bb0bc191ec367d4d87e0a7438f957adcdce355a0181bb136e51ede0cc435ffc9ab95083b5d0415c0c9e41768cc089eff11bf2"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x991) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) ioctl$BLKPG(r6, 0x1269, 0x0) 3.218807268s ago: executing program 4 (id=508): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x361ab705b2ec77a9, 0x0) sendfile(r1, r0, 0x0, 0x80009) 2.841616757s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={0x0, 0x18, r5, 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r7, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000180)={r5, r6, 0x1}) 2.808093787s ago: executing program 2 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) 2.806069797s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2001, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2.697580757s ago: executing program 3 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaadaaaabbaaaaaaaaaa8a8864ab0122fd27a70021"], 0x0) 1.324433953s ago: executing program 1 (id=513): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000fcffffff0b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080090001009aa809f40500000005000200040000000800030009ac0f"], 0x44}}, 0x0) 1.030934352s ago: executing program 2 (id=514): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@ll={0x11, 0x8, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000980)="df047001027eee11c596307081873d4c6449a02385f95fd509f1275679fbf8317278a5becf619bf63b2d402ec8c8910977a8bd70f02ee2cef55d9d0c3e6d1f1d69e9cd965452b663da6fd2ccbf35b40f21b90daf834b121618617dc13ce589d71445f075d9828f4373c2f2438843a83376a0aca45720a2204496eb0c5a11903f82", 0x81}, {&(0x7f0000000840)="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", 0x103}, {&(0x7f0000000380)="6d3a7b695a0d41ac06ef6702a7181987ccfda2ce25aeff678bd666e0238ad23e045f6b", 0x23}, {&(0x7f0000000b40)="4b8872821a65e3e6e467dbb1c752df461ae572dba437f96bf9ff008db5b6a8d19330eecd9a7b", 0x26}], 0x4, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xfffffc01}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9f}}, @mark={{0x14}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x853}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)="9ebdfa8357eb876263f217cc36051893981cfef0b71a9441da3cf614a6c1fadc49a0718d3a2f1dd4a8c5a634c7bcec1396def82129cb2aab6b973ddb360aa3fba56fc63682709a93f620db12dad75ea22515d79af3f7110fef67786364e9ef43564b6cbdf9accc26a0d56f898da8651f2c7aa19e6fa0ad320dd74af1d7c6d9d9f48ccd7baf2a9aeb7c2b01af50fd599d2211448f5bd3d0d617718790abd3e9993b97fedccfca7a73623b249bd2124d96352c84d36648bdf1490a2286a46fdc2f49694ee84f4e8a008ba9db810036f9b0f6b487cfcecb", 0xd6}, {&(0x7f0000000e40)="32c4ab610c0ee932bcabaf4009b2f7bdaa8d1cb7cb062e4f09fb34d152f2edd8146150b8516c09cfcc152b1eb878e45f93b3112961142a48151a9f7404308f77a6bc99219a3aaa9ca1ecf1a998a084eda5d54ca8aace01338504f0b8fcb5184ad1e0006b530d6647a8955019fe10044904b3a6e8ad4de3d10ebdb2924af9fdeef262c968a88d114d54a72d054836eaba95bcb21224350f853030df60fd3671757b85442cc50baa1b168c1a18f7f8c72ddb810d", 0xb3}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="a55ed2b1842167617401bd7d632efb3de0d09bbcb0423b0a137f70e9ea14394341871c1b08e98538b8d3ddf568", 0x2d}, {&(0x7f0000001f80)="ada604f6c8534480a1fb45f9a87fad2bc0c923abb104d7800a034ce83e86d954faf08b1a405c05146ed89df29a16bda4ed676a3c024169d5cc913cd4bccde76cccc6c71d32c1dfae6de74a26f0fe4c76be254a12769f8e0e543905dedfec009f2985dd8abaeca6c21c5773f08c1dbd12a99ba391392eb982d9", 0x79}, {&(0x7f0000000500)="40f898dd0b5cefd5ecc1bb61203a892efb91ed986d9b1f1f93cb2ad7b7bd8db4260d403fa87761f049040de7112bb3", 0x2f}, {&(0x7f0000002000)="9f3e40d950c2248ed092382559bdb47205a1992e877ff18940d2018c75590e09c3cf163b9901323176178e8885b27d17ce6224697c1e070d6eb1989ab3d6fea92550fa56a0fb6da3393d9f03e1ffce1dfade74721b0a10695e6b49a7b33acf0f2e2f4dd5ecd9f299df56b65ded1ebad07c539404db5e7a33b0a907753cfb08dd94b9aff7cbd44b6faa3c77522336e3e7ed07670bc892d3e1e89e54e832556ed871386ca29e4d94438bf709da0ca3bb300ca755d27443a26cf3560f975f9000506021ab0cdf06a8cd06efab06c6f8", 0xce}, {&(0x7f0000002100)="8dd06fe644f28d67236a7f7bb9899682ea000a6ddba219a8baa463dd67664994aec706edfca5b91c71e416646c12ebc9441a72208d661deec6af8febcf8c71d8e692f73e84f450ddae6768af07096aa5a17e82ee9f75aaa87606c8ffc3f7f556c223203255e0e65a0ac20d64e24800afc8e6ecfc1cb1eb46c454c9766417d55920f21ccc12e6d94ebdf2229d634930", 0x8f}, {&(0x7f00000021c0)="af164385b29bcdef568d2c95d00eefdeea1d9abd41b87e8324f89da2352f83a828651247acfe3d7db5e742df4b1c81f7db2227c5ad9f7d3722511ede709866a0d9c32cf24ed4b522695bcc70787d264779ecfd5a5c809d16d9a55b1136272062ade274c748f8600f6de690f53babe8865c6333b4a754378670034fb1c727a09d81c815a1ef8ace66b3c053d31218649b33c771abe9f54459138af2caf8fcda", 0x9f}], 0x9, &(0x7f0000000680)}}], 0x3, 0x4008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80840) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = gettid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 968.671252ms ago: executing program 3 (id=515): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 710.175992ms ago: executing program 4 (id=516): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioperm(0x4, 0x2000000009, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) inotify_init1(0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) sched_getscheduler(0x0) 624.272502ms ago: executing program 1 (id=517): syz_open_procfs(0x0, &(0x7f00000191c0)='smaps\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 29.90714ms ago: executing program 2 (id=518): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount$bind(0x0, 0x0, 0x0, 0x314386f, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) write(r1, &(0x7f0000000040)="3abe9a0019002551075c0165ff0ffc0280200003031e000500e1000c040007", 0x1f) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004900)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000004a40)={&(0x7f0000004940)={0x1d, r5}, 0x10, &(0x7f0000004a00)={&(0x7f0000004980)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "c886ea5475c760d4ddd84f06d092e4643d02ed9c576a7551174cc336524f8253168837b5176f785111c488b4c0ca677adbe721b4ce05646ff17d0babcb6c1583"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x2c}}, 0x0) 0s ago: executing program 3 (id=519): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f13", 0xb9}], 0x1}, 0x9fc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 49.123927][ T4156] cgroup: Unknown subsys name 'net' [ 49.264090][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.475238][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.759782][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 51.843703][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 51.861896][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 51.922014][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 51.966294][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.974211][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.982781][ T4178] device bridge_slave_0 entered promiscuous mode [ 51.996389][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.003729][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.011989][ T4178] device bridge_slave_1 entered promiscuous mode [ 52.054947][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 52.064490][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.071711][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.079591][ T4167] device bridge_slave_0 entered promiscuous mode [ 52.105900][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.113514][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.121824][ T4167] device bridge_slave_1 entered promiscuous mode [ 52.140359][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.155175][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.178494][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.185727][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.194072][ T4168] device bridge_slave_0 entered promiscuous mode [ 52.232697][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.242646][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.249809][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.257463][ T4168] device bridge_slave_1 entered promiscuous mode [ 52.285366][ T4178] team0: Port device team_slave_0 added [ 52.293477][ T4178] team0: Port device team_slave_1 added [ 52.300735][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.318483][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.325864][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.333586][ T4179] device bridge_slave_0 entered promiscuous mode [ 52.362201][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.369444][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.377178][ T4179] device bridge_slave_1 entered promiscuous mode [ 52.409075][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.429357][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.436315][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.463361][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.477277][ T4167] team0: Port device team_slave_0 added [ 52.484980][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.507803][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.515031][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.523419][ T4169] device bridge_slave_0 entered promiscuous mode [ 52.531018][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.537980][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.564217][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.583373][ T4167] team0: Port device team_slave_1 added [ 52.591507][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.602929][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.616777][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.624544][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.632755][ T4169] device bridge_slave_1 entered promiscuous mode [ 52.654515][ T4168] team0: Port device team_slave_0 added [ 52.681755][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.696181][ T4168] team0: Port device team_slave_1 added [ 52.710165][ T4179] team0: Port device team_slave_0 added [ 52.717467][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.735783][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.743053][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.769012][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.781108][ T4179] team0: Port device team_slave_1 added [ 