last executing test programs: 4m25.251214018s ago: executing program 4 (id=696): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 4m18.784555954s ago: executing program 4 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m17.010999189s ago: executing program 4 (id=722): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x1000) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, &(0x7f0000005280)) 4m15.523010115s ago: executing program 4 (id=726): setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) close(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 4m14.685760097s ago: executing program 4 (id=729): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe2(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000000100)=""/44, 0xbb) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40, 0x112) socket$nl_route(0x10, 0x3, 0x0) 4m10.253681143s ago: executing program 4 (id=734): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x0, 0x376}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 3m54.483699084s ago: executing program 32 (id=734): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x0, 0x376}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 13.662709412s ago: executing program 2 (id=1279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@dev, @empty, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1ff, 0x7, 0x400, 0xdf8, 0x10, r4}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a", 0x11, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r6, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 12.711509386s ago: executing program 2 (id=1282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x100, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x100}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 12.517265935s ago: executing program 3 (id=1283): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 12.390351357s ago: executing program 2 (id=1284): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@any, 0x4}, 0x0, 0x2}) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000080)="01", 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 11.931211543s ago: executing program 1 (id=1285): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 11.614196984s ago: executing program 2 (id=1286): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x103001) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x10000, 0x22, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 9.72172895s ago: executing program 1 (id=1289): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r4 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) r5 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x3f, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x5, "9b2f69"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x2, 0x40}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200), 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 9.469280826s ago: executing program 3 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x2c) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000001c0)=[{0x2, 0x3, {0x0, 0x1, 0x3}, {0x1, 0x1, 0x1}, 0xfd, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 9.182493114s ago: executing program 5 (id=1292): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(0xffffffffffffffff, 0x0, 0x8) 8.326451288s ago: executing program 3 (id=1293): syz_80211_inject_frame(0x0, 0x0, 0x5a) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044840) 8.021922428s ago: executing program 2 (id=1294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x100, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x100}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 7.874308043s ago: executing program 2 (id=1295): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x890c, &(0x7f0000000000)) capset(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) 7.814354009s ago: executing program 1 (id=1296): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@any, 0x4}, 0x0, 0x2}) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000080)="01", 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 7.79784351s ago: executing program 5 (id=1297): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 7.706534819s ago: executing program 1 (id=1298): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x332, &(0x7f0000000a00)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x2}, @void, {@ipv6={0x86dd, @gre_packet={0xd, 0x6, "d2830f", 0x2fc, 0x2f, 0x0, @local, @empty, {[@routing={0x87, 0x12, 0x0, 0xa4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, @loopback]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa5, 0x1, [], "29bc47d618e295fb46a7df1226542fa6427790b8cca77a8a1926629830c72396722b0631ac8eda8458e8fcc71912607ce0328469b1c4e5b7f28103965344c595620badb4b3522da964c15dd6f588eed3841ff43a9f21f220652d9b6c6c95ceaccda1d8838ab715df837fdc85a36b6a8ee0e1dad759c71a474c61ca9369f75e3a2df2109f3132f725d2d3499bf96488517a9da8a20ce13331a1684ec4829df0d96dc8fe533e"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x0, 0x1, 0x0], "7e76c6a23d134aab3565e16abff1abaf0c3ac6332359bd2396b3cbd93f9840f652fc50aeaa0140e0d2868463380de401bfa93998e0b6786903035b03c02ec9c52066d995dbc514067d09646e95a9ef477dd5c802494f664f91fe7958296daef7fc43dd2561df2da76ce7752b0104d36d719d64c04782a91cc8fa28583c1c2481c50d8cbe619f58895d99fff5d1cda6a07b7ff0eadcb30e773ec4d2cadad05f94a033b7"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x25a9], "86f0ac967f6a5065ed28a01b327f885976d66f83d48f92d4d403d6740a7c7586a6f1fd091df1ff7c782a8e1b82c8521c41af98f26bc27c27402aca6f9fc76eb93f0e9f790d7a9205e4a7f08aad3e5a176c966457aa9c7802de8546db22811f78"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x7, 0x1, 0x0, 0x0, 0x7}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x0, 0x1, 0x0, 0x1, 0x4, 0xc4}, 0x2, {0x0, 0x80, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "6a0c7771f03f129a0029df70513c3f6aaef3a30000535923ee7e2e6353aa309ab6243688ce96422f6ea48790ebdea8dcf772ce4724eb09d95aa6c01cebd1d2ace3842cd302f09099a7482c3cca70aab07d7939266e8a62af2cfcb930be467a096734c875f922c38d2aa949cf8a756655"}}}}}}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) 7.558283904s ago: executing program 3 (id=1299): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 6.654484853s ago: executing program 5 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 5.113467425s ago: executing program 5 (id=1302): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x2, 0x6, 0x4, 0x400, 0x2c2, {}, {0x3, 0x2, 0xd5, 0x80, 0x3, 0x8, "c61f3a28"}, 0xfffffffe, 0x3, {0x0}, 0x8}) 5.016804075s ago: executing program 3 (id=1303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) vmsplice(r4, &(0x7f00000018c0)=[{&(0x7f0000000740)="fd80e921033b4d7a0e90d0a7b688fda79e8215602c4d9a960d9e56e43be38c641e871d83fb86d248a7ce2794efa5bed17a3ec696b61fee0c1d3776286a557e3bdf97a8c911f87112394e203964877493baddc8e4b7d541535a9c3fa97b0e779901b24dae6eac67cc20e28b4e7cc998c4047f3f5c3cb4bb3b6e7966df6471942069ce4673a3c9c3eeec0dd9a4a9bdbbca2e33711bbd98fc78b8a6d48dede86021b47cf0554df6ce2cdd3aff73bcff912da5ff944ef0a0a255f2ceae3aa515480fe75fdbaacc85deea73859ca60be0e12a333ce2d9d1e296383a2ae59b677f31f5cf3bb8bf37aee4726c56a3", 0xeb}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="28f6e03f11b8db5e0759abfb92e38e03594faf1a73bd3513288581f8401fddc3d5a223aea15e", 0x26}, {&(0x7f0000001880)="55bdd6af7da2f587a47e22b17c424604851e4fccaf7a231cede9ea", 0x1b}], 0x4, 0x8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000500)={0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xe2be}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000043f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004401050064010101000000000000000000000000000004d63200000002000000000000000000000000000000000000000535000003010900688f4038030000000900000064010100000000000000000000000000000004d26c00000002000000fe8000000000000000000000000000aa0135000003030002000000fe800000000000000000000000000035000004d26c00000002000000e0000002000000000000000000000000000000000103fe0000fcffff5af1"], 0x1fc}}, 0x4000) 4.86245226s ago: executing program 5 (id=1305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x5, 0x5, 0x8, 0x55, 0x20008000, 0xe7, 0x1, 0x4]}}) 4.75586426s ago: executing program 0 (id=1306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x100, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x100}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 4.605376775s ago: executing program 1 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xa, 0x1, '-{]\\%\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 4.538891082s ago: executing program 0 (id=1308): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@any, 0x4}, 0x0, 0x2}) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000080)="01", 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 4.394161866s ago: executing program 1 (id=1309): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1f7482, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) 4.393482416s ago: executing program 0 (id=1310): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 2.210257362s ago: executing program 0 (id=1311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, &(0x7f0000000140)) 1.3173408s ago: executing program 0 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 303.97883ms ago: executing program 0 (id=1313): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x10, 0x700, 0xfffffbff, 0x23, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x4114, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4dfc, 0x3, 'sed\x00', 0x22, 0x80005, 0x18}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000043005f4627bd7000fedbdf250000f0ff070002"], 0x6c}, 0x1, 0x0, 0x0, 0x48810}, 0x8054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="057a1556782f0200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 178.452472ms ago: executing program 5 (id=1314): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 0s ago: executing program 3 (id=1315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0xffff, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x2, 0x10, 0xfb, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xa, 0x21, 0x5, 0x80, 0x2, 0x0, 0x0, 0x55, 0xb, 0x1, 0x0, 0x8080}], 0x3fd}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x38}}, 0x8801) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3d0, 0x398, 0x398, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 72.982954][ T4172] cgroup: Unknown subsys name 'net' [ 73.167098][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.761577][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.674725][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 76.809504][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 76.919872][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 76.932425][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 76.947570][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.954760][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.964350][ T4189] device bridge_slave_0 entered promiscuous mode [ 76.977426][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.984762][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.993080][ T4189] device bridge_slave_1 entered promiscuous mode [ 77.043599][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.050820][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.058820][ T4193] device bridge_slave_0 entered promiscuous mode [ 77.066561][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 77.087940][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.106348][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.113698][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.121705][ T4193] device bridge_slave_1 entered promiscuous mode [ 77.147071][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.228378][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.252276][ T4189] team0: Port device team_slave_0 added [ 77.277648][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.291860][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.298931][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.307253][ T4195] device bridge_slave_0 entered promiscuous mode [ 77.317052][ T4189] team0: Port device team_slave_1 added [ 77.332126][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.339209][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.347677][ T4184] device bridge_slave_0 entered promiscuous mode [ 77.369440][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.376882][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.384972][ T4195] device bridge_slave_1 entered promiscuous mode [ 77.399260][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.406679][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.414722][ T4184] device