last executing test programs: 18.157652328s ago: executing program 4 (id=382): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setregid(0x0, 0x0) unshare(0x2000000) r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_open_dev$vbi(&(0x7f0000000540), 0x1, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 17.322983662s ago: executing program 4 (id=384): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xbcc6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 13.174208956s ago: executing program 4 (id=408): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) r0 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x5, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000700)=""/4096, 0x5}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff01, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 9.407460763s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x2b}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000180)=0x7, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 9.179170637s ago: executing program 0 (id=417): timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_gettime(r0, &(0x7f0000000040)) 9.178583197s ago: executing program 2 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x20, 0x111, 0x760183a, "b59e2f67f44d459a9948f4ea5c76ed3d6b"}], 0x20}}], 0x1, 0x8084) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.101325268s ago: executing program 4 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = socket(0x2, 0x2, 0x1) r1 = syz_io_uring_setup(0x6a4e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x8000003, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000500)={r0}, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000900019078ac1e0001ac1414aa0b009078130000004500000000000000002f0000ac14140ae0000001040088beffffffff"], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x2, 0x109, 0x3, 0x6, 0x9, 0xbfffffffffffffff, 0x5, 0x8}, {0x4, 0x1000000000009, 0x1, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a3321024960b21}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4cb, 0x6c}, 0x2, @in6=@local, 0x3503, 0x1, 0x1, 0x0, 0x4, 0x80000001}}, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xffff0000) 9.091206828s ago: executing program 0 (id=420): mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) 9.01521487s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 8.970433701s ago: executing program 0 (id=422): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.197078184s ago: executing program 4 (id=423): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40600000000000071110900000000008510000002000000850000000000000095004c00000000009500001200000000abab312391510836759074ccff2ed8f9c6678e25a33f6cb4afb47400579805765886e28121bebe2d798a21d0b1ba3c64b7154fbdd9b3a80839903d9dd9de92169257abf148f32a4575c38f85b047adf3910ae2b8495219b4870f390a8ef2c1f726023303687ce9957117cd890e4f5fd2866f89b463a81c1c1d61315bf02b40cd104511054ac8a8520a9bc112b3ae285491bbc6b2ce30ebd6ad27379e663b789e161b728f428d163a5884b2c9cc8f6648f3d34acee04143923c18b932b60cea"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device}, 0x70) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000b40)=0x1, 0xb, 0x1, 0x0, &(0x7f0000000bc0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x2000000, 0x200004, 0x2, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36104001a0038001d004231a0e69ee581ffffffffffffff00a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407163ec9d92", 0x5e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 8.135004345s ago: executing program 0 (id=424): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r2}, 0x18) r4 = syz_io_uring_setup(0xfce, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x2, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="b7080d00000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000000f64e603f3dd53d57599942d3f500f8ffffffbfa400000000000007040000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000970000008500000019000000185600000d000000000000000000000018000000000001000000000009000000850000008c000000b7080000000000007b8af8ff00000000b7080000bd0500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000000000085000000a2000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000300)=0x1) ptrace(0x4206, r8) tkill(r8, 0x12) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r9, 0xc3eb, 0x0) tkill(r8, 0x12) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000000040), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0xce3, 0xc164, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.074157952s ago: executing program 2 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r7, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) syz_open_procfs(0x0, &(0x7f00000190c0)='net/vlan/config\x00') sendmsg$nl_generic(r2, 0x0, 0x84) connect$inet6(r1, 0x0, 0x0) 6.025034163s ago: executing program 0 (id=429): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 5.955259954s ago: executing program 3 (id=430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.816294466s ago: executing program 1 (id=431): r0 = fsopen(&(0x7f0000000100)='gfs2meta\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.686281989s ago: executing program 3 (id=432): mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) 5.6113825s ago: executing program 1 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1}, 0x1, 0x2, 0x0, 0x0, "d19bf92ff47c830c"}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400008c) 5.514113152s ago: executing program 1 (id=434): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000000002) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000a3359a1631b9570bc19451a1ab929a9028b08e7791ede8dfa1f5b0ba0c16581d"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x80000001, 0x189200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 5.147787508s ago: executing program 1 (id=435): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) 5.141731668s ago: executing program 3 (id=436): socket$igmp(0x2, 0x3, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) close(r4) io_setup(0x8, &(0x7f0000000540)=0x0) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000140)="010000", 0x3, 0x2a21}]) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usbip_server_init(0x3) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x100, &(0x7f0000000700)) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=within_size,mode=00000000000000000000011,nr_blocks=06,gid=', @ANYRESHEX, @ANYBLOB=',obj_type=/dev/snd/midiC#D#\x00,smackfsdef=/dev/snd/pcmC#D#c\x00,fsuuid=fd4a8e0a-db7a-S552-6bbd-4c2648d8,dont_appraise,fsmagic=0x0000000000000003,fsmagic=0x0000000000000008,smackfsfloor=/dev/net/tun\x00,\x00']) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.02285121s ago: executing program 2 (id=437): r0 = socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.428445979s ago: executing program 3 (id=438): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x150) 3.34243457s ago: executing program 4 (id=439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 3.295214441s ago: executing program 1 (id=440): socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x5, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 1.257536377s ago: executing program 3 (id=441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.146912289s ago: executing program 0 (id=442): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 1.09926252s ago: executing program 1 (id=443): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x1d, 0xac11, 0x0, 0x0}], 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, 0x0, 0x0) iopl(0x3) pipe(&(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 283.699275ms ago: executing program 2 (id=444): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x2, 0xc, 0x2, 0x48, 0x9, 0x3, 0x18, 0x16, 0x9, 0x12, 0x5, 0x12, 0x1, 0x12, 0x60]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000100"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="070000000000000400000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 0s ago: executing program 3 (id=445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) r5 = memfd_secret(0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) unshare(0x40020000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 64.688729][ T4173] cgroup: Unknown subsys name 'net' [ 