52.787296][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.794294][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.820315][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.891680][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.898644][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.924850][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.937625][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.944838][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.970876][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.984169][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.991432][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.017520][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.030616][ T4169] team0: Port device team_slave_0 added [ 53.036814][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.044178][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.070161][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.085011][ T4178] device hsr_slave_0 entered promiscuous mode [ 53.092193][ T4178] device hsr_slave_1 entered promiscuous mode [ 53.111517][ T4169] team0: Port device team_slave_1 added [ 53.149702][ T4167] device hsr_slave_0 entered promiscuous mode [ 53.156252][ T4167] device hsr_slave_1 entered promiscuous mode [ 53.163300][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.171199][ T4167] Cannot create hsr debugfs directory [ 53.209406][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.216369][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.242373][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.274888][ T4168] device hsr_slave_0 entered promiscuous mode [ 53.282291][ T4168] device hsr_slave_1 entered promiscuous mode [ 53.288743][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.296357][ T4168] Cannot create hsr debugfs directory [ 53.302868][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.310132][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.336387][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.350227][ T4179] device hsr_slave_0 entered promiscuous mode [ 53.356783][ T4179] device hsr_slave_1 entered promiscuous mode [ 53.363842][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.371458][ T4179] Cannot create hsr debugfs directory [ 53.440126][ T4171] Bluetooth: hci0: command 0x0409 tx timeout [ 53.447154][ T4171] Bluetooth: hci1: command 0x0409 tx timeout [ 53.464974][ T4171] Bluetooth: hci2: command 0x0409 tx timeout [ 53.519133][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 53.525268][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.527928][ T4169] device hsr_slave_0 entered promiscuous mode [ 53.539265][ T4169] device hsr_slave_1 entered promiscuous mode [ 53.545802][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.553686][ T4169] Cannot create hsr debugfs directory [ 53.741054][ T4178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.756376][ T4178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.775550][ T4178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.784621][ T4178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.828805][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.847382][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.856139][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.875586][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.912537][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.937543][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.948655][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.969882][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.019782][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.032844][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.042918][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.053599][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.081129][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.114534][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.124329][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.145137][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.180482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.190636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.201213][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.208368][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.217155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.264423][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.273844][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.283171][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.290250][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.309604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.323699][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.333417][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.345488][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.356497][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.367481][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.376675][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.390401][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.413902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.424210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.433313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.441609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.460322][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.470326][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.480227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.491078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.512747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.521486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.530644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.539893][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.546950][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.555604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.564950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.573409][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.580491][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.588278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.614446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.623850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.632983][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.640087][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.647941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.656943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.665855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.674549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.683728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.692297][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.699385][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.707081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.724736][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.750915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.760577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.769361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.777950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.788158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.797115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.805824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.815396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.825939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.835085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.843789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.854772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.876900][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.891120][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.899759][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.907416][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.917463][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.927532][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.936445][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.945959][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.954438][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.987227][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.997702][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.009229][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.018171][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.031337][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.041372][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.049905][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.056955][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.064925][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.087801][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.110939][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.125632][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.135982][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.143165][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.156223][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.166036][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.175218][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.184095][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.193032][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.202913][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.217666][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.245652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.262492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.281096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.294296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.316156][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.329704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.337617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.345419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.354417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.363972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.375314][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.394815][ T4179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.406728][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.431808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.443837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.455488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.465322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.474027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.483151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.493081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.511544][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.519556][ T4217] Bluetooth: hci0: command 0x041b tx timeout [ 