last executing test programs: 5.436568537s ago: executing program 0 (id=103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/igmp\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 5.278456656s ago: executing program 0 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0xa8, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e1f}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r3], 0x80}}, 0x0) 5.153294834s ago: executing program 3 (id=106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 4.975813124s ago: executing program 0 (id=107): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) 4.678095141s ago: executing program 1 (id=110): socket(0x2, 0x3, 0x100000ff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x490, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 4.281803684s ago: executing program 1 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, 0x0) r3 = socket(0x11, 0x4, 0x980) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000340)=""/83, 0x53}, {0x0}], 0x3) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.097053195s ago: executing program 4 (id=117): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) write(r1, &(0x7f0000000200)='S', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.954140433s ago: executing program 0 (id=118): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, &(0x7f0000000000)=0x69a32cb2) 3.843832589s ago: executing program 4 (id=119): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xfffffff8, 0x8, 0x9}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 3.745091255s ago: executing program 4 (id=121): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) 3.65594779s ago: executing program 3 (id=122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r6, &(0x7f0000000780)="c1858aec1d0a06756f6608f23687ff5d", 0x10, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.638954981s ago: executing program 2 (id=123): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f00000027c0)=""/4043, 0xfcb}, {&(0x7f0000000700)=""/4122, 0x101a}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f00000002c0)=""/112, 0x70}], 0x6}, 0x10040) 3.341221948s ago: executing program 2 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000080000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074350111e0014000000110001"], 0x5c}, 0x1, 0x0, 0x0, 0x4c011}, 0x20000802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = epoll_create1(0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f00000017c0)=0x9, 0xc06620, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 3.217711945s ago: executing program 3 (id=125): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x8013, 0x1922b}}, 0x20}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 3.162501078s ago: executing program 2 (id=126): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.989163648s ago: executing program 3 (id=127): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2.988964939s ago: executing program 2 (id=128): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) 2.598707111s ago: executing program 0 (id=129): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x40000279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.368390234s ago: executing program 0 (id=130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "1800"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x18, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) 2.125238858s ago: executing program 4 (id=131): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20382) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) 2.08564153s ago: executing program 4 (id=132): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x4e}}, 0xee) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080), 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xee) 2.059901092s ago: executing program 2 (id=133): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$tipc(0x1e, 0x5, 0x0) 1.853056513s ago: executing program 2 (id=134): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) read$FUSE(r3, &(0x7f0000007cc0)={0x2020}, 0x2020) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x4, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "1800"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000027c0)={0x18, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x0, 0x1, 0x3, "70fcc4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "6f14cf"}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000001c00)="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", 0x2000, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 1.410139429s ago: executing program 3 (id=135): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket(0x9, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="704bf5ddec082d38277cd599f3e5441a687947fd7c78c8861e08e5daf58a258cee52c82a6ad6668ef01187bb25c994504e8abaee6931b5bfc7b3e78d7e1323b0a754c830889d8148bfe33c6814205fee39a06aebd717b487c522743bea193b694a", 0x61}, {&(0x7f0000000200)}, {&(0x7f0000000340)="a6c88dd6650a2a8f33642893043f799944e368913e91", 0x16}, {0x0}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x1c) r4 = socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000140)) 781.425575ms ago: executing program 1 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000780)="c1858aec1d0a06756f6608f23687ff5d", 0x10, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @local}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 645.252593ms ago: executing program 4 (id=137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000440)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}]}, &(0x7f0000000100)=0xc) 599.331695ms ago: executing program 3 (id=138): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 482.123632ms ago: executing program 1 (id=139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 69.609696ms ago: executing program 1 (id=140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1) 0s ago: executing program 1 (id=141): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00030400ea"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 33.402737][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.416478][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts. syzkaller login: [ 49.924918][ T4171] cgroup: Unknown subsys name 'net' [ 50.035936][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.547352][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.976146][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.002087][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.087617][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.115180][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.168541][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 53.178163][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.186154][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.194773][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.209912][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.217237][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.225371][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.278863][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.286123][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.294066][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.303876][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.329915][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.337268][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.345780][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.354959][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.423019][ T4184] team0: Port device team_slave_0 added [ 53.429049][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.436328][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.444959][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.452398][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.459465][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.467838][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.480228][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.491266][ T4184] team0: Port device team_slave_1 added [ 53.498405][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.507618][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.515063][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.523642][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.531543][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.538621][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.546569][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.598034][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.605341][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.613867][ T4197] device bridge_slave_0 entered promiscuous mode [ 53.628420][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.647245][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.666859][ T4189] team0: Port device team_slave_0 added [ 53.673200][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.681374][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.689148][ T4197] device bridge_slave_1 entered promiscuous mode [ 53.697081][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.704330][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.730728][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.744490][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.761988][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.772629][ T4189] team0: Port device team_slave_1 added [ 53.788741][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.796050][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.822442][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.835543][ T4191] team0: Port device team_slave_0 added [ 53.867697][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.874835][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.900949][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.917538][ T4191] team0: Port device team_slave_1 added [ 53.926167][ T4185] team0: Port device team_slave_0 added [ 53.934036][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.943806][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.950877][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.977383][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.012862][ T4185] team0: Port device team_slave_1 added [ 54.020081][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.044750][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.052097][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.078267][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.130052][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.137249][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.163915][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.176122][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.183171][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.209194][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.226400][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.233147][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.249790][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.256845][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.263617][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.271854][ T4189] Cannot create hsr debugfs directory [ 54.281514][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.288484][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.314686][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.328113][ T4197] team0: Port device team_slave_0 added [ 54.362233][ T4197] team0: Port device team_slave_1 added [ 54.404370][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.411290][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.418088][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.426188][ T4191] Cannot create hsr debugfs directory [ 54.473433][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.480507][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.506901][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.521452][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.528164][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.534914][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.542928][ T4185] Cannot create hsr debugfs directory [ 54.561149][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.568121][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.594307][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.641268][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 54.704074][ T4197] device hsr_slave_0 entered promiscuous mode [ 54.710943][ T4197] device hsr_slave_1 entered promiscuous mode [ 54.717453][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.720566][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 54.725454][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 54.731731][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 54.737453][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 54.743853][ T4197] Cannot create hsr debugfs directory [ 54.950589][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.963834][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.979254][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.989535][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.039379][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.059103][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.070973][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.080831][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.119364][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.143406][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.159624][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.169961][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.234432][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.256807][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.267163][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.295556][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.354294][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.369398][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.395046][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.408015][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.417688][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.436120][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.446218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.455877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.464654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.473841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.491394][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.505131][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.528430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.537707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.547203][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.554396][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.564255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.573803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.582843][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.590035][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.597759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.608531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.641231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.653507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.662555][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.669657][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.677707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.687858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.697023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.705540][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.712673][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.721655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.730619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.739041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.748189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.757747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.766670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.775627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.810881][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.824302][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.836591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.846113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.856884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.865766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.874264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.883568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.892386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.904274][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.924868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.937026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.970331][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.978968][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.989207][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.998106][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.024