64.800299][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.294326][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.876071][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.907326][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.936243][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.984819][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.060617][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.067750][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.076488][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.091266][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.098492][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.107184][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.137614][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.195059][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.202321][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.210399][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.222519][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.230020][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.238030][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.247301][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.261284][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.268499][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.276707][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.301806][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.319589][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.326693][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.335175][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.384053][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.401401][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.408504][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.417063][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.437257][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.449111][ T4185] team0: Port device team_slave_0 added [ 68.457993][ T4185] team0: Port device team_slave_1 added [ 68.466296][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.473607][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.482058][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.491208][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.534256][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.583170][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.591355][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.599274][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.609308][ T4183] team0: Port device team_slave_0 added [ 68.616806][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.623928][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.650520][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.664394][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.683816][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.691412][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.699317][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.708414][ T4183] team0: Port device team_slave_1 added [ 68.714870][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.722263][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.748455][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.761787][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.773264][ T4184] team0: Port device team_slave_0 added [ 68.808437][ T4184] team0: Port device team_slave_1 added [ 68.839983][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.847009][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.873284][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.885918][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.893450][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.919599][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.947089][ T4192] team0: Port device team_slave_0 added [ 68.955283][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.966719][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.001029][ T4192] team0: Port device team_slave_1 added [ 69.007260][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.014533][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.040572][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.090961][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.097950][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.124373][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.148238][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.155524][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.166660][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.174247][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.181238][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.189087][ T4183] Cannot create hsr debugfs directory [ 69.209735][ T4188] team0: Port device team_slave_0 added [ 69.218756][ T4188] team0: Port device team_slave_1 added [ 69.235944][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.242994][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.269169][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.313816][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.321312][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.347877][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.384866][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.391912][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.417908][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.448669][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.455625][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 69.462175][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.462575][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.475353][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.483357][ T4184] Cannot create hsr debugfs directory [ 69.493183][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.501001][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.527130][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.529558][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.537893][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 69.550230][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 69.612886][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.619849][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.626518][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.634331][ T4188] Cannot create hsr debugfs directory [ 69.666436][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.673416][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.680591][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.688183][ T4192] Cannot create hsr debugfs directory [ 69.964582][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.977600][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.988443][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.002598][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.074312][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.084804][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.107835][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.120770][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.132135][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.144098][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.172491][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.211792][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.232765][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.246155][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.259345][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.285939][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.353799][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.397652][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.407771][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.418673][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.443364][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.459853][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.501549][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.511879][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.524178][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.543325][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.561255][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.569755][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.610749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.621103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.631779][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.639034][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.648107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.657929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.666790][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.673999][