55.526397][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.534203][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 55.540478][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 55.562230][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.570669][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.585518][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.594514][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.599457][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 55.601634][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.607572][ T4217] Bluetooth: hci4: command 0x041b tx timeout [ 55.627454][ T4178] device veth0_vlan entered promiscuous mode [ 55.652032][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.663179][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.672956][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.688776][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.697962][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.706480][ T3113] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.713566][ T3113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.722570][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.731265][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.740038][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.748598][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.757379][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.766072][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.774895][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.783885][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.792585][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.809800][ T4178] device veth1_vlan entered promiscuous mode [ 55.840731][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.850774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.860152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.867644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.882283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.892245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.900908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.909310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.917494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.925972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.943515][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.955146][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.967915][ T4168] device veth0_vlan entered promiscuous mode [ 55.977573][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.997331][ T4178] device veth0_macvtap entered promiscuous mode [ 56.009251][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.018295][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.029899][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.038239][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.047148][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.055977][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.067735][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.076983][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.086340][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.106585][ T4168] device veth1_vlan entered promiscuous mode [ 56.141869][ T4178] device veth1_macvtap entered promiscuous mode [ 56.173936][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.185259][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.198001][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.206584][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.215995][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.245609][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.256749][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.281401][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.298521][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.307915][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.317247][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.327244][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.336387][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.345121][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.354332][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.362921][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.373647][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.383512][ T4167] device veth0_vlan entered promiscuous mode [ 56.397112][ T4168] device veth0_macvtap entered promiscuous mode [ 56.404728][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.413517][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.422525][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.435490][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.445594][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454400][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.463560][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.491674][ T4168] device veth1_macvtap entered promiscuous mode [ 56.510243][ T4167] device veth1_vlan entered promiscuous mode [ 56.518181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.526780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.536815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.545358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.555575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.563365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.589479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.598360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.612000][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.622134][ T4179] device veth0_vlan entered promiscuous mode [ 56.641648][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.654624][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.666523][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.678618][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.691330][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.702450][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.714692][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.724163][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.733227][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.742219][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.752426][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.760502][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.769624][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.778208][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.787441][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.804595][ T4179] device veth1_vlan entered promiscuous mode [ 56.846157][ T4167] device veth0_macvtap entered promiscuous mode [ 56.855672][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.866327][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.874811][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.886196][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.894966][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.919228][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.927946][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.960825][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.968820][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.982633][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.996857][ T4167] device veth1_macvtap entered promiscuous mode [ 57.017481][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.032008][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.055780][ T4179] device veth0_macvtap entered promiscuous mode [ 57.084622][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.093003][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.102241][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.114372][ T4169] device veth0_vlan entered promiscuous mode [ 57.122719][ T4179] device veth1_macvtap entered promiscuous mode [ 57.141077][ T3113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.150504][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.158344][ T3113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.163370][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.173848][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.181894][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.194858][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.208901][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.219680][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.234305][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.247023][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.262992][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.273477][ T4169] device veth1_vlan entered promiscuous mode [ 57.284710][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.293410][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.302668][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.313161][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.322326][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.340604][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.356339][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.366517][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.378260][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.388147][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.399071][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.410936][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.424905][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.437895][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.449170][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.459746][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.470998][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.488476][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.501957][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.511877][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.527992][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.540678][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.557153][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.567478][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.578592][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.588806][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.600004][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 57.604933][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.616171][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 57.620422][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.634179][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 