751][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.036341][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.073260][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.090000][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.105326][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.117286][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.133852][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.148824][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.184823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.193491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.216969][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.231496][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.241378][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.249913][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.257065][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.266508][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.276529][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.285771][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.292886][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.300991][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.308813][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.317355][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.331089][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.346435][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.364381][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.376530][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.387140][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.395551][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.405218][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.414376][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.424328][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.431697][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.458451][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.466640][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.475644][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.486244][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.493449][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.506758][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.515713][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.524534][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.531767][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.539695][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.548935][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.558354][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.567613][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.576512][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.586343][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.595284][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.602427][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.613209][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.621940][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.629708][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.655282][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.665002][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.674570][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.683201][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.717580][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.725210][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 56.732639][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.747629][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.758202][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.773351][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.786487][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.798767][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.808544][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.810332][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 56.817467][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.828019][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 56.831916][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.837713][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 56.851235][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.851913][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.859997][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 56.873457][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.883743][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.892389][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.907939][ T4184] device veth0_vlan entered promiscuous mode [ 56.927271][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.940421][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.948522][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.962136][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.970063][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.980096][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.995208][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.003735][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.012537][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.021717][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.030116][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.038531][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.049230][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.064803][ T4184] device veth1_vlan entered promiscuous mode [ 57.076239][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.088268][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.097720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.112519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.122203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.152854][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.191569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.202864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.252754][ T4184] device veth0_macvtap entered promiscuous mode [ 57.260684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.277182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.299109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.315507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.329038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.343681][ T4184] device veth1_macvtap entered promiscuous mode [ 57.402802][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.422104][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.440552][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.461133][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.483596][ T4189] device veth0_vlan entered promiscuous mode [ 57.500822][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.512209][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.529310][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.538126][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.547894][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.556849][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.565130][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.578449][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.587271][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.599908][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.608150][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.619671][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629337][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.638280][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.647278][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.685298][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.707849][ T4189] device veth1_vlan entered promiscuous mode [ 57.719293][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.729496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.739214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.747155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.792068][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.831289][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.839436][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.848691][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.863022][ T445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.874856][ T445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.881870][ T4189] device veth0_macvtap entered promiscuous mode [ 