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.682123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.694577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.703396][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.710498][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.718693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.743398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.752020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.761453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.773413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.782483][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.789676][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.808361][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.825973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.835341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.870789][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.877999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.888458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.898222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.907892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.916368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.924627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.933995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.942917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.954519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.964142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.973698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.982454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.993369][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.005843][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.031490][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.043169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.061468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.071452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.079281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.087622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.098022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.108061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.117111][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.124249][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.146972][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.178284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.187220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.202773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.218064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.228600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.237380][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.244501][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.252734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.261734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.271308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.280509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.289051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.297831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.317727][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.326971][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.345808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.356514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.365622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.375662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.385056][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.392222][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.428049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.443426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.455901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.464794][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471943][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.481575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.490995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.499880][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.506995][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.517975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.527488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.537900][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.544099][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 71.545071][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.554307][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.562340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.565406][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.574764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.582156][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 71.589774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.602428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.611733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.620982][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 71.627110][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 71.627190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.633747][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 71.648886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.657213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.668967][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.679079][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.716202][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.729224][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.744333][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.755185][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.769138][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.784736][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.793649][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.803129][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.810838][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.818298][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.827235][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.835819][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.848342][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.861864][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.880016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.888658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.897676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.909167][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.926939][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.936695][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.982412][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.997531][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.005463][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.023173][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.032329][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.041639][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.051070][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.066850][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.097941][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.108877][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.125515][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.138691][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.148271][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.158269][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.189828][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.197756][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.219476][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.261862][ T4183] device veth0_vlan entered promiscuous mode [ 72.282858][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.291459][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.303034][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.312398][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.344050][ T4185] device veth0_vlan entered promiscuous mode [ 72.366571][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.376223][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.387634][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.396483][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.415915][ T4183] device veth1_vlan entered promiscuous mode [ 