57.641817][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.650889][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.660184][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.670019][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.680560][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 57.687810][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 57.702759][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.712210][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.716459][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.729012][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.737123][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.748316][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.767309][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.776212][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.786323][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.795425][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.821745][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.831024][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.843377][ T4169] device veth0_macvtap entered promiscuous mode [ 57.870838][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.879115][ T4215] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.896841][ T4169] device veth1_macvtap entered promiscuous mode [ 57.987209][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 57.988332][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.011335][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028787][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.039658][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.050550][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.061310][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.071209][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.083110][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.095974][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.118503][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.134467][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.159106][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.172225][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.182551][ T4215] usb 4-1: Using ep0 maxpacket: 32 [ 58.183074][ T3113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.188173][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.201024][ T3113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.207402][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.225594][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.236265][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.248086][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.258831][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.278230][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.310405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.318876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.330897][ T4215] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 58.344607][ T4215] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.344842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.379378][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.382845][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.387397][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.418434][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.427577][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.436786][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.455090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.521889][ T4215] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 58.531828][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.556023][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.557930][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.575110][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 58.596880][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.607836][ T4215] usb 4-1: Product: syz [ 58.650303][ T4215] usb 4-1: Manufacturer: syz [ 58.655166][ T4215] usb 4-1: SerialNumber: syz [ 58.762852][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.828626][ T4215] appletouch 4-1:1.0: Could not find int-in endpoint [ 58.836910][ T4215] appletouch: probe of 4-1:1.0 failed with error -5 [ 58.839129][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.906107][ T4215] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 59.181497][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.266316][ T4258] usb 4-1: USB disconnect, device number 2 [ 59.271294][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.345887][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.347667][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.366505][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.413103][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.421976][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.519909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.584057][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.620072][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.692365][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 59.774716][ T2855] Bluetooth: hci3: command 0x0419 tx timeout [ 59.775952][ T4217] Bluetooth: hci1: command 0x0419 tx timeout [ 59.780990][ T2855] Bluetooth: hci4: command 0x0419 tx timeout [ 60.097049][ T4217] Bluetooth: hci0: command 0x0419 tx timeout [ 60.163534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.223651][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.240384][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 60.669291][ T1107] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 60.769463][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.018940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.028136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.060066][ T4266] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9'. [ 61.078651][ T1107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 61.219428][ T26] audit: type=1326 audit(1740911268.234:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.302924][ T1107] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 61.312764][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.315646][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 61.327734][ T1107] usb 2-1: Product: syz [ 61.334137][ T1107] usb 2-1: Manufacturer: syz [ 61.338824][ T1107] usb 2-1: SerialNumber: syz [ 61.343953][ T26] audit: type=1326 audit(1740911268.244:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.383679][ T1107] usb 2-1: config 0 descriptor?? [ 61.395796][ T26] audit: type=1326 audit(1740911268.244:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.445238][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.453538][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.465778][ T26] audit: type=1326 audit(1740911268.244:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.572763][ T26] audit: type=1326 audit(1740911268.244:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.617300][ T26] audit: type=1326 audit(1740911268.244:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 61.798260][ T4301] tipc: Started in network mode [ 61.803429][ T4301] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 61.810837][ T4301] tipc: Enabled bearer , priority 0 [ 62.750244][ T26] audit: type=1326 audit(1740911268.244:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 62.835900][ T21] tipc: Node number set to 11578026 [ 62.983851][ T21] usb 2-1: USB disconnect, device number 2 [ 63.079746][ T26] audit: type=1326 audit(1740911268.244:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 63.110316][ T26] audit: type=1326 audit(1740911268.244:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 63.156893][ T26] audit: type=1326 audit(1740911268.244:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4b666d7169 code=0x7ffc0000 [ 66.762703][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 66.771876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.781106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.807282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.902882][ T4336] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 67.462349][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 68.686315][ T4347] device bond0 entered promiscuous mode [ 68.692097][ T4347] device bond_slave_0 entered promiscuous mode [ 68.699897][ T4347] device bond_slave_1 entered promiscuous mode [ 69.400377][ T4217] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.423871][ T4347] syz.1.28 (4347) used greatest stack depth: 19448 bytes left [ 69.600929][ T4358] capability: warning: `syz.1.30' uses 32-bit capabilities (legacy support in use) [ 69.809345][ T4217] usb 5-1: Using ep0 maxpacket: 8 [ 69.969482][ T4217] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 70.006142][ T4217] usb 5-1: config 6 has no interface number 0 [ 70.092147][ T4217] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 70.211630][ T4217] usb 5-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 70.415570][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.852406][ T4322] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 70.863083][ T4322] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.879054][ T4322] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.898221][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.429361][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.433601][ T4217] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 71.481110][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.519796][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527970][ T4217] usb 5-1: Product: syz [ 71.673850][ T4217] usb 5-1: Manufacturer: syz [ 71.753152][ T4217] usb 5-1: SerialNumber: syz [ 72.119676][ T4217] usb 5-1: can't set config #6, error -71 [ 72.288008][ T4217] usb 5-1: USB disconnect, device number 2 [ 72.305865][ T4322] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 72.361741][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.699066][ T4217] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.099085][ T4217] usb 5-1: Using ep0 maxpacket: 8 [ 75.052538][ T4322] usb 4-1: USB disconnect, device number 3 [ 75.174861][ T4217] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.184531][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.195908][ T4217] usb 5-1: config 0 descriptor?? [ 75.699313][ T4217] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 75.888990][ T4217] asix: probe of 5-1:0.0 failed with error -71 [ 75.928809][ T4217] usb 5-1: USB disconnect, device