bridge_slave_1 entered promiscuous mode [ 77.446989][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.454222][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.480873][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.503447][ T4193] team0: Port device team_slave_0 added [ 77.516586][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.523939][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.532574][ T4183] device bridge_slave_0 entered promiscuous mode [ 77.547293][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.554512][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.580654][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.593470][ T4193] team0: Port device team_slave_1 added [ 77.605451][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.618260][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.628363][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.635861][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.643905][ T4183] device bridge_slave_1 entered promiscuous mode [ 77.653482][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.709943][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.737490][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.744671][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771234][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.785342][ T4184] team0: Port device team_slave_0 added [ 77.809430][ T4195] team0: Port device team_slave_0 added [ 77.816059][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.823256][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.849606][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.866730][ T4184] team0: Port device team_slave_1 added [ 77.877150][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.896845][ T4195] team0: Port device team_slave_1 added [ 77.923778][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.935944][ T4189] device hsr_slave_0 entered promiscuous mode [ 77.943309][ T4189] device hsr_slave_1 entered promiscuous mode [ 77.958639][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.965838][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.992475][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.028510][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.035928][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.062291][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.074485][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.081775][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.107829][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.138322][ T4183] team0: Port device team_slave_0 added [ 78.149079][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.156674][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.182787][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.209058][ T4183] team0: Port device team_slave_1 added [ 78.249613][ T4193] device hsr_slave_0 entered promiscuous mode [ 78.256944][ T4193] device hsr_slave_1 entered promiscuous mode [ 78.263919][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.272070][ T4193] Cannot create hsr debugfs directory [ 78.316272][ T4184] device hsr_slave_0 entered promiscuous mode [ 78.323150][ T4184] device hsr_slave_1 entered promiscuous mode [ 78.329783][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.337950][ T4184] Cannot create hsr debugfs directory [ 78.353989][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.361171][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.387349][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.403054][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.410029][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.437375][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.437474][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 78.448708][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 78.461281][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 78.466388][ T4195] device hsr_slave_0 entered promiscuous mode [ 78.467414][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 78.479829][ T4195] device hsr_slave_1 entered promiscuous mode [ 78.486921][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.494971][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 78.498419][ T4195] Cannot create hsr debugfs directory [ 78.649898][ T4183] device hsr_slave_0 entered promiscuous mode [ 78.657709][ T4183] device hsr_slave_1 entered promiscuous mode [ 78.664374][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.672350][ T4183] Cannot create hsr debugfs directory [ 78.874370][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.889368][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.909224][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.918847][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.996721][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.007101][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.024261][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.035765][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.074702][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.111924][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.129220][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.147730][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.157405][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.193097][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.204885][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.217647][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.225997][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.235517][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.244648][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.252028][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.288144][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.297024][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.306987][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.317450][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.324598][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.332882][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.341842][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.350852][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.359730][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.368465][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.377361][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.386121][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.394650][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.406601][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.427336][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.438943][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.452601][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.465847][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.479029][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.488551][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.498428][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.508885][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.534930][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.541569][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.577749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.590019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.624713][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.670678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.679350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.694918][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.702158][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.717341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.755025][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.765334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.775066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.788043][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.795160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.806683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.815582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.826678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.834243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.859326][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.870967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.883034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.891905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.901693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.911199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.919608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.928271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.947214][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.960001][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.971026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.979660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.995354][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.008334][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.017799][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.072097][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.079900][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.088430][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.098939][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.113427][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.137232][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.185763][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.195553][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.205119][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.214564][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.225117][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.232251][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.240137][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.249835][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.258904][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.266032][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.274387][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.283523][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.292617][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.300751][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.308555][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.318952][ T4189] device veth0_vlan entered promiscuous mode [ 80.337596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.356010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.383898][ T4189] device veth1_vlan entered promiscuous mode [ 80.397374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.409800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.419192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.428783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.437675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.446542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.460080][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.472078][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.494052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.501466][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 80.503962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.507584][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 80.529177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.539133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.552332][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 80.558408][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 80.569361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.571043][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 80.584128][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.621272][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.630092][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.638871][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.646041][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.656505][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.664195][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.672362][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.681407][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.689989][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.697235][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.705120][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.715842][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.725856][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.737269][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.775581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.783451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.793340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.802973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.812945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.822325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.832250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.841032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.849337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.876013][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.887493][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.907603][ T4189] device veth0_macvtap entered promiscuous mode [ 80.917697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.928625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.938082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.947492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.964845][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.984737][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.014091][ T4189] device veth1_macvtap entered promiscuous mode [ 81.023300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.041642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.058833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.069867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.098511][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.126087][ T4184] device veth0_vlan entered promiscuous mode [ 81.133553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.143656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.154294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.163130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.172362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.180821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.202364][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.221763][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.237195][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.244354][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.261060][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.285015][ T4184] device veth1_vlan entered promiscuous mode [ 81.298615][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.309189][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.326919][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.339238][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.356196][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.366770][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.382656][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.389772][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.398777][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.408014][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.420851][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.437240][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447325][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.456598][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.466150][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.495420][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.504627][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.513806][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.523484][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.533774][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.543492][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.552568][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.562598][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.578274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.587846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.644606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.653457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.664837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.673245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.682018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.690548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.699030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.708372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.728816][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.740586][ T4195] device veth0_vlan entered promiscuous mode [ 81.768738][ T4184] device veth0_macvtap entered promiscuous mode [ 81.785288][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.794110][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.802235][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.811095][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.819709][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.883658][ T4184] device veth1_macvtap entered promiscuous mode [ 81.902140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.916494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.964751][ T4195] device veth1_vlan entered promiscuous mode [ 81.971731][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.004973][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.026427][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.036526][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057393][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.088187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.102543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.121092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.131846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.140975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.149899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.158263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.168831][ T4193] device veth0_vlan entered promiscuous mode [ 82.201020][ T4193] device veth1_vlan entered promiscuous mode [ 82.214496][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.227520][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.239410][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.250045][ T468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.267545][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.275187][ T468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.291136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.299396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.307848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.316850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.326747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.336232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.346910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.355991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.363682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.377357][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.387178][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.396498][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.405629][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.431123][ T4195] device veth0_macvtap entered promiscuous mode [ 82.459224][ T4193] device veth0_macvtap entered promiscuous mode [ 82.472875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.488519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.498745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.516986][ T4195] device veth1_macvtap entered promiscuous mode [ 82.530966][ T4193] device veth1_macvtap entered promiscuous mode [ 82.551997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.561589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.569918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.574353][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 82.596452][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 82.607284][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 82.622247][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.649871][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.651722][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 82.660156][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.678653][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 82.682581][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.697267][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.710634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.719518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.733830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.743037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.767611][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.779123][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.791839][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.802770][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.822669][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.854176][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.865435][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.875752][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.886893][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.898974][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.910093][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.922256][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.931303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.940513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.949361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.958353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.989392][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.990456][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.007413][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.025105][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.037360][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.050765][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.070522][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.085419][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.096715][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.105641][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.115411][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124430][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.138019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.147108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.156789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.165549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.175617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.183725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.202236][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213725][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.223376][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.232476][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253254][ T4183] device veth0_vlan entered promiscuous mode [ 83.307318][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.330109][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.333477][ T4183] device veth1_vlan entered promiscuous mode [ 83.356806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.368685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.378203][ T21] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 83.405750][ T21] usb 4-1: config 0 has no interface number 0 [ 83.457409][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.467619][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.472303][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.483843][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.486679][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.508510][ T4183] device veth0_macvtap entered promiscuous mode [ 83.540559][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.548989][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.556612][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.558465][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.574064][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.590316][ T4183] device veth1_macvtap entered promiscuous mode [ 83.590651][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 83.621799][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.626046][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.629841][ T21] usb 4-1: Product: syz [ 83.629860][ T21] usb 4-1: Manufacturer: syz [ 83.629875][ T21] usb 4-1: SerialNumber: syz [ 83.643311][ T21] usb 4-1: config 0 descriptor?? [ 