72.433477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.442502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.450464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.457970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.465951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.482779][ T4185] device veth1_vlan entered promiscuous mode [ 72.497362][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.516753][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.568882][ T4185] device veth0_macvtap entered promiscuous mode [ 72.578093][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.590233][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.598943][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.611485][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.621714][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.632316][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.642393][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.652404][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.660931][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.668443][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.677483][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.687437][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.704383][ T4183] device veth0_macvtap entered promiscuous mode [ 72.713983][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.728376][ T4185] device veth1_macvtap entered promiscuous mode [ 72.751611][ T4183] device veth1_macvtap entered promiscuous mode [ 72.768564][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.782530][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.794327][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.804987][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.820861][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.847775][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.883021][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.908548][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.921754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.932646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.942858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.951263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.961761][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.973642][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.985618][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.002304][ T4192] device veth0_vlan entered promiscuous mode [ 73.012172][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.022299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.032858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.042006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.052163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.077006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.086626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.099654][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.110572][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.122271][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.139309][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149611][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.158361][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.167431][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.198153][ T4192] device veth1_vlan entered promiscuous mode [ 73.205336][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.216282][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.225898][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.235007][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.244507][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.254989][ T4184] device veth0_vlan entered promiscuous mode [ 73.277451][ T4188] device veth0_vlan entered promiscuous mode [ 73.290120][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298853][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.309870][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318611][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.329075][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.337684][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.345881][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.354683][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.408656][ T4188] device veth1_vlan entered promiscuous mode [ 73.416652][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.428107][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.436493][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.446341][ T4184] device veth1_vlan entered promiscuous mode [ 73.543312][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.553422][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.562544][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.598292][ T4192] device veth0_macvtap entered promiscuous mode [ 73.608007][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.616707][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.626056][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 73.628248][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.632656][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 73.677683][ T4188] device veth0_macvtap entered promiscuous mode [ 73.695798][ T4184] device veth0_macvtap entered promiscuous mode [ 73.703512][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 73.710628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.712132][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 73.725387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.733874][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 73.734783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.749222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.764649][ T4192] device veth1_macvtap entered promiscuous mode [ 73.776176][ T4188] device veth1_macvtap entered promiscuous mode [ 73.786543][ T4184] device veth1_macvtap entered promiscuous mode [ 73.800055][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.820619][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.833070][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.844477][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.855116][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.866694][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.880590][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.904111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.913086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.921661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.932166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.941030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.950797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.966275][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.982286][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.992433][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.003357][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.015698][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.025552][ T852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.034381][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034620][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034650][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034677][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.072145][ T852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.090972][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.102588][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.115474][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.126341][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.137003][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.147825][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.160358][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.174349][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.191115][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.201223][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.211722][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.223436][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.235240][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.245319][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.257099][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.268689][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.276472][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.285609][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.294782][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.303906][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.314564][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.324085][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.338583][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.371540][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.386652][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.397574][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.408882][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.419892][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.430755][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.445270][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.455496][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.466428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.477310][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.488175][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.500854][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.511616][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.522166][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.532777][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.544406][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.573801][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.576297][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.591310][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.602976][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.612395][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.621487][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.630867][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.640998][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.650998][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.664124][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.675504][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.708764][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720074][ T852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.725515][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.728173][ T852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.746389][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755903][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795809][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.879239][ T852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.889110][ T852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.937938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.066705][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.103211][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.126329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.171403][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.181297][ T852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.210741][ T852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.221008][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.257394][ T4309] capability: warning: `syz.1.6' uses 32-bit capabilities (legacy support in use) [ 75.263767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.286462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.324154][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.324166][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.324220][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.380394][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.398917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.434402][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.681557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.691472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.930796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.939958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 75.949866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 76.081636][ T4250] Bluetooth: hci0: command 0x0419 tx timeout [ 76.549901][ T4250] Bluetooth: hci2: command 0x0419 tx timeout [ 76.558898][ T4250] Bluetooth: hci1: command 0x0419 tx timeout [ 76.565595][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 76.572325][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 76.816773][ T4324] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 76.823582][ T4324] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.832172][ T4324] vhci_hcd vhci_hcd.0: Device attached [ 76.922253][ T4330] vhci_hcd: connection closed [ 76.924232][ T4316] vhci_hcd: stop threads [ 76.977853][ T4316] vhci_hcd: release socket [ 76.993809][ T4316] vhci_hcd: disconnect device [ 77.041416][ T1108] vhci_hcd: vhci_device speed not set [ 77.371218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.524600][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.770278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.039418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.090546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.515264][ T4374] device veth0 entered promiscuous mode [ 79.552112][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 80.688784][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.141399][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.959447][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 82.253375][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 82.264942][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.275389][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.299496][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.325939][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.372431][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.538176][ T4407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 83.544851][ T4407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.552808][ T4407] vhci_hcd vhci_hcd.0: Device attached [ 83.989048][ T4406] device geneve2 entered promiscuous mode [ 84.049633][ T21] usb 2-1: usb_control_msg returned -71 [ 84.055824][ T21] usbtmc 2-1:16.0: can't read capabilities [ 84.074862][ T4410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.125053][ T4408] vhci_hcd: connection closed [ 84.125338][ T4413] vhci_hcd: stop threads [ 84.149053][ T4413] vhci_hcd: release socket [ 84.179514][ T4413] vhci_hcd: disconnect device [ 84.212077][ T21] usb 2-1: USB disconnect, device number 2 [ 84.229608][ T4411] vhci_hcd: vhci_device speed not set [ 84.440737][ T2303] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.649502][ T4426] fuse: Bad value for 'fd' [ 84.702370][ T4426] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.719743][ T2303] usb 5-1: Using ep0 maxpacket: 8 [ 84.748509][ T4426] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.789712][ T4426] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.817648][ T4426] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.850638][ T4426] device geneve2 entered promiscuous mode [ 84.860833][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 84.881337][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.915410][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 85.056341][ T4439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 85.063004][ T4439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.074502][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 85.131397][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.170862][ T4439] vhci_hcd vhci_hcd.0: Device attached [ 85.210849][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 85.349825][ T2303] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 85.365081][ T2303] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.426782][ T4445] 9pnet_virtio: no channels available for device syz [ 85.461757][ T4440] vhci_hcd: connection closed [ 85.463065][ T4352] vhci_hcd: stop threads [ 85.473096][ T2303] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 85.496503][ T4352] vhci_hcd: release socket [ 85.529903][ T4352] vhci_hcd: disconnect device [ 85.539951][ T4411] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 85.569852][ T2303] usb 5-1: string descriptor 0 read error: -71 [ 85.584711][ T2303] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.597706][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.780340][ T2303] usb 5-1: can't set config #168, error -71 [ 85.791727][ T2303] usb 5-1: USB disconnect, device number 2 [ 85.920442][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.013712][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 86.103598][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 86.132307][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 86.240620][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 