number 3 [ 76.400796][ T7] cfg80211: failed to load regulatory.db [ 77.896198][ T4217] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 78.959568][ T4217] usb 5-1: unable to read config index 0 descriptor/all [ 78.966578][ T4217] usb 5-1: can't read configurations, error -71 [ 80.133434][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.419162][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 80.437170][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 80.770954][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 81.454392][ T4443] device team0 entered promiscuous mode [ 81.464365][ T4443] device team_slave_0 entered promiscuous mode [ 81.484803][ T4443] device team_slave_1 entered promiscuous mode [ 81.540343][ T4443] device batadv_slave_1 entered promiscuous mode [ 81.672803][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.683312][ T4322] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.721356][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 81.736747][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 81.745948][ T4446] netlink: 108 bytes leftover after parsing attributes in process `syz.1.55'. [ 81.858070][ T4456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.889804][ T4322] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.942258][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.051974][ T4322] usb 4-1: Product: syz [ 82.095947][ T4322] usb 4-1: Manufacturer: syz [ 82.163061][ T4322] usb 4-1: SerialNumber: syz [ 82.413167][ T4458] ======================================================= [ 82.413167][ T4458] WARNING: The mand mount option has been deprecated and [ 82.413167][ T4458] and is ignored by this kernel. Remove the mand [ 82.413167][ T4458] option from the mount to silence this warning. [ 82.413167][ T4458] ======================================================= [ 82.450653][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 82.515451][ T4458] tmpfs: Bad value for 'mpol' [ 82.523293][ T4446] netlink: 108 bytes leftover after parsing attributes in process `syz.1.55'. [ 82.533118][ T4446] netlink: 84 bytes leftover after parsing attributes in process `syz.1.55'. [ 82.629172][ T4322] usb 4-1: 0:2 : does not exist [ 82.667473][ T4322] usb 4-1: USB disconnect, device number 4 [ 82.773559][ T4468] netlink: 'syz.1.62': attribute type 39 has an invalid length. [ 82.909218][ T4303] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.946149][ T4472] kvm: pic: non byte write [ 83.133806][ T4322] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.141867][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.750889][ T4303] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.762198][ T4303] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.775831][ T4303] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.787866][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.806647][ T4303] usb 1-1: config 0 descriptor?? [ 83.939021][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 83.947865][ T4477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.66'. [ 83.959169][ T4477] device geneve2 entered promiscuous mode [ 83.969039][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 83.974232][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 84.013384][ T4303] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 84.870920][ T4322] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 84.949057][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.952703][ T4489] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 84.957171][ T4322] usb 4-1: Product: syz [ 84.971244][ T21] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 84.980909][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.989182][ T4322] usb 4-1: Manufacturer: syz [ 84.993909][ T4322] usb 4-1: SerialNumber: syz [ 85.008801][ T4322] r8152-cfgselector 4-1: config 0 descriptor?? [ 85.015307][ T21] usb 5-1: Product: syz [ 85.020503][ T21] usb 5-1: Manufacturer: syz [ 85.025228][ T21] usb 5-1: SerialNumber: syz [ 85.046094][ T21] usb 5-1: config 0 descriptor?? [ 85.135351][ T21] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 85.361014][ T21] gp8psk: usb in 128 operation failed. [ 85.389238][ T21] gp8psk: usb in 137 operation failed. [ 85.401086][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.412243][ T4486] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 85.440983][ T21] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 85.450763][ T21] usb 5-1: media controller created [ 85.464817][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.485794][ T21] gp8psk_fe: Frontend revision 1 attached [ 85.493471][ T21] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 85.507100][ T21] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 85.599260][ T4322] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.605654][ T4322] r8152-cfgselector 4-1: bad CDC descriptors [ 85.612369][ T21] gp8psk: usb in 138 operation failed. [ 85.617933][ T21] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 85.653437][ T21] gp8psk: found Genpix USB device pID = 201 (hex) [ 85.660364][ T4322] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.671055][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.674072][ T4322] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 85.694845][ T21] usb 5-1: USB disconnect, device number 6 [ 85.899756][ T21] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 86.090899][ T4171] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 86.309114][ T4171] usb 2-1: device descriptor read/64, error -71 [ 86.399565][ T21] usb 1-1: USB disconnect, device number 2 [ 86.650099][ T4507] ksmbd: Unknown IPC event: 6, ignore. [ 86.672742][ T4171] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 87.316231][ T4171] usb 2-1: device descriptor read/64, error -71 [ 87.935064][ T4171] usb usb2-port1: attempt power cycle [ 89.781714][ T4538] Zero length message leads to an empty skb [ 90.995676][ T150] block nbd2: Attempted send on invalid socket [ 91.004953][ T150] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.059827][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.731270][ T4530] qnx6: unable to read the first superblock [ 91.765459][ T150] block nbd2: Attempted send on invalid socket [ 91.772094][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.814490][ T4530] qnx6: unable to read the first superblock [ 91.820457][ T4530] qnx6: unable to read the first superblock [ 92.047470][ T4557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.060003][ T4557] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.629191][ T4559] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 92.636786][ T4559] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.85'. [ 93.256879][ T4554] capability: warning: `syz.0.86' uses deprecated v2 capabilities in a way that may be insecure [ 95.537531][ T4595] input: syz1 as /devices/virtual/input/input5 [ 100.303382][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 100.329029][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 100.362040][ T4634] device team0 entered promiscuous mode [ 100.390111][ T4634] device team_slave_0 entered promiscuous mode [ 100.396545][ T4634] device team_slave_1 entered promiscuous mode [ 100.431452][ T4634] device batadv_slave_1 entered promiscuous mode [ 100.447283][ T4634] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 100.470369][ T4634] Cannot create hsr debugfs directory [ 100.491459][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 103.614446][ T4665] ksmbd: Unknown IPC event: 6, ignore. [ 103.735835][ T4680] tipc: Started in network mode [ 103.745824][ T4680] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 103.800989][ T4680] tipc: Enabled bearer , priority 10 [ 105.011289][ T4692] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 105.019318][ T4692] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.721984][ T4322] tipc: Node number set to 15444650 [ 106.809044][ T4598] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.316042][ T4598] usb 2-1: device not accepting address 6, error -71 [ 109.873738][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.859182][ T1107] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 110.879110][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.265378][ T1107] usb 3-1: config 0 descriptor?? [ 111.321002][ T1107] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 112.193071][ T1107] usb 3-1: USB disconnect, device number 2 [ 113.468907][ C0] sched: RT throttling activated [ 115.194032][ T4598] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.569111][ T4598] usb 5-1: Using ep0 maxpacket: 16 [ 115.729934][ T4785] netlink: 'syz.3.147': attribute type 3 has an invalid length. [ 115.789227][ T4785] netlink: 666 bytes leftover after parsing attributes in process `syz.3.147'. [ 115.813277][ T150] block nbd1: Attempted send on invalid socket [ 115.820339][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.832051][ T4770] qnx6: unable to read the first superblock [ 115.838286][ T150] block nbd1: Attempted send on invalid socket [ 115.845517][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.856440][ T4770] qnx6: unable to read the first superblock [ 115.862585][ T4770] qnx6: unable to read the first superblock [ 115.967118][ T4790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 115.983135][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.990665][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.019257][ T4598] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 116.028346][ T4598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.036462][ T4598] usb 5-1: Product: syz [ 116.040690][ T4598] usb 5-1: Manufacturer: syz [ 116.045284][ T4598] usb 5-1: SerialNumber: syz [ 116.074651][ T4598] usb 5-1: config 0 descriptor?? [ 116.131086][ T4598] s2255 5-1:0.0: Could not find bulk-in endpoint [ 116.139094][ T4598] Sensoray 2255 driver load failed: 0xfffffff4 [ 116.145435][ T4598] s2255: probe of 5-1:0.0 failed with error -12 [ 116.672218][ T4217] usb 5-1: USB disconnect, device number 7 [ 116.826219][ T4797] netlink: 348 bytes leftover after parsing attributes in process `syz.3.150'. [ 117.277525][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.539149][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.829137][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 117.949488][ T1107] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 118.240796][ T1107] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.242984][ T4598] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.548989][ T4598] usb 2-1: Using ep0 maxpacket: 32 [ 118.619107][ T1107] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 