83.658742][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.686858][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.703349][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.715275][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.725917][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.736126][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.746967][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.756878][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.767518][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.782181][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.794842][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.804733][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.818408][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.829783][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.856286][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.868668][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.869296][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.884128][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.892945][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.906170][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.916703][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.927887][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.938626][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.949447][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.962723][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.980505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.988505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.998130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.016356][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.028004][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.037114][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.045899][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.071493][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.079501][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.080821][ T21] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 84.107727][ T21] usb 4-1: No valid video chain found. [ 84.125045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.159135][ T21] usb 4-1: USB disconnect, device number 2 [ 86.339537][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 86.354629][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 86.361573][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 86.367723][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 86.374205][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 86.980426][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.299713][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.349508][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.531073][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.547991][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.577065][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.588388][ T21] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 87.597772][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.608165][ T21] usb 4-1: config 0 descriptor?? [ 87.617406][ T4328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.640391][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.754417][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.174127][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.220407][ T4282] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.239537][ T21] hid-generic 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 89.473169][ T4222] usb 4-1: USB disconnect, device number 3 [ 91.251048][ T4282] usb 5-1: Using ep0 maxpacket: 32 [ 91.346766][ T4350] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 91.381485][ T4282] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 91.396964][ T4282] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 91.415185][ T4282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 91.466780][ T4282] usb 5-1: config 1 has no interface number 0 [ 91.484318][ T4282] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.559897][ T4282] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 91.688148][ T4344] fido_id[4344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.790448][ T4282] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 91.801048][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.890535][ T4282] usb 5-1: can't set config #1, error -71 [ 91.911624][ T4357] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.920809][ T4357] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.929582][ T4357] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.938486][ T4357] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.954395][ T4282] usb 5-1: USB disconnect, device number 2 [ 92.092998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.297661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.333427][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 92.400083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.707239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.929543][ T4357] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.938762][ T4357] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.947747][ T4357] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.956701][ T4357] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.060830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 93.471273][ T4357] Zero length message leads to an empty skb [ 94.548007][ T4357] syz.2.16 (4357) used greatest stack depth: 20992 bytes left [ 94.902960][ T13] cfg80211: failed to load regulatory.db [ 94.957129][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.071292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 97.212859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.520515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 97.530252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 98.422768][ T4408] tmpfs: Unknown parameter 'quota' [ 100.399843][ T4424] sctp: failed to load transform for md5: -4 [ 101.094997][ T26] audit: type=1326 audit(1761041372.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 101.467322][ T26] audit: type=1326 audit(1761041372.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 101.539205][ T4454] process 'syz.1.43' launched '/dev/fd/4' with NULL argv: empty string added [ 101.746503][ T26] audit: type=1326 audit(1761041372.405:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 101.772681][ T26] audit: type=1326 audit(1761041372.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 101.854688][ T26] audit: type=1326 audit(1761041372.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 102.415405][ T4473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.050532][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 107.599657][ T4521] netlink: 168 bytes leftover after parsing attributes in process `syz.2.63'. [ 108.793754][ T4539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.148552][ T4552] sched: RT throttling activated [ 113.601648][ T4587] crypto_alloc_aead failed rc=-4 [ 115.036347][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.800412][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.840666][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 115.920777][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.945781][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.227572][ T7] usb 2-1: string descriptor 0 read error: -71 [ 117.234131][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.246978][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.278147][ T7] usb 2-1: can't set config #1, error -71 [ 117.298390][ T7] usb 2-1: USB disconnect, device number 2 [ 118.378604][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 126.350392][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.910440][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 127.040623][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.373256][ T7] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 127.383857][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.394921][ T7] usb 3-1: config 0 descriptor?? [ 127.432682][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 128.181716][ T7] gspca_spca501: reg write: error -110 [ 128.188086][ T7] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 128.220560][ T7] spca501: probe of 3-1:0.0 failed with error -22 [ 128.353356][ T7] usb 3-1: USB disconnect, device number 2 [ 132.620502][ T26] audit: type=1326 audit(1761041404.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 133.060325][ T26] audit: type=1326 audit(1761041404.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 136.950885][ T4904] 9pnet: Insufficient options for proto=fd [ 137.513516][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 137.640660][ T4255] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.990325][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 138.120716][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.147244][ T4255] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.237604][ T4255] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.257868][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.300513][ T4255] usb 3-1: config 0 descriptor?? [ 139.562722][ T4255] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 139.831580][ T4255] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 139.890405][ T4255] usb 3-1: USB disconnect, device number 3 [ 139.986808][ T4935] fido_id[4935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.973046][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.979502][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.531696][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 142.543781][ T4185] Bluetooth: hci4: link tx timeout [ 142.550856][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.651431][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 147.264036][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 147.625032][ T4325] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 147.848527][ T4325] Bluetooth: hci3: Injecting HCI hardware error event [ 147.857237][ T4185] Bluetooth: hci3: hardware error 0x00 [ 148.836974][ T4192] Bluetooth: Wrong link type (-71) [ 159.065479][ T26] audit: type=1326 audit(1761041430.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 159.144342][ T26] audit: type=1326 audit(1761041430.722:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 163.050687][ T26] audit: type=1326 audit(1761041434.662:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 163.072960][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.740022][ T26] audit: type=1326 audit(1761041434.662:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 166.875027][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 168.161011][ T26] audit: type=1326 audit(1761041439.812:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 168.942749][ T26] audit: type=1326 audit(1761041439.812:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 172.343966][ T26] audit: type=1326 audit(1761041443.752:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 173.175520][ T26] audit: type=1326 audit(1761041443.752:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 175.426074][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 177.647920][ T26] audit: type=1326 audit(1761041448.562:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 177.758285][ T26] audit: type=1326 audit(1761041448.572:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 180.307206][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 182.325036][ T26] audit: type=1326 audit(1761041452.802:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 182.325088][ T26] audit: type=1326 audit(1761041452.802:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 183.155230][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.932594][ T26] audit: type=1326 audit(1761041457.582:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5399 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 188.167605][ T26] audit: type=1326 audit(1761041457.582:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5399 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20c2e2fc9 code=0x7ffc0000 [ 191.185865][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 193.331269][ T26] audit: type=1326 audit(1761041464.932:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5465 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 193.626616][ T26] audit: type=1326 audit(1761041464.932:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5465 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 197.202975][ T5514] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 197.469695][ T5514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.556963][ T5517] bond1: (slave geneve2): making interface the new active one [ 