57.901780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.909902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.919459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.928984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.941465][ T4189] device veth1_macvtap entered promiscuous mode [ 57.952679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.962455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.971511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.000067][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.014700][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.026205][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.051163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.060001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.069723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.078906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.089276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.097797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.106805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.115394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.125865][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.136609][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.148002][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.159532][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.168972][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.178124][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.187340][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.201270][ T4191] device veth0_vlan entered promiscuous mode [ 58.223070][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.232168][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.260035][ T445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.268229][ T445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.292019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.300068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.308672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.319086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.328633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.338481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.347022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.362121][ T4185] device veth0_vlan entered promiscuous mode [ 58.383585][ T4197] device veth0_vlan entered promiscuous mode [ 58.398803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.415749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.432860][ T4191] device veth1_vlan entered promiscuous mode [ 58.459054][ T4185] device veth1_vlan entered promiscuous mode [ 58.485867][ T4197] device veth1_vlan entered promiscuous mode [ 58.526990][ T445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.553044][ T445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.578529][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.594770][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.610597][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.619035][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.627636][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.658578][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.662758][ T4191] device veth0_macvtap entered promiscuous mode [ 58.671179][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.683745][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.692972][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.708675][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.734508][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.749252][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.757552][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.766980][ T4197] device veth0_macvtap entered promiscuous mode [ 58.788707][ T4185] device veth0_macvtap entered promiscuous mode [ 58.801130][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 58.810342][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.827999][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.838700][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.850971][ T4197] device veth1_macvtap entered promiscuous mode [ 58.859986][ T4191] device veth1_macvtap entered promiscuous mode [ 58.874159][ T4185] device veth1_macvtap entered promiscuous mode [ 58.881624][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 58.887949][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 58.895879][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.904817][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.913082][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 58.919239][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 58.935194][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.953642][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.964781][ T4299] loop0: detected capacity change from 0 to 128 [ 59.009956][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.021014][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.032003][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.043181][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.058759][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.071909][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.083262][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.094135][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.104777][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.114788][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.127291][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.138419][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.156149][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.167794][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.190498][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.220112][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.236268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.247053][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.256979][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.267541][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.279713][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.300944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.310059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.321284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.329863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.339052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.354612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.373469][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.392630][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.405427][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.418721][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.431857][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.444659][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.454067][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.462955][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.472143][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.502584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.512114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.524397][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.540997][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.551777][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.567917][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.578751][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.590335][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.607000][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.650128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.659375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.678599][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.688269][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701087][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.709853][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.721122][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.732293][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.742488][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.753396][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.763774][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.777102][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.787324][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.805101][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.819156][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.831362][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.840101][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.849283][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.859503][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.948994][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.959063][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.019611][ T4312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.136662][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.145448][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.162955][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.162972][ T375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.163021][ T375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.180628][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.209409][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.218138][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.226209][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.259331][ T445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.269898][ T445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.296244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.300814][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.305780][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.322397][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.336415][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.354156][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.365916][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.646906][ T4318] loop2: detected capacity change from 0 to 4096 [ 60.695761][ T4317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.740888][ T1109] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.757430][ T4318] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 60.848384][ T4318] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 60.870028][ T4318] ntfs3: loop2: mft corrupted [ 60.879328][ T4318] ntfs3: loop2: Failed to load $Extend. [ 60.886010][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 60.972875][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 60.980447][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 61.007941][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 61.024908][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 61.122795][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.146512][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.167603][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.189025][ T1109] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.203199][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.207814][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.231392][ T1109] usb 2-1: config 0 descriptor?? [ 61.307285][ T4327] loop3: detected capacity change from 0 to 512 [ 61.338412][ T4327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.408987][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #3: comm syz.3.14: corrupted inode contents [ 61.436449][ T4327] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #3: comm syz.3.14: mark_inode_dirty error [ 61.462975][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #3: comm syz.3.14: corrupted inode contents [ 61.481996][ T4327] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.14: mark_inode_dirty error [ 61.500471][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 61.510670][ T4327] Quota error (device loop3): write_blk: dquota write failed [ 61.518458][ T4327] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 61.544825][ T4327] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.14: Failed to acquire dquot type 0 [ 61.566546][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.14: corrupted inode contents [ 61.586588][ T4327] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #16: comm syz.3.14: mark_inode_dirty error [ 61.604396][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.14: corrupted inode contents [ 61.623085][ T4327] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.14: mark_inode_dirty error [ 61.639263][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.14: corrupted inode contents [ 61.656877][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.668636][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.677972][ T4327] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 61.692374][ T4327] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.14: corrupted inode contents [ 61.705913][ T1109] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 61.711552][ T4327] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.14: mark_inode_dirty error [ 61.719153][ T1109] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 61.739366][ T4327] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 61.739870][ T1109] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 61.772268][ T4327] EXT4-fs (loop3): 1 truncate cleaned up [ 61.779502][ T1109] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.784774][ T4327] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 61.835393][ T4327] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.860443][ T4233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.877051][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.903310][ T4233] usb 1-1: Product: syz [ 61.917597][ T4233] usb 1-1: Manufacturer: syz [ 61.932640][ T4233] usb 1-1: SerialNumber: syz [ 62.127053][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.173306][ T4313] usb 2-1: USB disconnect, device number 2 [ 62.181110][ T26] audit: type=1326 audit(1770364655.127:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6fb95eb9 code=0x7ffc0000 [ 62.289120][ T26] audit: type=1326 audit(1770364655.187:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f6fb95eb9 code=0x7ffc0000 [ 62.310090][ T4337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.351467][ T4233] usb 1-1: 0:2 : does not exist [ 62.360751][ T26] audit: type=1326 audit(1770364655.187:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6fb95eb9 code=0x7ffc0000 [ 62.445463][ T26] audit: type=1326 audit(1770364655.217:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6fb95eb9 code=0x7ffc0000 [ 62.455218][ T4233] usb 1-1: USB disconnect, device number 2 [ 62.656632][ T4345] Zero length message leads to an empty skb [ 62.770875][ T4313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.823446][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.886667][ T4351] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 62.917338][ T4353] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.22'. [ 63.130623][ T4313] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 63.142517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.220349][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.280854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 63.291094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.601327][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.690578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.775048][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 63.793000][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.940337][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 64.064507][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.090734][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.117768][ T4313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 64.190718][ T21] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 64.243228][ T4313] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 64.356943][ T21] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 64.416388][ T4313] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 64.484238][ T21] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 64.600648][ T4313] usb 4-1: Manufacturer: syz [ 64.777191][ T4313] usb 4-1: config 0 descriptor?? [ 64.970776][ T4383] loop2: detected capacity change from 0 to 512 [ 65.030480][ T21] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 65.040569][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.048638][ T21] usb 2-1: Product: syz [ 65.100779][ T4383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.165352][ T21] usb 2-1: Manufacturer: syz [ 65.170054][ T21] usb 2-1: SerialNumber: syz [ 65.284445][ T21] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 65.331944][ T21] imon 2-1:155.0: unable to initialize intf0, err -19 [ 65.352666][ T4313] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 65.388680][ T4313] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 65.410317][ T21] imon:imon_probe: failed to initialize context! [ 65.449332][ T21] imon 2-1:155.0: unable to register, err -19 [ 65.476817][ T4313] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 65.940441][ T4313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.018024][ T1109] kernel write not supported for file /vcsu (pid: 1109 comm: kworker/1:2) [ 66.324159][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.338932][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.357059][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.371792][ T4313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.390773][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.407881][ T4313] usb 1-1: config 0 descriptor?? [ 66.598714][ T4414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.40'. [ 66.736311][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.893084][ T4313] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 66.907559][ T4313] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.924578][ T4313] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 66.949095][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.958910][ T4313] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.025191][ T4414] bond0 (unregistering): Released all slaves [ 67.130049][ T4313] usb 1-1: USB disconnect, device number 3 [ 67.274267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.210487][ T4313] usb 2-1: USB disconnect, device number 3 [ 68.396979][ T1111] usb 4-1: USB disconnect, device number 2 [ 68.594010][ T4430] loop3: detected capacity change from 0 to 512 [ 68.663374][ T4430] EXT4-fs (loop3): Ignoring removed orlov option [ 68.709741][ T4430] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.46: corrupted in-inode xattr [ 68.738811][ T4430] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 68.751282][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 68.817648][ T4437] loop0: detected capacity change from 0 to 512 [ 68.839692][ T4437] EXT4-fs (loop0): Ignoring removed orlov option [ 68.935647][ T4437] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.57: corrupted in-inode xattr [ 68.970296][ T4313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.004032][ T4437] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.57: couldn't read orphan inode 15 (err -117) [ 69.039794][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 69.072280][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.220237][ T4313] usb 3-1: Using ep0 maxpacket: 32 [ 69.341183][ T4313] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.360107][ T4313] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.369279][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.379797][ T4313] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 69.402557][ T4313] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.451752][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.491505][ T4313] usb 3-1: config 0 descriptor?? [ 69.507649][ T4455] veth0_to_bond: mtu less than device minimum [ 69.770326][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.002336][ T4226] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 70.011131][ T4226] Bluetooth: hci3: Injecting HCI hardware error event [ 70.028430][ T4199] Bluetooth: hci3: hardware error 0x00 [ 70.130435][ T1109] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 70.143818][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.158749][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.174956][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.270505][ T1109] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.290262][ T1109] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.314916][ T1109] usb 4-1: Manufacturer: syz [ 70.341329][ T1109] usb 4-1: config 0 descriptor?? [ 70.356273][ T23] usb 3-1: USB disconnect, device number 2 [ 70.760324][ T4313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.821684][ T1109] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 70.870548][ T1109] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 70.902315][ T1109] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 71.020245][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 71.160357][ T4313] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 71.176833][ T4313] usb 2-1: config 0 has no interface number 0 [ 71.283547][ T4494] mmap: syz.0.67 (4494) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.300193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.400550][ T4313] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 71.417867][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.441943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.446974][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.459207][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478077][ T4313] usb 2-1: Product: syz [ 71.493315][ T4313] usb 2-1: Manufacturer: syz [ 71.515613][ T4313] usb 2-1: SerialNumber: syz [ 71.557604][ T4313] usb 2-1: config 0 descriptor?? [ 71.613594][ T4313] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 71.633933][ T4313] dvb-usb: bulk message failed: -22 (2/0) [ 71.681340][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.711098][ T4313] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 71.739225][ T4313] usb 2-1: media controller created [ 71.796191][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.824941][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 71.838136][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 71.885706][ T4313] cxusb: set interface failed [ 71.896573][ T4313] dvb-usb: bulk message failed: -22 (1/0) [ 72.014740][ T4313] DVB: Unable to find symbol lgdt330x_attach() [ 72.027944][ T4313] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 72.180358][ T4313] rc_core: IR keymap rc-dvico-portable not found [ 72.187265][ T4313] Registered IR keymap rc-empty [ 72.199156][ T4313] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 72.210020][ T4313] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 72.234655][ T4313] dvb-usb: schedule remote query interval to 100 msecs. [ 72.242238][ T4313] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 72.260351][ T4313] usb 2-1: USB disconnect, device number 4 [ 72.341277][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.343303][ T4313] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 72.700527][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.751867][ T7] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 72.767322][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.793331][ T7] usb 1-1: config 0 descriptor?? [ 72.952216][ T4226] usb 4-1: USB disconnect, device number 3 [ 73.277073][ T7] itetech 0003:258A:6A88.0005: item fetching failed at offset 2/5 [ 73.294545][ T7] itetech: probe of 0003:258A:6A88.0005 failed with error -22 [ 73.410265][ T4226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.524410][ T4240] usb 1-1: USB disconnect, device number 4 [ 73.680551][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 73.810946][ T4226] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.825013][ T4226] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.858401][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.870263][ T4531] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 73.918097][ T4226] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 73.950482][ T4226] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.997775][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.018576][ T4226] usb 4-1: config 0 descriptor?? [ 74.420341][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.670388][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 74.790637][ T23] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 74.813655][ T23] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 74.836856][ T23] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 74.879445][ T4313] usb 4-1: USB disconnect, device number 4 [ 75.031259][ T23] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 75.060400][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.068441][ T23] usb 1-1: Product: syz [ 75.107819][ T23] usb 1-1: Manufacturer: syz [ 75.125630][ T23] usb 1-1: SerialNumber: syz [ 75.194057][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 75.210097][ T23] imon 1-1:155.0: unable to initialize intf0, err -19 [ 75.237649][ T23] imon:imon_probe: failed to initialize context! [ 75.260862][ T23] imon 1-1:155.0: unable to register, err -19 [ 75.813385][ T4560] loop1: detected capacity change from 0 to 512 [ 75.846303][ T4560] EXT4-fs (loop1): Ignoring removed orlov option [ 75.881230][ T4560] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.92: corrupted in-inode xattr [ 75.910807][ T4560] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.92: couldn't read orphan inode 15 (err -117) [ 75.927428][ T4560] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 