118.640634][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 118.658991][ T1107] usb 3-1: Product: syz [ 118.668993][ T1107] usb 3-1: Manufacturer: syz [ 118.673719][ T1107] usb 3-1: SerialNumber: syz [ 118.789315][ T4598] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 118.791192][ T1107] appletouch 3-1:1.0: Could not find int-in endpoint [ 118.797511][ T4598] usb 2-1: config 0 has no interface number 0 [ 119.732656][ T4598] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.758011][ T1107] appletouch: probe of 3-1:1.0 failed with error -5 [ 119.819278][ T1107] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 119.910084][ T4598] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 119.936301][ T4598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.977181][ T4598] usb 2-1: Product: syz [ 119.994857][ T4598] usb 2-1: Manufacturer: syz [ 120.018456][ T4598] usb 2-1: SerialNumber: syz [ 120.073075][ T4598] usb 2-1: config 0 descriptor?? [ 120.160536][ T4598] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 120.170736][ T4598] em28xx 2-1:0.132: Video interface 132 found: [ 120.338322][ T4215] usb 3-1: USB disconnect, device number 3 [ 120.384041][ T4824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.570704][ T4598] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 121.466897][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 121.490836][ T4841] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 121.509194][ T4598] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 121.512202][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 121.533751][ T4841] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 121.550597][ T4841] netlink: 84 bytes leftover after parsing attributes in process `syz.3.167'. [ 121.561595][ T4598] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 121.578404][ T4598] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 121.633043][ T4849] netlink: 'syz.2.170': attribute type 9 has an invalid length. [ 121.642338][ T4849] netlink: 'syz.2.170': attribute type 6 has an invalid length. [ 121.699862][ T4598] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.126122][ T4598] em28xx 2-1:0.132: analog set to bulk mode. [ 122.136431][ T21] em28xx 2-1:0.132: Registering V4L2 extension [ 122.222931][ T4598] usb 2-1: USB disconnect, device number 8 [ 122.271112][ T4598] em28xx 2-1:0.132: Disconnecting em28xx [ 122.412071][ T21] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 122.563134][ T4874] kvm: pic: non byte write [ 122.580550][ T21] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 122.587958][ T21] em28xx 2-1:0.132: No AC97 audio processor [ 122.604921][ T21] usb 2-1: Decoder not found [ 122.614098][ T21] em28xx 2-1:0.132: failed to create media graph [ 122.622087][ T21] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 122.690954][ T4877] 9pnet: Insufficient options for proto=fd [ 122.802600][ T21] em28xx 2-1:0.132: Remote control support is not available for this card. [ 123.000920][ T4598] em28xx 2-1:0.132: Closing input extension [ 123.252801][ T4598] em28xx 2-1:0.132: Freeing device [ 123.293443][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 123.293457][ T26] audit: type=1326 audit(1740911330.314:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.520652][ T26] audit: type=1326 audit(1740911330.364:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.579422][ T26] audit: type=1326 audit(1740911330.394:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.605443][ T26] audit: type=1326 audit(1740911330.394:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.643377][ T26] audit: type=1326 audit(1740911330.394:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.685286][ T26] audit: type=1326 audit(1740911330.394:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.716579][ T26] audit: type=1326 audit(1740911330.394:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.749186][ T26] audit: type=1326 audit(1740911330.394:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.777481][ T26] audit: type=1326 audit(1740911330.394:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.801131][ T26] audit: type=1326 audit(1740911330.394:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1d02e169 code=0x7ffc0000 [ 123.899070][ T4598] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 124.290514][ T4598] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 124.299221][ T4598] usb 1-1: config 4 has no interface number 0 [ 124.886303][ T4598] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 124.900204][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.908363][ T4598] usb 1-1: Product: syz [ 124.913131][ T4598] usb 1-1: Manufacturer: syz [ 124.918519][ T4598] usb 1-1: SerialNumber: syz [ 124.973423][ T4598] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 125.046108][ T4920] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 125.519462][ T4598] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 125.742199][ T4598] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 126.197294][ T4598] usb 1-1: USB disconnect, device number 4 [ 126.385146][ T4937] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.861144][ T4950] Cannot find add_set index 0 as target [ 128.129308][ T4976] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.693797][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 129.109016][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.449423][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 129.609843][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.654232][ T23] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=f5.ac [ 129.785241][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.854296][ T23] usb 5-1: config 0 descriptor?? [ 129.931060][ T23] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 129.942913][ T23] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 130.237722][ T1107] usb 5-1: USB disconnect, device number 8 [ 130.382906][ T5017] SET target dimension over the limit! [ 131.284577][ T5032] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.509561][ T4215] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.734527][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750543][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.909172][ T4215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.943386][ T4215] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.952780][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.980731][ T4215] usb 1-1: config 0 descriptor?? [ 133.031630][ T4215] pwc: Askey VC010 type 2 USB webcam detected. [ 133.071131][ T5072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.499064][ T4215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 133.579113][ T4215] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.629064][ T4215] pwc: recv_control_msg error -32 req 02 val 2c00 [ 133.645245][ T5072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.779449][ T4215] pwc: recv_control_msg error -32 req 04 val 1000 [ 133.825641][ T5072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.912248][ T4215] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.218553][ T4215] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.309411][ T4215] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.398037][ T5072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.708393][ T5072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.763409][ T5072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.784860][ T4215] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.805363][ T5072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.819135][ T4215] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.856374][ T5072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.865138][ T4215] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.934065][ T4215] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.007098][ T4158] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.440026][ T4215] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.479549][ T4215] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.499973][ T4215] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.525326][ T4215] pwc: Registered as video103. [ 135.544903][ T4215] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 135.592614][ T4215] usb 1-1: USB disconnect, device number 5 [ 136.009333][ T4158] usb 5-1: config 5 has an invalid interface number: 137 but max is 1 [ 136.040397][ T4158] usb 5-1: config 5 has an invalid interface number: 159 but max is 1 [ 136.085776][ T4158] usb 5-1: config 5 has no interface number 0 [ 136.109005][ T4158] usb 5-1: config 5 has no interface number 1 [ 136.118348][ T4158] usb 5-1: config 5 interface 137 altsetting 9 bulk endpoint 0xA has invalid maxpacket 8 [ 136.147784][ T4158] usb 5-1: config 5 interface 137 has no altsetting 0 [ 136.156011][ T4158] usb 5-1: config 5 interface 159 has no altsetting 0 [ 136.969174][ T4158] usb 5-1: New USB device found, idVendor=12d1, idProduct=1403, bcdDevice= 0.00 [ 136.978379][ T4158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.075015][ T4158] usb 5-1: Product: syz [ 137.080257][ T4158] usb 5-1: Manufacturer: syz [ 137.084874][ T4158] usb 5-1: SerialNumber: syz [ 137.269637][ T5095] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.589071][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 138.639852][ T5130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.655798][ T5129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.957645][ T4158] usb 5-1: can't set config #5, error -71 [ 138.970988][ T4158] usb 5-1: USB disconnect, device number 9 [ 139.834013][ T5155] SET target dimension over the limit! [ 141.100597][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 141.100633][ T26] audit: type=1326 audit(1740911348.124:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7fc00000 [ 141.579780][ T5170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.663525][ T26] audit: type=1326 audit(1740911348.184:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b666d7169 code=0x7fc00000 [ 141.732587][ T5183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.288'. [ 141.767099][ T26] audit: type=1326 audit(1740911348.194:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b666d7169 code=0x7fc00000 [ 142.299087][ T4217] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 142.569678][ T5190] team0: Port device virt_wifi0 added [ 142.719186][ T4217] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 142.729011][ T4217] usb 5-1: config 4 has no interface number 0 [ 144.211662][ T4217] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 144.231313][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.331515][ T5212] ucma_write: process 179 (syz.1.297) changed security contexts after opening file descriptor, this is not allowed. [ 144.709812][ T4217] usb 5-1: Product: syz [ 144.726200][ T4217] usb 5-1: Manufacturer: syz [ 144.980082][ T4217] usb 5-1: SerialNumber: syz [ 145.219077][ T4217] usb 5-1: can't set config #4, error -71 [ 145.237578][ T4217] usb 5-1: USB disconnect, device number 10 [ 146.549144][ T5216] delete_channel: no stack [ 148.718731][ T4158] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.246501][ T5241] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 149.410941][ T5248] 9pnet: Insufficient options for proto=fd [ 150.437506][ T5253] xt_policy: too many policy elements [ 150.483763][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 151.459946][ T5274] program syz.3.