197.602929][ T5517] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 197.634262][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 197.677794][ T5517] syz.3.323 (5517) used greatest stack depth: 19552 bytes left [ 199.529155][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 199.585947][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 200.155868][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 200.162477][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 200.493549][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 202.419414][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.500292][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.124646][ T5580] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 204.197396][ T5580] team0: Port device dummy0 added [ 204.216744][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 209.440970][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 212.050596][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 216.101923][ T26] audit: type=1326 audit(1761041487.752:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 216.829456][ T26] audit: type=1326 audit(1761041487.752:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 218.400806][ T5699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 219.251578][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 221.726017][ T26] audit: type=1326 audit(1761041493.382:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 222.405155][ T26] audit: type=1326 audit(1761041493.382:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 223.089420][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 226.888956][ T5763] ODEBUG: Out of memory. ODEBUG disabled [ 227.172037][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 228.183998][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 232.064148][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 233.460209][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 233.981704][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 237.945190][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 238.931749][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 241.820600][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 242.741774][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 247.522362][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 248.641358][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 253.280243][ T26] audit: type=1326 audit(1761041524.072:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 253.507139][ T26] audit: type=1326 audit(1761041524.072:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 253.743104][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 254.693356][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 256.730816][ T26] audit: type=1326 audit(1761041528.312:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 256.753055][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.367854][ T26] audit: type=1326 audit(1761041528.312:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 257.390319][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.541093][ T6081] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.860365][ T1108] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 258.235094][ T1108] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 258.248538][ T1108] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 258.277503][ T1108] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 258.304964][ T1108] usb 5-1: config 150 has no interface number 0 [ 258.323702][ T1108] usb 5-1: config 150 interface 204 has no altsetting 0 [ 258.811076][ T1108] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 258.867426][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.906487][ T1108] usb 5-1: Product: syz [ 258.930265][ T1108] usb 5-1: Manufacturer: syz [ 258.935068][ T1108] usb 5-1: SerialNumber: syz [ 259.402003][ T1108] usb 5-1: USB disconnect, device number 3 [ 260.084217][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 260.097984][ T4304] wlan1: Trigger new scan to find an IBSS to join [ 262.550351][ T26] audit: type=1326 audit(1761041534.052:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 262.572514][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.982885][ T26] audit: type=1326 audit(1761041534.052:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 263.005007][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.419959][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 263.857030][ T144] wlan1: Trigger new scan to find an IBSS to join [ 263.901729][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.911383][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.936732][ T4874] wlan1: Creating new IBSS network, BSSID 26:2b:27:a3:5d:47 [ 266.011430][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 267.583672][ T4282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 268.920439][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.942603][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.971187][ T4282] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 268.999191][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.029087][ T4282] usb 1-1: config 0 descriptor?? [ 269.533785][ T4282] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 269.553961][ T4282] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 269.570839][ T4282] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 269.592928][ T4282] hid-led 0003:04D8:F372.0003: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 269.669386][ T4282] hid-led 0003:04D8:F372.0003: Greynut Luxafor initialized [ 269.796876][ T4282] usb 1-1: USB disconnect, device number 2 [ 269.826281][ T4229] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 269.951307][ T4254] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 269.965724][ T4254] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 270.079402][ T6195] fido_id[6195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 270.151470][ T4254] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 270.238856][ T4254] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 270.484260][ T4254] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 270.643967][ T13] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 270.703473][ T4325] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 270.896997][ T4254] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 270.906275][ T4325] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 270.915503][ T4325] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 270.924843][ T4325] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 270.935069][ T4325] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 270.952209][ T4254] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 270.971738][ T4254] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 270.996945][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 271.097996][ T4254] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 271.118627][ T4254] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 271.311043][ T4254] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 278.004345][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 282.613818][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 283.780506][ T26] audit: type=1326 audit(1761041555.392:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 284.372320][ T26] audit: type=1326 audit(1761041555.402:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 288.609168][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 288.717865][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 291.583370][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 294.951085][ T4304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.209548][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 297.093675][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 299.314493][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 303.126537][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 303.663421][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 304.758597][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 307.509827][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 307.819009][ T6561] fuse: Bad value for 'fd' [ 309.001100][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 309.118288][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 310.146217][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 315.873957][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 318.067273][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 318.109672][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 319.469280][ T6649] fuse: Bad value for 'fd' [ 321.912698][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 323.438386][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 325.295705][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.302088][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.004901][ T6706] fuse: Bad value for 'fd' [ 327.125129][ T4304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.533939][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 330.656736][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 331.109451][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 331.471658][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 334.868490][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 338.474938][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 339.634398][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 339.798397][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 345.230281][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 348.336620][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 348.451609][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 349.709862][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 352.092154][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 355.447657][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 356.183330][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 357.289925][ T6950] capability: warning: `syz.2.701' uses 32-bit capabilities (legacy support in use) [ 359.982519][ T4863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.535022][ T4325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 362.276945][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 363.150254][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 363.414400][ T7019] netlink: 156 bytes leftover after parsing attributes in process `syz.0.720'. [ 365.170210][ T4325] usb 3-1: unable to read config index 0 descriptor/all [ 365.243830][ T4325] usb 3-1: can't read configurations, error -71 [ 365.371487][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 368.318001][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 371.114814][ T26] audit: type=1326 audit(1761041642.772:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 371.137036][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.172323][ T26] audit: type=1326 audit(1761041642.772:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 372.294045][ T7099] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 376.970131][ T26] audit: type=1326 audit(1761041648.612:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 379.257305][ T26] audit: type=1326 audit(1761041648.612:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 380.668553][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 387.203258][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.209634][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.910704][ T2284] Bluetooth: hci5: command 0x0409 tx timeout [ 392.262318][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 393.486329][ T468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 393.515775][ T7218] chnl_net:caif_netlink_parms(): no params data found [ 394.330186][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 394.343425][ T4847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.682384][ T4847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.835197][ T4847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.998063][ T4847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.155531][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.173970][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.195997][ T7218] device bridge_slave_0 entered promiscuous mode [ 395.236027][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.809214][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.899491][ T7218] device bridge_slave_1 entered promiscuous mode [ 396.129940][ T7218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.410174][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 