76.030550][ T4226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.310262][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 76.460836][ T4226] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.472609][ T4226] usb 4-1: config 0 has no interface number 0 [ 76.484442][ T4226] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.508978][ T4226] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.545719][ T4226] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 76.567446][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.581591][ T13] cfg80211: failed to load regulatory.db [ 76.612095][ T4226] usb 4-1: config 0 descriptor?? [ 76.754060][ T4576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97'. [ 77.330457][ T4226] uclogic 0003:28BD:0071.0006: failed retrieving string descriptor #100: -71 [ 77.351846][ T4226] uclogic 0003:28BD:0071.0006: failed retrieving pen parameters: -71 [ 77.360099][ T23] usb 1-1: USB disconnect, device number 5 [ 77.408603][ T4226] uclogic 0003:28BD:0071.0006: pen probing failed: -71 [ 77.410794][ T4586] loop2: detected capacity change from 0 to 1024 [ 77.444703][ T4226] uclogic 0003:28BD:0071.0006: failed probing parameters: -71 [ 77.476650][ T4226] uclogic: probe of 0003:28BD:0071.0006 failed with error -71 [ 77.527793][ T4226] usb 4-1: USB disconnect, device number 5 [ 77.552709][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,nombcache,auto_da_alloc,errors=remount-ro,. Quota mode: none. [ 77.595042][ T4586] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.708710][ T4586] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.730726][ T4586] EXT4-fs (loop2): Remounting filesystem read-only [ 77.758506][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.882425][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 77.908484][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.013388][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.026892][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.042043][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.048827][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.072204][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.079003][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.096130][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.103227][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.125428][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.136399][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.151442][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.158131][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.178812][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.216343][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 3: comm syz.2.101: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.283625][ T4591] EXT4-fs (loop2): Remounting filesystem read-only [ 78.711872][ T4616] loop1: detected capacity change from 0 to 512 [ 78.776014][ T4616] EXT4-fs (loop1): Ignoring removed orlov option [ 78.840071][ T4616] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.110: corrupted in-inode xattr [ 78.856005][ T4616] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 78.870901][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 79.410261][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.675241][ T4648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.123'. [ 79.749136][ T4648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.123'. [ 79.801635][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.831429][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.879825][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.927945][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.030445][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.050305][ T21] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.058436][ T21] usb 2-1: Manufacturer: syz [ 80.121531][ T21] usb 2-1: config 0 descriptor?? [ 80.387738][ T26] audit: type=1326 audit(1770364673.327:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.424359][ T4671] process 'syz.3.127' launched './file2' with NULL argv: empty string added [ 80.475028][ T26] audit: type=1326 audit(1770364673.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.513989][ T26] audit: type=1326 audit(1770364673.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.549601][ T26] audit: type=1326 audit(1770364673.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.587770][ T26] audit: type=1326 audit(1770364673.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.592504][ T21] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 80.631605][ T26] audit: type=1326 audit(1770364673.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.659207][ T26] audit: type=1326 audit(1770364673.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.693284][ T26] audit: type=1326 audit(1770364673.367:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.734874][ T21] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 80.766853][ T21] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 80.805325][ T26] audit: type=1326 audit(1770364673.627:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 80.833495][ T26] audit: type=1326 audit(1770364673.627:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecaaa3eb9 code=0x7ffc0000 [ 81.200490][ T4226] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.406464][ T4687] loop5: detected capacity change from 0 to 4096 [ 81.434000][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 81.467167][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.478305][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.486239][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 81.499082][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 81.509432][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.520993][ C0] Buffer I/O error on dev loop5, logical block 496, async page read [ 81.622128][ T4226] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 81.634721][ T4226] usb 1-1: config 0 has no interface number 0 [ 81.658500][ T4226] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.750259][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.852329][ T4226] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 81.861746][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.869756][ T4226] usb 1-1: Product: syz [ 81.880504][ T4226] usb 1-1: Manufacturer: syz [ 81.885140][ T4226] usb 1-1: SerialNumber: syz [ 81.907145][ T4226] usb 1-1: config 0 descriptor?? [ 81.940716][ T4679] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.992563][ T1109] usb 3-1: Using ep0 maxpacket: 32 [ 82.136471][ T1109] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 82.149514][ T1109] usb 3-1: config 0 has no interface number 0 [ 82.165123][ T4679] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.183412][ T1109] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.400437][ T1109] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 82.419819][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.440399][ T1109] usb 3-1: Product: syz [ 82.444612][ T1109] usb 3-1: Manufacturer: syz [ 82.449334][ T1109] usb 3-1: SerialNumber: syz [ 82.484033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fc8c400: rx timeout, send abort [ 82.494176][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc8c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.529040][ T1109] usb 3-1: config 0 descriptor?? [ 82.553580][ T4697] device syzkaller0 entered promiscuous mode [ 82.560614][ T4688] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.751736][ T21] usb 2-1: USB disconnect, device number 5 [ 82.803138][ T4687] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.990695][ T4261] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.310396][ T4226] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.338306][ T4226] asix: probe of 1-1:0.188 failed with error -71 [ 83.376586][ T4226] usb 1-1: USB disconnect, device number 6 [ 83.390459][ T4261] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.410313][ T4261] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.475199][ T4687] input: syz0 as /devices/virtual/input/input6 [ 83.475821][ T4261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.511399][ T4261] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 83.544436][ T4261] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 83.649073][ T13] [ 83.651464][ T13] ====================================================== [ 83.658852][ T13] WARNING: possible circular locking dependency detected [ 83.666602][ T13] syzkaller #0 Not tainted [ 83.671026][ T13] ------------------------------------------------------ [ 