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.051528][ T4215] Bluetooth: hci3: command 0x0409 tx timeout [ 152.139009][ T4322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.389262][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 152.509920][ T4322] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 152.530586][ T4322] usb 2-1: config 0 has no interface number 0 [ 152.558980][ T4182] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.564006][ T4322] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.636766][ T5282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.676167][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 152.789237][ T4322] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 152.808574][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.837520][ T4322] usb 2-1: Product: syz [ 152.847980][ T4322] usb 2-1: Manufacturer: syz [ 152.857839][ T4322] usb 2-1: SerialNumber: syz [ 152.907117][ T4322] usb 2-1: config 0 descriptor?? [ 152.939145][ T4182] usb 4-1: Using ep0 maxpacket: 16 [ 153.089392][ T4182] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 153.120261][ T4182] usb 4-1: config 8 has no interface number 0 [ 153.247112][ T4182] usb 4-1: config 8 interface 206 has no altsetting 0 [ 153.521653][ T4182] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 153.558668][ T4182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.730471][ T4182] usb 4-1: Product: syz [ 153.734727][ T4182] usb 4-1: Manufacturer: syz [ 153.749968][ T4182] usb 4-1: SerialNumber: syz [ 153.770035][ T5298] device sit0 entered promiscuous mode [ 153.784672][ T5298] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 153.824261][ T5298] netlink: 1 bytes leftover after parsing attributes in process `syz.0.329'. [ 153.852261][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.881528][ T4322] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 153.892233][ T4322] em28xx 2-1:0.132: Video interface 132 found: [ 153.912111][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.943530][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.952225][ T5300] device bridge_slave_0 left promiscuous mode [ 153.958402][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.973956][ T5300] device bridge_slave_1 left promiscuous mode [ 153.981842][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.998295][ T5300] bond0: (slave bond_slave_0): Releasing backup interface [ 154.016377][ T5300] bond0: (slave bond_slave_1): Releasing backup interface [ 154.036004][ T5300] device team_slave_0 left promiscuous mode [ 154.050078][ T4322] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 154.068697][ T5300] team0: Port device team_slave_0 removed [ 154.075420][ T5300] device team_slave_1 left promiscuous mode [ 154.102125][ T5300] team0: Port device team_slave_1 removed [ 154.108542][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.116146][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.125025][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.130435][ T4182] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 154.133762][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.156327][ T4182] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 154.166659][ T4182] garmin_gps: probe of ttyUSB0 failed with error -22 [ 154.221695][ T4182] usb 4-1: USB disconnect, device number 7 [ 154.235258][ T4182] garmin_gps 4-1:8.206: device disconnected [ 154.278141][ T1188] tipc: Resetting bearer [ 155.099305][ T4322] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 155.111958][ T4322] em28xx 2-1:0.132: board has no eeprom [ 155.381533][ T4322] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 155.390847][ T4322] em28xx 2-1:0.132: analog set to bulk mode. [ 155.399666][ T4215] em28xx 2-1:0.132: Registering V4L2 extension [ 155.408195][ T4322] usb 2-1: USB disconnect, device number 9 [ 155.415211][ T4322] em28xx 2-1:0.132: Disconnecting em28xx [ 155.817009][ T5327] Cannot find add_set index 0 as target [ 156.903680][ T4215] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 156.926831][ T4215] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 157.085460][ T4215] em28xx 2-1:0.132: No AC97 audio processor [ 158.356974][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 159.215781][ T26] audit: type=1326 audit(1740911366.234:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a1a8169 code=0x7fc00000 [ 159.292668][ T5337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.304048][ T4215] usb 2-1: Decoder not found [ 159.308777][ T4215] em28xx 2-1:0.132: failed to create media graph [ 159.316477][ T4215] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 159.336992][ T4214] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.421027][ T4215] em28xx 2-1:0.132: Remote control support is not available for this card. [ 159.449252][ T4322] em28xx 2-1:0.132: Closing input extension [ 159.454631][ T5354] tmpfs: Unknown parameter 'usrquota' [ 159.457342][ T4322] em28xx 2-1:0.132: Freeing device [ 162.635135][ T5384] dccp_invalid_packet: P.Data Offset(255) too large [ 164.944406][ T5380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.278983][ T4214] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 165.309041][ T4182] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.589075][ T4182] usb 2-1: Using ep0 maxpacket: 16 [ 165.809267][ T4182] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 165.829210][ T4214] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 165.834694][ T4182] usb 2-1: config 8 has no interface number 0 [ 165.944369][ T4182] usb 2-1: config 8 interface 206 has no altsetting 0 [ 165.964003][ T5431] device sit0 entered promiscuous mode [ 165.986874][ T5431] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 166.008435][ T5431] netlink: 1 bytes leftover after parsing attributes in process `syz.2.375'. [ 166.132272][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.144115][ T4182] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 166.151023][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.167635][ T4182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.180305][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.194302][ T4182] usb 2-1: Product: syz [ 166.219952][ T4214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.233208][ T4182] usb 2-1: Manufacturer: syz [ 166.235012][ T5431] device bridge_slave_0 left promiscuous mode [ 166.246523][ T4214] usb 5-1: config 0 has no interfaces? [ 166.246615][ T4182] usb 2-1: SerialNumber: syz [ 166.255321][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.293291][ T5431] device bridge_slave_1 left promiscuous mode [ 166.304281][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.382469][ T5431] bond0: (slave bond_slave_0): Releasing backup interface [ 166.429043][ T4214] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 166.429339][ T5431] bond0: (slave bond_slave_1): Releasing backup interface [ 166.454559][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.455276][ T5431] device team_slave_0 left promiscuous mode [ 166.487697][ T4214] usb 5-1: Product: syz [ 166.497166][ T4214] usb 5-1: Manufacturer: syz [ 166.510875][ T4214] usb 5-1: SerialNumber: syz [ 166.529423][ T4214] usb 5-1: config 0 descriptor?? [ 166.538297][ T5431] team0: Port device team_slave_0 removed [ 166.545691][ T5431] device team_slave_1 left promiscuous mode [ 166.581374][ T5431] team0: Port device team_slave_1 removed [ 166.589333][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.597917][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.609677][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.618440][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.631252][ T4182] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 166.643574][ T4182] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 166.658951][ T4182] garmin_gps: probe of ttyUSB0 failed with error -22 [ 166.685764][ T4182] usb 2-1: USB disconnect, device number 10 [ 166.718668][ T4182] garmin_gps 2-1:8.206: device disconnected [ 166.778562][ T4598] usb 5-1: USB disconnect, device number 13 [ 167.935811][ T5463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 168.045578][ T5469] dccp_invalid_packet: P.Data Offset(255) too large [ 168.666790][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 171.009123][ T4598] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.379112][ T4598] usb 1-1: Using ep0 maxpacket: 32 [ 171.539216][ T4598] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 171.557852][ T4598] usb 1-1: config 0 has no interface number 0 [ 171.593741][ T4598] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 171.643441][ T4598] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 171.718569][ T4598] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 171.738458][ T4598] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29797, setting to 1024 [ 171.757008][ T4598] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 171.767890][ T4598] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.879262][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 171.935102][ T5521] device netdevsim0 entered promiscuous mode [ 171.941614][ T4598] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 171.960627][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.000023][ T4598] usb 1-1: Product: syz [ 172.175315][ T4598] usb 1-1: Manufacturer: syz [ 172.181004][ T4598] usb 1-1: SerialNumber: syz [ 172.188122][ T4598] usb 1-1: config 0 descriptor?? [ 172.209283][ T5503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.210397][ T5533] user requested TSC rate below hardware speed [ 172.221994][ T5503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.234452][ T5536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 172.251053][ T4598] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 