396.493757][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 398.035222][ T7218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.110231][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 399.241125][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 400.030302][ T23] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 400.070421][ T7218] team0: Port device team_slave_0 added [ 400.087023][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.129151][ T23] usb 3-1: Product: syz [ 400.135961][ T23] usb 3-1: Manufacturer: syz [ 400.151016][ T23] usb 3-1: SerialNumber: syz [ 400.156679][ T7218] team0: Port device team_slave_1 added [ 400.167927][ T23] usb 3-1: config 0 descriptor?? [ 400.528638][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.569019][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.602049][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 400.851085][ T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 401.003478][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.252890][ T7298] dtv5100: wlen = 0, aborting. [ 401.300632][ T7218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.309237][ T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 401.411572][ T23] usb 3-1: media controller created [ 401.438582][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.640477][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.657740][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.715331][ T7218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.780830][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 401.815407][ T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.521779][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.586228][ T23] usb 3-1: USB disconnect, device number 6 [ 403.175995][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 403.542345][ T7218] device hsr_slave_0 entered promiscuous mode [ 403.591055][ T7218] device hsr_slave_1 entered promiscuous mode [ 404.890673][ T7367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 405.288559][ T7218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.330471][ T7218] Cannot create hsr debugfs directory [ 405.895556][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 408.029186][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 409.385412][ T7218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 410.776976][ T7218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.126546][ T7218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.067050][ T7218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.645673][ T7451] overlayfs: missing 'lowerdir' [ 414.068069][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 414.133821][ T4847] device hsr_slave_0 left promiscuous mode [ 415.207721][ T4847] device hsr_slave_1 left promiscuous mode [ 415.249101][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.889157][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.994217][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.008670][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.037921][ T4847] device bridge_slave_1 left promiscuous mode [ 416.077525][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.291227][ T7496] fuse: Bad value for 'group_id' [ 417.055988][ T4847] device bridge_slave_0 left promiscuous mode [ 417.062356][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.122411][ T4847] device veth1_macvtap left promiscuous mode [ 417.128970][ T4847] device veth0_macvtap left promiscuous mode [ 417.191370][ T4847] device veth1_vlan left promiscuous mode [ 417.197432][ T4847] device veth0_vlan left promiscuous mode [ 421.688633][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 421.748450][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 421.817182][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.849335][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.942818][ T4847] bond0 (unregistering): Released all slaves [ 423.028754][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 423.230510][ T7547] fuse: Bad value for 'group_id' [ 425.115769][ T468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.126590][ T7218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.144100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.155184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.296010][ T7218] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.479702][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.714425][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.564573][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.571755][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.226602][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.247324][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.278767][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.285961][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.797194][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.006212][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.022370][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.301655][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.320978][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.535361][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 428.714680][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.991368][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.038656][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.100202][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 429.393131][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.553667][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.704608][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.857816][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.912247][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.923439][ T23] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.943468][ T7218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.950354][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.959767][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.036604][ T23] usb 3-1: invalid MIDI out EP 0 [ 430.177822][ T23] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 430.362842][ T23] usb 3-1: USB disconnect, device number 7 [ 430.555268][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.572669][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.592323][ T6197] udevd[6197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.635707][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.494083][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.926090][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 436.318288][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.873382][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.918962][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.986042][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.995621][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.033364][ T7218] device veth0_vlan entered promiscuous mode [ 438.385037][ T7218] device veth1_vlan entered promiscuous mode [ 438.483227][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 438.584544][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.200994][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.265544][ T7218] device veth0_macvtap entered promiscuous mode [ 439.424264][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.454479][ T7218] device veth1_macvtap entered promiscuous mode [ 439.549250][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.597543][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.642439][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.676781][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.735150][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.779967][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.144071][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.070062][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.145141][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.307130][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.821654][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.502660][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.776473][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.786837][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.580438][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.670410][ T7218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.745249][ T7218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.859400][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.907553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.945717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.983108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.011016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.083352][ T7218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.148974][ T7218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.158458][ T7218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.167303][ T7218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.383040][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 445.221924][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.270669][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.342584][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.350750][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.358843][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.416877][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.756295][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 446.738401][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.766'. [ 448.261153][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.270386][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.705135][ T7773] orangefs_mount: mount request failed with -4 [ 452.856598][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 454.423435][ T7823] overlayfs: failed to resolve './file0': -2 [ 457.809945][ T4304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.785972][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 460.038807][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 464.384920][ T4320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 464.743230][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 465.480311][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 465.630470][ T4320] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 465.657484][ T4320] usb 3-1: config 0 has no interface number 0 [ 465.692489][ T4320] usb 3-1: config 0 interface 196 has no altsetting 0 [ 466.020216][ T4320] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 466.032951][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.042026][ T4320] usb 3-1: Product: syz [ 466.046390][ T4320] usb 3-1: Manufacturer: syz [ 466.051510][ T4320] usb 3-1: SerialNumber: syz [ 466.059932][ T4320] usb 3-1: config 0 descriptor?? [ 467.270979][ T4320] ipheth 3-1:0.196: Unable to find endpoints [ 467.461084][ T4320] usb 3-1: USB disconnect, device number 8 [ 467.745019][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 468.085030][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 473.682936][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.951'. [ 474.540282][ T4320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 474.920170][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 475.050506][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 475.057985][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.293672][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.430471][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 475.441290][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.466801][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.560438][ T4320] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 475.567911][ T4320] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.673389][ T4320] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.056824][ T4320] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 479.100968][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.130210][ T4320] usb 1-1: can't set config #168, error -71 [ 479.153896][ T4320] usb 1-1: USB disconnect, device number 3 [ 480.560827][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 482.642939][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'. [ 487.940172][ T7308] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 488.360206][ T7308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.373444][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 488.428624][ T7308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 488.570374][ T7308] usb 1-1: config 1 has no interface number 0 [ 488.756583][ T7308] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.610224][ T4322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.910672][ T7308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.950235][ T7308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.880328][ T7308] usb 1-1: Product: syz [ 490.884665][ T7308] usb 1-1: Manufacturer: syz [ 490.889702][ T7308] usb 1-1: SerialNumber: syz [ 491.259247][ T7308] usb 1-1: can't set config #1, error -71 [ 491.325025][ T7308] usb 1-1: USB disconnect, device number 4 [ 494.384980][ T8266] fuse: Unknown parameter 'group_i00000000000000000000' [ 498.708834][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 500.101104][ T8315] fuse: Unknown parameter 'group_i00000000000000000000' [ 504.416140][ T8366] fuse: Unknown parameter 'group_id00000000000000000000' [ 507.943342][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.968705][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 508.046489][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.059551][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.077429][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.169433][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 509.321277][ T8432] fuse: Unknown parameter 'group_id00000000000000000000' [ 510.243513][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.249888][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.731920][ T1108] Bluetooth: hci5: command 0x0406 tx timeout [ 513.042020][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 513.522762][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 513.689497][ T8483] fuse: Unknown parameter 'group_id00000000000000000000' [ 515.432166][ T26] audit: type=1326 audit(1761041787.092:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 515.454564][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.465289][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 515.531178][ T26] audit: type=1326 audit(1761041787.092:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 518.620168][ T7589] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 519.040399][ T8539] fuse: Bad value for 'user_id' [ 519.809218][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 520.620139][ T7589] usb 6-1: unable to read config index 0 descriptor/all [ 520.627552][ T7589] usb 6-1: can't read configurations, error -71 [ 521.964804][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 525.520371][ T8594] fuse: Bad value for 'user_id' [ 526.169397][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 526.583072][ T8602] capability: warning: `syz.2.1070' uses deprecated v2 capabilities in a way that may be insecure [ 527.713635][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1075'. [ 528.390241][ T26] audit: type=1326 audit(1761041799.972:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 528.673119][ T26] audit: type=1326 audit(1761041799.972:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc4e3afc9 code=0x7ffc0000 [ 529.191852][ T8650] fuse: Bad value for 'user_id' [ 530.015550][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 530.197237][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 531.606670][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 532.991926][ T8709] fuse: Bad value for 'fd' [ 533.076697][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 534.280604][ T26] audit: type=1326 audit(1761041805.932:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 534.549699][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 534.700533][ T26] audit: type=1326 audit(1761041805.932:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 536.305836][ T26] audit: type=1326 audit(1761041807.962:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 536.404133][ T26] audit: type=1326 audit(1761041807.972:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 536.635317][ T26] audit: type=1326 audit(1761041807.972:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 536.729927][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 536.737017][ T26] audit: type=1326 audit(1761041807.972:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 537.023409][ T26] audit: type=1326 audit(1761041807.972:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 537.142454][ T26] audit: type=1326 audit(1761041807.972:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 537.167120][ T8769] fuse: Bad value for 'fd' [ 537.942183][ T26] audit: type=1326 audit(1761041807.972:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 538.020113][ T26] audit: type=1326 audit(1761041807.972:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 538.373823][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 539.301569][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 540.770911][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 540.770931][ T26] audit: type=1326 audit(1761041812.292:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 541.054943][ T26] audit: type=1326 audit(1761041812.292:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 541.094980][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1120'. [ 541.170721][ T8815] fuse: Bad value for 'fd' [ 542.382831][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 546.183003][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 546.531879][ T8862] fuse: Bad value for 'fd' [ 548.309437][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 549.633570][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1139'. [ 550.090338][ T4282] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 550.760447][ T8900] fuse: Bad value for 'fd' [ 551.010918][ T4282] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 551.042311][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.639735][ T4282] usb 3-1: config 0 descriptor?? [ 551.691537][ T4282] cp210x 3-1:0.0: cp210x converter detected [ 552.343338][ T8886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 552.755190][ T4282] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 552.780182][ T4282] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 552.788061][ T4282] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 553.000939][ T4282] usb 3-1: cp210x converter now attached to ttyUSB0 [ 553.082559][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 553.200179][ T2284] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 553.397398][ T4282] usb 3-1: USB disconnect, device number 9 [ 553.417521][ T4282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 553.426793][ T4282] cp210x 3-1:0.0: device disconnected [ 553.450264][ T2284] usb 4-1: Using ep0 maxpacket: 32 [ 553.680523][ T2284] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 553.724201][ T2284] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 553.836370][ T2284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 553.952444][ T2284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 554.075720][ T2284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 554.199371][ T2284] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 554.360811][ T2284] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 554.415563][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1154'. [ 554.430075][ T2284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.507900][ T2284] usb 4-1: config 0 descriptor?? [ 554.649530][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 554.811788][ T2284] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 555.500357][ T8940] fuse: Bad value for 'fd' [ 556.043514][ T2284] usb 4-1: USB disconnect, device number 4 [ 556.182586][ T2284] usblp0: removed [ 558.970273][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 559.346090][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1166'. [ 559.391198][ T4229] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 559.415476][ T4229] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 559.432261][ T4229] usb 1-1: config 1 interface 0 has no altsetting 0 [ 559.491358][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1167'. [ 559.620303][ T4229] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 559.637370][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.646045][ T4229] usb 1-1: Product: syz [ 559.672991][ T4229] usb 1-1: Manufacturer: syz [ 559.697917][ T4229] usb 1-1: SerialNumber: syz [ 559.740387][ T8957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 559.748228][ T8957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 560.269546][ T8987] fuse: Invalid rootmode [ 564.400211][ T4229] rtl8150 1-1:1.0: couldn't reset the device [ 564.406439][ T4229] rtl8150: probe of 1-1:1.0 failed with error -5 [ 565.801457][ T4229] usb 1-1: USB disconnect, device number 5 [ 568.644619][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 568.777441][ T9029] fuse: Invalid rootmode [ 569.880393][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 570.260690][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.314929][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.447986][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.535180][ T1108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.938231][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.400468][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.406857][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.424342][ T1108] usb 3-1: config 0 descriptor?? [ 572.780535][ T1108] usbhid 3-1:0.0: can't add hid device: -71 [ 572.786571][ T1108] usbhid: probe of 3-1:0.0 failed with error -71 [ 576.133281][ T1108] usb 3-1: USB disconnect, device number 10 [ 576.613316][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 577.582127][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 580.054556][ T9093] syz.1.1203 uses obsolete (PF_INET,SOCK_PACKET) [ 581.517573][ T26] audit: type=1326 audit(1761041852.632:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 583.134136][ T7589] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 583.172487][ T26] audit: type=1326 audit(1761041852.642:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33246b8fc9 code=0x7ffc0000 [ 583.762703][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 583.913480][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 586.610359][ T4255] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 586.720060][ T7589] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 587.440371][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.470102][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.490211][ T7589] usb 3-1: Using ep0 maxpacket: 16 [ 587.625972][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.654599][ T4255] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 587.664730][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.691402][ T4255] usb 4-1: config 0 descriptor?? [ 587.730214][ T7589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.153072][ T7589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.210018][ T7589] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.235176][ T7589] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.690248][ T7589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.713238][ T7589] usb 3-1: config 0 descriptor?? [ 589.730742][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.738606][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 589.745962][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 589.753281][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 589.760699][ T7589] usb 3-1: can't set config #0, error -71 [ 589.781805][ T7589] usb 3-1: USB disconnect, device number 12 [ 589.800226][ T4255] usbhid 4-1:0.0: can't add hid device: -71 [ 589.806301][ T4255] usbhid: probe of 4-1:0.0 failed with error -71 [ 589.860160][ T4255] usb 4-1: USB disconnect, device number 5 [ 591.254541][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 591.610714][ T26] audit: type=1804 audit(1761041863.262:85): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1231" name="/newroot/280/file1" dev="fuse" ino=1 res=1 errno=0 [ 594.580203][ T4254] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 594.944048][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1238'. [ 594.971962][ T4254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.003559][ T4254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.031473][ T4254] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.261351][ T4254] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 595.344813][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.408092][ T4254] usb 3-1: config 0 descriptor?? [ 595.861699][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 596.228239][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1245'. [ 599.894344][ T26] audit: type=1326 audit(1761041871.552:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 600.333219][ T26] audit: type=1326 audit(1761041871.552:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.3.