83.678056][ T13] kworker/0:1/13 is trying to acquire lock: [ 83.683946][ T13] ffff888079b20c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 83.694990][ T13] [ 83.694990][ T13] but task is already holding lock: [ 83.702347][ T13] ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 83.711482][ T13] [ 83.711482][ T13] which lock already depends on the new lock. [ 83.711482][ T13] [ 83.722185][ T13] [ 83.722185][ T13] the existing dependency chain (in reverse order) is: [ 83.731474][ T13] [ 83.731474][ T13] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 83.739480][ T13] __mutex_lock_common+0x1e3/0x2400 [ 83.745221][ T13] mutex_lock_nested+0x17/0x20 [ 83.750499][ T13] rfkill_register+0x33/0x8a0 [ 83.755695][ T13] hci_register_dev+0x452/0x970 [ 83.761063][ T13] vhci_create_device+0x32c/0x5c0 [ 83.766613][ T13] vhci_write+0x391/0x450 [ 83.771464][ T13] vfs_write+0x745/0xd60 [ 83.776225][ T13] ksys_write+0x152/0x260 [ 83.781067][ T13] do_syscall_64+0x4c/0xa0 [ 83.786105][ T13] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.792518][ T13] [ 83.792518][ T13] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 83.800502][ T13] __mutex_lock_common+0x1e3/0x2400 [ 83.806215][ T13] mutex_lock_nested+0x17/0x20 [ 83.811493][ T13] vhci_send_frame+0x88/0x100 [ 83.816694][ T13] hci_send_frame+0x1a9/0x2e0 [ 83.821946][ T13] hci_tx_work+0x9f9/0x1710 [ 83.826974][ T13] process_one_work+0x85f/0x1010 [ 83.832446][ T13] worker_thread+0xaa6/0x1290 [ 83.837649][ T13] kthread+0x436/0x520 [ 83.842233][ T13] ret_from_fork+0x1f/0x30 [ 83.847168][ T13] [ 83.847168][ T13] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 83.856367][ T13] __flush_work+0x116/0x210 [ 83.861470][ T13] hci_dev_do_close+0x1e7/0x1030 [ 83.866925][ T13] hci_error_reset+0x101/0x2c0 [ 83.872210][ T13] process_one_work+0x85f/0x1010 [ 83.877662][ T13] worker_thread+0xaa6/0x1290 [ 83.882851][ T13] kthread+0x436/0x520 [ 83.887429][ T13] ret_from_fork+0x1f/0x30 [ 83.892357][ T13] [ 83.892357][ T13] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 83.900085][ T13] __mutex_lock_common+0x1e3/0x2400 [ 83.905909][ T13] mutex_lock_nested+0x17/0x20 [ 83.911279][ T13] bg_scan_update+0x44/0x3b0 [ 83.916486][ T13] process_one_work+0x85f/0x1010 [ 83.922032][ T13] worker_thread+0xaa6/0x1290 [ 83.931014][ T13] kthread+0x436/0x520 [ 83.935622][ T13] ret_from_fork+0x1f/0x30 [ 83.940558][ T13] [ 83.940558][ T13] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 83.950464][ T13] __lock_acquire+0x2c42/0x7d10 [ 83.955925][ T13] lock_acquire+0x19e/0x400 [ 83.961000][ T13] __flush_work+0x116/0x210 [ 83.966023][ T13] __cancel_work_timer+0x3f4/0x560 [ 83.971645][ T13] hci_request_cancel_all+0xcc/0x300 [ 83.977538][ T13] hci_dev_do_close+0x4e/0x1030 [ 83.982909][ T13] hci_rfkill_set_block+0x10a/0x190 [ 83.988715][ T13] rfkill_set_block+0x1c6/0x420 [ 83.994094][ T13] rfkill_epo+0x75/0x170 [ 83.998962][ T13] rfkill_op_handler+0x76/0x220 [ 84.004332][ T13] process_one_work+0x85f/0x1010 [ 84.009789][ T13] worker_thread+0xaa6/0x1290 [ 84.014985][ T13] kthread+0x436/0x520 [ 84.019569][ T13] ret_from_fork+0x1f/0x30 [ 84.024588][ T13] [ 84.024588][ T13] other info that might help us debug this: [ 84.024588][ T13] [ 84.034917][ T13] Chain exists of: [ 84.034917][ T13] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 84.034917][ T13] [ 84.050907][ T13] Possible unsafe locking scenario: [ 84.050907][ T13] [ 84.058346][ T13] CPU0 CPU1 [ 84.063794][ T13] ---- ---- [ 84.069152][ T13] lock(rfkill_global_mutex); [ 84.074179][ T13] lock(&data->open_mutex); [ 84.081282][ T13] lock(rfkill_global_mutex); [ 84.088680][ T13] lock((work_completion)(&hdev->bg_scan_update)); [ 84.095282][ T13] [ 84.095282][ T13] *** DEADLOCK *** [ 84.095282][ T13] [ 84.103514][ T13] 3 locks held by kworker/0:1/13: [ 84.108622][ T13] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 84.119174][ T13] #1: ffffc90000d27d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 84.129695][ T13] #2: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 84.139173][ T13] [ 84.139173][ T13] stack backtrace: [ 84.145052][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0 [ 84.152424][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.162581][ T13] Workqueue: events rfkill_op_handler [ 84.167953][ T13] Call Trace: [ 84.171232][ T13] [ 84.174161][ T13] dump_stack_lvl+0x188/0x250 [ 84.178841][ T13] ? load_image+0x400/0x400 [ 84.183428][ T13] ? show_regs_print_info+0x20/0x20 [ 84.188758][ T13] ? print_circular_bug+0x12b/0x1a0 [ 84.194021][ T13] check_noncircular+0x296/0x330 [ 84.199132][ T13] ? look_up_lock_class+0x71/0x110 [ 84.204252][ T13] ? add_chain_block+0x940/0x940 [ 84.209272][ T13] ? lockdep_lock+0xf1/0x1f0 [ 84.213863][ T13] ? __lock_acquire+0x12e8/0x7d10 [ 84.219858][ T13] ? mark_lock+0x94/0x320 [ 84.224188][ T13] __lock_acquire+0x2c42/0x7d10 [ 84.229222][ T13] ? verify_lock_unused+0x140/0x140 [ 84.234424][ T13] lock_acquire+0x19e/0x400 [ 84.238926][ T13] ? __flush_work+0xfa/0x210 [ 84.243516][ T13] ? __lock_acquire+0x7d10/0x7d10 [ 84.248550][ T13] ? read_lock_is_recursive+0x10/0x10 [ 84.253943][ T13] ? start_flush_work+0x776/0x820 [ 84.259064][ T13] __flush_work+0x116/0x210 [ 84.263564][ T13] ? __flush_work+0xfa/0x210 [ 84.268154][ T13] ? flush_work+0x20/0x20 [ 84.272477][ T13] ? try_to_grab_pending+0xfa/0x7f0 [ 84.277680][ T13] ? mark_lock+0x94/0x320 [ 84.282005][ T13] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 84.287982][ T13] ? lock_chain_count+0x20/0x20 [ 84.292833][ T13] ? mark_lock+0x94/0x320 [ 84.297157][ T13] ? __cancel_work_timer+0x36a/0x560 [ 84.302443][ T13] __cancel_work_timer+0x3f4/0x560 [ 84.307643][ T13] ? cancel_work_sync+0x20/0x20 [ 84.312488][ T13] ? __cancel_work+0x1f9/0x2e0 [ 84.317334][ T13] ? lockdep_hardirqs_on+0x94/0x140 [ 84.322617][ T13] ? __cancel_work+0x27b/0x2e0 [ 84.327381][ T13] ? cancel_work+0x20/0x20 [ 84.331846][ T13] hci_request_cancel_all+0xcc/0x300 [ 84.337130][ T13] hci_dev_do_close+0x4e/0x1030 [ 84.341978][ T13] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 84.347935][ T13] ? _raw_spin_unlock+0x40/0x40 [ 84.352812][ T13] ? kobject_uevent_env+0x371/0x890 [ 84.358009][ T13] hci_rfkill_set_block+0x10a/0x190 [ 84.363211][ T13] ? rcu_lock_release+0x20/0x20 [ 84.368078][ T13] rfkill_set_block+0x1c6/0x420 [ 84.372929][ T13] rfkill_epo+0x75/0x170 [ 84.377174][ T13] rfkill_op_handler+0x76/0x220 [ 84.382034][ T13] process_one_work+0x85f/0x1010 [ 84.386968][ T13] ? worker_detach_from_pool+0x240/0x240 [ 84.392601][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 84.397886][ T13] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.403000][ T13] ? _raw_spin_lock_irqsave+0x100/0x100 [ 84.408544][ T13] ? wq_worker_running+0x97/0x170 [ 84.413565][ T13] worker_thread+0xaa6/0x1290 [ 84.418248][ T13] kthread+0x436/0x520 [ 84.422325][ T13] ? rcu_lock_release+0x20/0x20 [ 84.427180][ T13] ? kthread_blkcg+0xd0/0xd0 [ 84.431764][ T13] ret_from_fork+0x1f/0x30 [ 84.436184][ T13] [ 84.503777][ T4261] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.520206][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.527738][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.550342][ T4261] usb 4-1: Product: syz [ 84.554559][ T4261] usb 4-1: Manufacturer: syz [ 84.611078][ T4261] cdc_wdm 4-1:1.0: skipping garbage [ 84.616337][ T4261] cdc_wdm 4-1:1.0: skipping garbage [ 84.629681][ T4261] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 84.635968][ T4261] cdc_wdm 4-1:1.0: Unknown control protocol [ 84.817824][ T4261] usb 4-1: USB disconnect, device number 6 [ 84.890419][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.901620][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.913665][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.923749][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.010399][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.021995][ T23] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.030927][ T23] usb 2-1: Manufacturer: syz [ 85.047421][ T23] usb 2-1: config 0 descriptor?? [ 85.538318][ T23] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 85.546290][ T23] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 85.557030][ T23] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 85.751375][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.762854][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.790304][ T1109] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 85.801548][ T1109] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 85.812576][ T1109] asix: probe of 3-1:0.188 failed with error -71 [ 85.822909][ T1109] usb 3-1: USB disconnect, device number 3 [ 86.311681][ T1111] usb 2-1: USB disconnect, device number 6