172.321285][ T4598] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.367180][ T4598] Bluetooth: hci1: Injecting HCI hardware error event [ 172.423019][ T146] Bluetooth: hci1: hardware error 0x00 [ 172.668070][ T4214] usb 1-1: USB disconnect, device number 6 [ 173.155002][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 173.614556][ T5552] process 'syz.2.420' launched './file0' with NULL argv: empty string added [ 173.989451][ T4214] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.239497][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 174.444128][ T5564] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.549140][ T4214] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 174.571336][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.611450][ T4214] usb 1-1: Product: syz [ 174.626392][ T4214] usb 1-1: Manufacturer: syz [ 174.638952][ T4214] usb 1-1: SerialNumber: syz [ 174.760385][ T4214] usb 1-1: config 0 descriptor?? [ 175.456413][ T4217] usb 1-1: USB disconnect, device number 7 [ 176.084015][ T5586] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.109527][ T4182] Bluetooth: hci2: command 0x0406 tx timeout [ 176.120990][ T4182] Bluetooth: hci0: command 0x0406 tx timeout [ 176.147336][ T4182] Bluetooth: hci4: command 0x0406 tx timeout [ 179.068954][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 179.698219][ T5656] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 180.313528][ T5673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.328695][ T5673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.337041][ T5673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.083236][ T5779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.763294][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 193.528716][ T5825] [ 193.531055][ T5825] ====================================================== [ 193.538057][ T5825] WARNING: possible circular locking dependency detected [ 193.545070][ T5825] 5.15.178-syzkaller #0 Not tainted [ 193.550243][ T5825] ------------------------------------------------------ [ 193.557238][ T5825] syz.4.516/5825 is trying to acquire lock: [ 193.563130][ T5825] ffff88807d32cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 193.574213][ T5825] [ 193.574213][ T5825] but task is already holding lock: [ 193.581555][ T5825] ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 193.591190][ T5825] [ 193.591190][ T5825] which lock already depends on the new lock. [ 193.591190][ T5825] [ 193.601587][ T5825] [ 193.601587][ T5825] the existing dependency chain (in reverse order) is: [ 193.610584][ T5825] [ 193.610584][ T5825] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 193.618563][ T5825] lock_acquire+0x1db/0x4f0 [ 193.623582][ T5825] __mutex_lock_common+0x1da/0x25a0 [ 193.629302][ T5825] mutex_lock_nested+0x17/0x20 [ 193.634592][ T5825] rfkill_register+0x30/0x880 [ 193.639774][ T5825] hci_register_dev+0x4dd/0xa50 [ 193.645132][ T5825] vhci_create_device+0x310/0x590 [ 193.650663][ T5825] vhci_write+0x382/0x430 [ 193.655502][ T5825] vfs_write+0xacd/0xe50 [ 193.660246][ T5825] ksys_write+0x1a2/0x2c0 [ 193.665075][ T5825] do_syscall_64+0x3b/0xb0 [ 193.669992][ T5825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.676390][ T5825] [ 193.676390][ T5825] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 193.684186][ T5825] lock_acquire+0x1db/0x4f0 [ 193.689194][ T5825] __mutex_lock_common+0x1da/0x25a0 [ 193.694903][ T5825] mutex_lock_nested+0x17/0x20 [ 193.700166][ T5825] vhci_send_frame+0x8a/0xf0 [ 193.705258][ T5825] hci_send_frame+0x1af/0x2f0 [ 193.710462][ T5825] hci_tx_work+0xb2e/0x1a30 [ 193.715475][ T5825] process_one_work+0x8a1/0x10c0 [ 193.720913][ T5825] worker_thread+0xaca/0x1280 [ 193.726097][ T5825] kthread+0x3f6/0x4f0 [ 193.730665][ T5825] ret_from_fork+0x1f/0x30 [ 193.735589][ T5825] [ 193.735589][ T5825] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 193.744779][ T5825] lock_acquire+0x1db/0x4f0 [ 193.749790][ T5825] __flush_work+0xeb/0x1a0 [ 193.754712][ T5825] hci_dev_do_close+0x20a/0x1070 [ 193.760151][ T5825] hci_error_reset+0x106/0x2d0 [ 193.765418][ T5825] process_one_work+0x8a1/0x10c0 [ 193.770861][ T5825] worker_thread+0xaca/0x1280 [ 193.776038][ T5825] kthread+0x3f6/0x4f0 [ 193.780602][ T5825] ret_from_fork+0x1f/0x30 [ 193.785539][ T5825] [ 193.785539][ T5825] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 193.793168][ T5825] lock_acquire+0x1db/0x4f0 [ 193.798167][ T5825] __mutex_lock_common+0x1da/0x25a0 [ 193.803860][ T5825] mutex_lock_nested+0x17/0x20 [ 193.809118][ T5825] bg_scan_update+0xa1/0x4a0 [ 193.814225][ T5825] process_one_work+0x8a1/0x10c0 [ 193.819694][ T5825] worker_thread+0xaca/0x1280 [ 193.824868][ T5825] kthread+0x3f6/0x4f0 [ 193.829429][ T5825] ret_from_fork+0x1f/0x30 [ 193.834344][ T5825] [ 193.834344][ T5825] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 193.844134][ T5825] validate_chain+0x1649/0x5930 [ 193.849488][ T5825] __lock_acquire+0x1295/0x1ff0 [ 193.854863][ T5825] lock_acquire+0x1db/0x4f0 [ 193.859873][ T5825] __flush_work+0xeb/0x1a0 [ 193.864822][ T5825] __cancel_work_timer+0x519/0x6a0 [ 193.870433][ T5825] hci_request_cancel_all+0xcb/0x300 [ 193.876217][ T5825] hci_dev_do_close+0x51/0x1070 [ 193.881593][ T5825] hci_rfkill_set_block+0x114/0x1a0 [ 193.887286][ T5825] rfkill_set_block+0x1e7/0x430 [ 193.892659][ T5825] rfkill_fop_write+0x5b7/0x790 [ 193.898008][ T5825] vfs_write+0x30c/0xe50 [ 193.902766][ T5825] ksys_write+0x1a2/0x2c0 [ 193.907599][ T5825] do_syscall_64+0x3b/0xb0 [ 193.912509][ T5825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.918902][ T5825] [ 193.918902][ T5825] other info that might help us debug this: [ 193.918902][ T5825] [ 193.929109][ T5825] Chain exists of: [ 193.929109][ T5825] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 193.929109][ T5825] [ 193.944803][ T5825] Possible unsafe locking scenario: [ 193.944803][ T5825] [ 193.952231][ T5825] CPU0 CPU1 [ 193.957571][ T5825] ---- ---- [ 193.962914][ T5825] lock(rfkill_global_mutex); [ 193.967665][ T5825] lock(&data->open_mutex); [ 193.974745][ T5825] lock(rfkill_global_mutex); [ 193.982004][ T5825] lock((work_completion)(&hdev->bg_scan_update)); [ 193.988566][ T5825] [ 193.988566][ T5825] *** DEADLOCK *** [ 193.988566][ T5825] [ 193.996688][ T5825] 1 lock held by syz.4.516/5825: [ 194.001595][ T5825] #0: ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 194.011691][ T5825] [ 194.011691][ T5825] stack backtrace: [ 194.017593][ T5825] CPU: 0 PID: 5825 Comm: syz.4.516 Not tainted 5.15.178-syzkaller #0 [ 194.025632][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.035663][ T5825] Call Trace: [ 194.038926][ T5825] [ 194.041844][ T5825] dump_stack_lvl+0x1e3/0x2d0 [ 194.046500][ T5825] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 194.052112][ T5825] ? print_circular_bug+0x12b/0x1a0 [ 194.057289][ T5825] check_noncircular+0x2f8/0x3b0 [ 194.062203][ T5825] ? add_chain_block+0x850/0x850 [ 194.067119][ T5825] ? lockdep_lock+0x11f/0x2a0 [ 194.071863][ T5825] validate_chain+0x1649/0x5930 [ 194.076697][ T5825] ? mark_lock+0x98/0x340 [ 194.081003][ T5825] ? reacquire_held_locks+0x660/0x660 [ 194.086354][ T5825] ? __lock_acquire+0x1295/0x1ff0 [ 194.091350][ T5825] ? mark_lock+0x98/0x340 [ 194.095657][ T5825] ? look_up_lock_class+0x77/0x120 [ 194.100746][ T5825] ? register_lock_class+0x100/0x9a0 [ 194.106004][ T5825] ? mark_lock+0x98/0x340 [ 194.110307][ T5825] ? is_dynamic_key+0x1f0/0x1f0 [ 194.115131][ T5825] ? __lock_acquire+0x1295/0x1ff0 [ 194.120129][ T5825] ? mark_lock+0x98/0x340 [ 194.124434][ T5825] __lock_acquire+0x1295/0x1ff0 [ 194.129269][ T5825] lock_acquire+0x1db/0x4f0 [ 194.133745][ T5825] ? __flush_work+0xcf/0x1a0 [ 194.138313][ T5825] ? rcu_lock_release+0x5/0x20 [ 194.143055][ T5825] ? read_lock_is_recursive+0x10/0x10 [ 194.148403][ T5825] ? start_flush_work+0x776/0x820 [ 194.153405][ T5825] __flush_work+0xeb/0x1a0 [ 194.157797][ T5825] ? __flush_work+0xcf/0x1a0 [ 194.162363][ T5825] ? flush_work+0x20/0x20 [ 194.166680][ T5825] ? print_irqtrace_events+0x210/0x210 [ 194.172115][ T5825] ? lock_timer_base+0x260/0x260 [ 194.177029][ T5825] ? __cancel_work_timer+0x467/0x6a0 [ 194.182286][ T5825] __cancel_work_timer+0x519/0x6a0 [ 194.187375][ T5825] ? cancel_work_sync+0x20/0x20 [ 194.192198][ T5825] ? lockdep_hardirqs_on+0x94/0x130 [ 194.197372][ T5825] ? __cancel_work+0x2ef/0x380 [ 194.202117][ T5825] ? cancel_work+0x20/0x20 [ 194.206510][ T5825] ? print_irqtrace_events+0x210/0x210 [ 194.211946][ T5825] hci_request_cancel_all+0xcb/0x300 [ 194.217211][ T5825] hci_dev_do_close+0x51/0x1070 [ 194.222038][ T5825] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 194.227905][ T5825] ? _raw_spin_unlock+0x40/0x40 [ 194.232733][ T5825] hci_rfkill_set_block+0x114/0x1a0 [ 194.237913][ T5825] ? rcu_lock_release+0x20/0x20 [ 194.242748][ T5825] rfkill_set_block+0x1e7/0x430 [ 194.247583][ T5825] rfkill_fop_write+0x5b7/0x790 [ 194.252410][ T5825] ? rfkill_fop_read+0x470/0x470 [ 194.257322][ T5825] ? fsnotify_perm+0x64/0x590 [ 194.261973][ T5825] ? security_file_permission+0x75/0xa0 [ 194.267495][ T5825] ? rfkill_fop_read+0x470/0x470 [ 194.272408][ T5825] vfs_write+0x30c/0xe50 [ 194.276634][ T5825] ? file_end_write+0x250/0x250 [ 194.281462][ T5825] ? __fget_files+0x413/0x480 [ 194.286116][ T5825] ? __fdget_pos+0x1e9/0x380 [ 194.290679][ T5825] ? ksys_write+0x77/0x2c0 [ 194.295070][ T5825] ksys_write+0x1a2/0x2c0 [ 194.299373][ T5825] ? print_irqtrace_events+0x210/0x210 [ 194.304808][ T5825] ? __ia32_sys_read+0x80/0x80 [ 194.309550][ T5825] ? syscall_enter_from_user_mode+0x2e/0x240 [ 194.315507][ T5825] ? lockdep_hardirqs_on+0x94/0x130 [ 194.320683][ T5825] ? syscall_enter_from_user_mode+0x2e/0x240 [ 194.326638][ T5825] do_syscall_64+0x3b/0xb0 [ 194.331046][ T5825] ? clear_bhb_loop+0x15/0x70 [ 194.335701][ T5825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.341571][ T5825] RIP: 0033:0x7f4b666d7169 [ 194.345968][ T5825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.365561][ T5825] RSP: 002b:00007f4b64540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.373958][ T5825] RAX: ffffffffffffffda RBX: 00007f4b668effa0 RCX: 00007f4b666d7169 [ 194.381923][ T5825] RDX: 0000000000000008 RSI: 0000400000000300 RDI: 0000000000000009 [ 194.389961][ T5825] RBP: 00007f4b667582a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.397919][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.405867][ T5825] R13: 0000000000000000 R14: 00007f4b668effa0 R15: 00007ffeced5a2e8 [ 194.413824][ T5825] [ 194.420208][ T5827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.421994][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436211][ T1421] ieee802154 phy1 wpan1: encryption failed: -22