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46d816fc9 code=0x7ffc0000 [ 600.355744][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.700241][ T4254] usbhid 3-1:0.0: can't add hid device: -32 [ 600.706499][ T4254] usbhid: probe of 3-1:0.0 failed with error -32 [ 600.901537][ T4254] usb 3-1: USB disconnect, device number 13 [ 604.042089][ T9315] device syzkaller0 entered promiscuous mode [ 604.317542][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1270'. [ 605.000108][ T4229] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 605.070166][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 605.090551][ T26] audit: type=1326 audit(1761041876.712:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 605.145322][ T26] audit: type=1326 audit(1761041876.752:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4771994fc9 code=0x7ffc0000 [ 605.390328][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.634871][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.660082][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 605.669326][ T4229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.691200][ T4229] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 605.704760][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.725310][ T4229] usb 6-1: config 0 descriptor?? [ 605.780308][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 605.843958][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 605.884467][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.071691][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.095643][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.128862][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.600667][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 606.607089][ T23] usbtmc 4-1:16.0: can't read capabilities [ 606.942180][ T23] usb 4-1: USB disconnect, device number 6 [ 608.358947][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'. [ 609.214499][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.314749][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.361812][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.409281][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.650168][ T4229] usbhid 6-1:0.0: can't add hid device: -71 [ 611.141567][ T4229] usbhid: probe of 6-1:0.0 failed with error -71 [ 611.436766][ T4229] usb 6-1: USB disconnect, device number 4 [ 611.450050][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 612.637831][ T9403] netlink: 'syz.3.1293': attribute type 10 has an invalid length. [ 612.672262][ T9403] bond0: (slave wlan1): Opening slave failed [ 612.694708][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.927761][ T9406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1294'. [ 613.371997][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.640928][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.395747][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 616.036000][ T26] audit: type=1326 audit(1761041887.692:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 616.101681][ T26] audit: type=1326 audit(1761041887.732:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325ac6efc9 code=0x7ffc0000 [ 616.180318][ T4254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.200373][ T4254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.211192][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 616.239425][ T4254] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.270112][ T4254] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 616.305126][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.357040][ T4254] usb 2-1: config 0 descriptor?? [ 616.390256][ T4254] usb 2-1: can't set config #0, error -71 [ 616.406724][ T4254] usb 2-1: USB disconnect, device number 3 [ 620.667168][ T9470] input: syz0 as /devices/virtual/input/input6 [ 620.895217][ T4254] [ 620.897615][ T4254] ====================================================== [ 620.903531][ T9473] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 620.904706][ T4254] WARNING: possible circular locking dependency detected [ 620.904783][ T4254] syzkaller #0 Not tainted [ 620.919222][ T9470] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 620.923262][ T4254] ------------------------------------------------------ [ 620.923270][ T4254] kworker/0:7/4254 is trying to acquire lock: [ 620.923281][ T4254] ffff88801ab8cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 620.955363][ T4254] [ 620.955363][ T4254] but task is already holding lock: [ 620.962759][ T4254] ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 620.971841][ T4254] [ 620.971841][ T4254] which lock already depends on the new lock. [ 620.971841][ T4254] [ 620.982500][ T4254] [ 620.982500][ T4254] the existing dependency chain (in reverse order) is: [ 620.991513][ T4254] [ 620.991513][ T4254] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 620.999708][ T4254] __mutex_lock_common+0x1eb/0x2390 [ 621.005482][ T4254] mutex_lock_nested+0x17/0x20 [ 621.010782][ T4254] rfkill_register+0x33/0x8a0 [ 621.015985][ T4254] hci_register_dev+0x452/0x970 [ 621.021354][ T4254] vhci_create_device+0x32c/0x5c0 [ 621.026911][ T4254] vhci_write+0x391/0x450 [ 621.031868][ T4254] vfs_write+0x712/0xd00 [ 621.036627][ T4254] ksys_write+0x14d/0x250 [ 621.041473][ T4254] do_syscall_64+0x4c/0xa0 [ 621.046406][ T4254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.052818][ T4254] [ 621.052818][ T4254] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 621.060632][ T4254] __mutex_lock_common+0x1eb/0x2390 [ 621.066352][ T4254] mutex_lock_nested+0x17/0x20 [ 621.071633][ T4254] vhci_send_frame+0x88/0x100 [ 621.076828][ T4254] hci_send_frame+0x1a9/0x2e0 [ 621.082024][ T4254] hci_tx_work+0x9f9/0x1710 [ 621.087046][ T4254] process_one_work+0x863/0x1000 [ 621.092500][ T4254] worker_thread+0xaa8/0x12a0 [ 621.097693][ T4254] kthread+0x436/0x520 [ 621.102277][ T4254] ret_from_fork+0x1f/0x30 [ 621.107211][ T4254] [ 621.107211][ T4254] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 621.116421][ T4254] __flush_work+0xdd/0x1b0 [ 621.121388][ T4254] hci_dev_do_close+0x1e7/0x1030 [ 621.126842][ T4254] hci_error_reset+0x101/0x2c0 [ 621.132120][ T4254] process_one_work+0x863/0x1000 [ 621.137580][ T4254] worker_thread+0xaa8/0x12a0 [ 621.142774][ T4254] kthread+0x436/0x520 [ 621.147408][ T4254] ret_from_fork+0x1f/0x30 [ 621.152460][ T4254] [ 621.152460][ T4254] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 621.160108][ T4254] __mutex_lock_common+0x1eb/0x2390 [ 621.165836][ T4254] mutex_lock_nested+0x17/0x20 [ 621.171274][ T4254] bg_scan_update+0x44/0x3b0 [ 621.176406][ T4254] process_one_work+0x863/0x1000 [ 621.181878][ T4254] worker_thread+0xaa8/0x12a0 [ 621.187084][ T4254] kthread+0x436/0x520 [ 621.191766][ T4254] ret_from_fork+0x1f/0x30 [ 621.196712][ T4254] [ 621.196712][ T4254] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 621.206863][ T4254] __lock_acquire+0x2c33/0x7c60 [ 621.212246][ T4254] lock_acquire+0x197/0x3f0 [ 621.217272][ T4254] __flush_work+0xdd/0x1b0 [ 621.222203][ T4254] __cancel_work_timer+0x3ac/0x520 [ 621.227830][ T4254] hci_request_cancel_all+0xcc/0x300 [ 621.233638][ T4254] hci_dev_do_close+0x4e/0x1030 [ 621.239017][ T4254] hci_rfkill_set_block+0x10a/0x190 [ 621.244733][ T4254] rfkill_set_block+0x1c6/0x420 [ 621.250108][ T4254] rfkill_epo+0x75/0x170 [ 621.250131][ T4254] rfkill_op_handler+0x76/0x220 [ 621.260273][ T4254] process_one_work+0x863/0x1000 [ 621.265729][ T4254] worker_thread+0xaa8/0x12a0 [ 621.270923][ T4254] kthread+0x436/0x520 [ 621.275509][ T4254] ret_from_fork+0x1f/0x30 [ 621.280446][ T4254] [ 621.280446][ T4254] other info that might help us debug this: [ 621.280446][ T4254] [ 621.290669][ T4254] Chain exists of: [ 621.290669][ T4254] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 621.290669][ T4254] [ 621.306390][ T4254] Possible unsafe locking scenario: [ 621.306390][ T4254] [ 621.313835][ T4254] CPU0 CPU1 [ 621.319191][ T4254] ---- ---- [ 621.324547][ T4254] lock(rfkill_global_mutex); [ 621.329305][ T4254] lock(&data->open_mutex); [ 621.336429][ T4254] lock(rfkill_global_mutex); [ 621.343704][ T4254] lock((work_completion)(&hdev->bg_scan_update)); [ 621.350288][ T4254] [ 621.350288][ T4254] *** DEADLOCK *** [ 621.350288][ T4254] [ 621.358431][ T4254] 3 locks held by kworker/0:7/4254: [ 621.363625][ T4254] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 621.373976][ T4254] #1: ffffc90003f6fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 621.384336][ T4254] #2: ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 621.393823][ T4254] [ 621.393823][ T4254] stack backtrace: [ 621.399701][ T4254] CPU: 0 PID: 4254 Comm: kworker/0:7 Not tainted syzkaller #0 [ 621.407152][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 621.417202][ T4254] Workqueue: events rfkill_op_handler [ 621.422588][ T4254] Call Trace: [ 621.425918][ T4254] [ 621.428907][ T4254] dump_stack_lvl+0x168/0x230 [ 621.433634][ T4254] ? load_image+0x3b0/0x3b0 [ 621.438171][ T4254] ? show_regs_print_info+0x20/0x20 [ 621.443371][ T4254] ? print_circular_bug+0x12b/0x1a0 [ 621.448586][ T4254] check_noncircular+0x274/0x310 [ 621.453559][ T4254] ? add_chain_block+0x940/0x940 [ 621.458501][ T4254] ? lockdep_lock+0xdc/0x1e0 [ 621.463091][ T4254] ? __lock_acquire+0x12d9/0x7c60 [ 621.468117][ T4254] ? lockdep_lock+0x1e0/0x1e0 [ 621.472790][ T4254] ? mark_lock+0x94/0x320 [ 621.477116][ T4254] __lock_acquire+0x2c33/0x7c60 [ 621.481981][ T4254] ? verify_lock_unused+0x140/0x140 [ 621.487196][ T4254] ? ret_from_fork+0x1e/0x30 [ 621.491854][ T4254] lock_acquire+0x197/0x3f0 [ 621.496359][ T4254] ? __flush_work+0xc1/0x1b0 [ 621.500948][ T4254] ? __lock_acquire+0x7c60/0x7c60 [ 621.505977][ T4254] ? read_lock_is_recursive+0x10/0x10 [ 621.511466][ T4254] ? start_flush_work+0x776/0x820 [ 621.516503][ T4254] __flush_work+0xdd/0x1b0 [ 621.520925][ T4254] ? __flush_work+0xc1/0x1b0 [ 621.525512][ T4254] ? flush_work+0x20/0x20 [ 621.529936][ T4254] ? try_to_grab_pending+0xf3/0x7e0 [ 621.535176][ T4254] ? lockdep_hardirqs_off+0x70/0x100 [ 621.540459][ T4254] ? mark_lock+0x94/0x320 [ 621.544819][ T4254] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 621.550801][ T4254] ? lock_chain_count+0x20/0x20 [ 621.555656][ T4254] ? lockdep_hardirqs_off+0x70/0x100 [ 621.560946][ T4254] ? mark_lock+0x94/0x320 [ 621.565287][ T4254] ? __cancel_work_timer+0x331/0x520 [ 621.570570][ T4254] __cancel_work_timer+0x3ac/0x520 [ 621.575697][ T4254] ? cancel_work_sync+0x20/0x20 [ 621.580544][ T4254] ? __cancel_work+0x1f4/0x2d0 [ 621.585302][ T4254] ? lockdep_hardirqs_on+0x94/0x140 [ 621.590591][ T4254] ? __cancel_work+0x26f/0x2d0 [ 621.595354][ T4254] ? cancel_work+0x20/0x20 [ 621.599770][ T4254] hci_request_cancel_all+0xcc/0x300 [ 621.605075][ T4254] hci_dev_do_close+0x4e/0x1030 [ 621.609922][ T4254] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 621.615825][ T4254] ? _raw_spin_unlock+0x40/0x40 [ 621.620693][ T4254] hci_rfkill_set_block+0x10a/0x190 [ 621.625896][ T4254] ? rcu_lock_release+0x20/0x20 [ 621.630744][ T4254] rfkill_set_block+0x1c6/0x420 [ 621.635595][ T4254] rfkill_epo+0x75/0x170 [ 621.639844][ T4254] rfkill_op_handler+0x76/0x220 [ 621.644711][ T4254] process_one_work+0x863/0x1000 [ 621.649827][ T4254] ? worker_detach_from_pool+0x240/0x240 [ 621.655489][ T4254] ? lockdep_hardirqs_off+0x70/0x100 [ 621.660786][ T4254] ? _raw_spin_lock_irq+0xab/0xe0 [ 621.665813][ T4254] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 621.671249][ T4254] ? wq_worker_running+0x97/0x170 [ 621.676377][ T4254] worker_thread+0xaa8/0x12a0 [ 621.681080][ T4254] ? lockdep_hardirqs_on+0x94/0x140 [ 621.686311][ T4254] ? lockdep_hardirqs_on+0x94/0x140 [ 621.691512][ T4254] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 621.697469][ T4254] kthread+0x436/0x520 [ 621.701554][ T4254] ? rcu_lock_release+0x20/0x20 [ 621.706416][ T4254] ? kthread_blkcg+0xd0/0xd0 [ 621.711056][ T4254] ret_from_fork+0x1f/0x30 [ 621.715480][ T4254] [ 622.050007][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 622.310064][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 622.440098][ T1108] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 622.448546][ T1108] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 622.458864][ T1108] usb 4-1: config 179 has no interface number 0 [ 622.465171][ T1108] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 622.475222][ T1108] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 622.488514][ T1108] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 622.497743][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.744528][ T1108] usb 4-1: USB disconnect, device number 7