86.257525][ T4459] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.297718][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 86.427048][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 86.904178][ T1111] cfg80211: failed to load regulatory.db [ 88.429379][ C1] sched: RT throttling activated [ 88.651895][ T4475] Zero length message leads to an empty skb [ 89.152645][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.181301][ T4487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.42'. [ 90.902161][ T4411] vhci_hcd: vhci_device speed not set [ 90.987260][ T4503] input: syz1 as /devices/virtual/input/input5 [ 91.240393][ T4506] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 91.746012][ T13] libceph: connect (1)[c::]:6789 error -101 [ 91.790018][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 91.798443][ T4513] ceph: No mds server is up or the cluster is laggy [ 92.004118][ T4528] ISOFS: Unable to identify CD-ROM format. [ 92.787119][ T1326] libceph: connect (1)[c::]:6789 error -101 [ 92.793411][ T1326] libceph: mon0 (1)[c::]:6789 connect error [ 93.085411][ T4531] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.119719][ T4531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.649342][ T4543] loop1: detected capacity change from 0 to 1024 [ 93.736136][ T4543] EXT4-fs (loop1): Ignoring removed orlov option [ 94.003576][ T4554] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 94.533971][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 94.668678][ T4563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 94.801503][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.811753][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.348207][ T4564] 9pnet: Could not find request transport: 0x0000000000000008 [ 96.429602][ T4573] comedi comedi3: aio_aio12_8: I/O port conflict (0xf,32) [ 96.615139][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.646843][ T4579] device batadv_slave_0 entered promiscuous mode [ 97.023327][ T4585] tipc: Started in network mode [ 97.080331][ T4585] tipc: Node identity da17d81a0592, cluster identity 4711 [ 97.106299][ T4585] tipc: Enabled bearer , priority 0 [ 97.885835][ T4591] device syzkaller0 entered promiscuous mode [ 98.096298][ T1111] tipc: Node number set to 3750090778 [ 98.240938][ T26] audit: type=1800 audit(1753951843.451:2): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.74" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 98.241335][ T4592] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 98.271288][ T4592] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 98.280877][ T4592] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 98.950591][ T4584] tipc: Resetting bearer [ 99.042160][ T4584] tipc: Disabling bearer [ 99.141021][ T4604] block device autoloading is deprecated and will be removed. [ 99.263587][ T4611] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 101.058329][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.102269][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 101.318628][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 101.429949][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 101.508538][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 101.551393][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 101.594975][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 101.615781][ T4626] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 101.650173][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 101.750951][ T4633] device gretap1 entered promiscuous mode [ 102.236430][ T4658] tipc: Started in network mode [ 103.022966][ T4658] tipc: Node identity ba992013c223, cluster identity 4711 [ 103.030567][ T4658] tipc: Enabled bearer , priority 0 [ 103.079895][ T4658] device syzkaller0 entered promiscuous mode [ 103.177268][ T4658] tipc: Resetting bearer [ 103.225268][ T4655] tipc: Resetting bearer [ 103.268824][ T4655] tipc: Disabling bearer [ 103.420307][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.709456][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 103.829890][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.860710][ T13] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.914939][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.945586][ T13] usb 2-1: config 0 descriptor?? [ 104.236747][ T13] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.439625][ T4683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.459538][ T4683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 104.759636][ T4323] usb 2-1: USB disconnect, device number 3 [ 104.874195][ T4692] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 104.906225][ T4683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.047297][ T4683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.469800][ T4698] block device autoloading is deprecated and will be removed. [ 105.674167][ T4683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.686705][ T4683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.916002][ T4683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.939452][ T4683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.989532][ T4250] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.259201][ T4683] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.289717][ T4683] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.351902][ T4683] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.371603][ T4683] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.405400][ T4683] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.419893][ T4250] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.435148][ T4683] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.451392][ T4250] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.498461][ T4250] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.503901][ T4683] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.526366][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.534865][ T4683] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.559641][ T4411] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.590936][ T4702] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.849470][ T4411] usb 4-1: Using ep0 maxpacket: 8 [ 106.989656][ T4411] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.016631][ T4411] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.025304][ T4250] usb 2-1: USB disconnect, device number 4 [ 107.038030][ T4728] binder: BINDER_SET_CONTEXT_MGR already set [ 107.066258][ T4411] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1 [ 107.082092][ T4728] binder: 4727:4728 ioctl 4018620d 2000000002c0 returned -16 [ 107.092262][ T4411] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.167947][ T4411] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.228418][ T4411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.559780][ T4411] usb 4-1: GET_CAPABILITIES returned 0 [ 107.566056][ T4411] usbtmc 4-1:16.0: can't read capabilities [ 107.773156][ T4250] usb 4-1: USB disconnect, device number 2 [ 109.019575][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.147995][ T4778] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.299462][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 110.069623][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.089521][ T4323] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.098818][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.114287][ T4323] usb 4-1: config 0 descriptor?? [ 110.383564][ T4323] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.591727][ T4800] 9pnet: Could not find request transport: fd0x0000000000000003 [ 110.599959][ T4438] usb 4-1: USB disconnect, device number 3 [ 111.756588][ T4819] sp0: Synchronizing with TNC [ 112.870481][ T4846] loop6: detected capacity change from 0 to 524287999 [ 112.971685][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 113.300523][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.312478][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 113.321047][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 113.332554][ C0] blk_update_request: I/O error, dev loop6, sector 1040 op 0x0:(READ) flags 0x80700 phys_seg 114 prio class 0 [ 113.430544][ T4855] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 116.392174][ T4885] netlink: 160 bytes leftover after parsing attributes in process `syz.1.133'. [ 116.455749][ T4888] tmpfs: Unknown parameter 'usrquota' [ 116.578232][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 116.762709][ T4894] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.771908][ T4894] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.780650][ T4894] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.789488][ T4894] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.926141][ T4894] device vxlan0 entered promiscuous mode [ 120.196726][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.204223][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.097460][ T4345] Bluetooth: hci5: Frame reassembly failed (-84) [ 121.472678][ T4972] program syz.3.155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.543179][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.622182][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.771239][ T4931] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.782453][ T4931] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.796118][ T4931] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.806461][ T4931] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.834603][ T4931] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.843872][ T4931] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.857376][ T4931] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.869174][ T4931] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.889740][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.897605][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.926289][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 121.949910][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 121.967828][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 121.975766][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 121.993160][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 122.003015][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 122.021139][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.039892][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.047931][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.060028][ T4970] device bridge_slave_0 left promiscuous mode [ 122.077415][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.115446][ T4970] device bridge_slave_1 left promiscuous mode [ 122.122852][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.144041][ T4970] bond0: (slave bond_slave_0): Releasing backup interface [ 122.167766][ T4970] bond0: (slave bond_slave_1): Releasing backup interface [ 122.256962][ T4970] team0: Port device team_slave_0 removed [ 122.285668][ T4970] team0: Port device team_slave_1 removed [ 122.301441][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.313780][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.323200][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.340343][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.409648][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 122.427681][ T7] usb 4-1: can't read configurations, error -71 [ 122.634032][ T4990] MPTCP: kernel_bind error, err=-22 [ 123.069453][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.129524][ T4198] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 124.039434][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 124.159792][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.193546][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.205780][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.227221][ T13] usb 3-1: config 0 descriptor?? [ 124.426129][ T5025] input: syz1 as /devices/virtual/input/input7 [ 124.476647][ T5027] netlink: 'syz.4.177': attribute type 10 has an invalid length. [ 124.491978][ T13] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.503430][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.510962][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.543350][ T5025] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 124.557395][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.564984][ T5027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.572514][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.579676][ T5027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.612357][ T5027] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.713113][ T1326] usb 3-1: USB disconnect, device number 2 [ 126.840802][ T5058] netlink: 6 bytes leftover after parsing attributes in process `syz.3.186'. [ 126.851896][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.927033][ T5058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.650359][ T5058] syz.3.186 (5058) used greatest stack depth: 19840 bytes left [ 127.785494][ T5068] netlink: 580 bytes leftover after parsing attributes in process `syz.2.189'. [ 128.604217][ T5071] overlayfs: failed to resolve './file0': -2 [ 129.089430][ T4978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.107376][ T5097] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.130221][ T4250] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.269986][ T5102] fuse: Bad value for 'fd' [ 129.329460][ T4978] usb 3-1: Using ep0 maxpacket: 8 [ 129.449709][ T4250] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 129.450271][ T4978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.539701][ T4978] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.549096][ T4978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.558930][ T5106] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.723939][ T4978] usb 3-1: config 0 descriptor?? [ 129.817515][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.222847][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.237112][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.270981][ T4978] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.319554][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.338306][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.359610][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.439720][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.480472][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.582282][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.644847][ T1326] usb 3-1: USB disconnect, device number 3 [ 130.720620][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.741220][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.758356][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.839715][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.858960][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.895960][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.989706][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.999152][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.010594][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.161490][ T4250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.411830][ T4250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.484570][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.810364][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 131.853942][ T1326] Bluetooth: hci1: command 0x0406 tx timeout [ 131.999536][ T4250] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 132.020666][ T4250] usb 2-1: can't read configurations, error -71 [ 132.975755][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.984974][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.694489][ T5140] device syzkaller0 entered promiscuous mode [ 135.729453][ T4978] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.749674][ T5153] 9pnet_virtio: no channels available for device syz [ 138.115708][ T4978] usb 2-1: unable to read config index 0 descriptor/all [ 138.129222][ T4978] usb 2-1: can't read configurations, error -71 [ 139.246242][ T5155] ALSA: mixer_oss: invalid OSS volume '' [ 139.889645][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.268107][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.325582][ T5178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 140.352863][ T26] audit: type=1326 audit(1753951885.561:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febd394e9a9 code=0x0 [ 140.379427][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 140.423503][ T26] audit: type=1326 audit(1753951885.611:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.475001][ T26] audit: type=1326 audit(1753951885.611:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.499864][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.505897][ T26] audit: type=1326 audit(1753951885.611:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.513460][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.555030][ T26] audit: type=1326 audit(1753951885.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.584394][ T5184] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.619602][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 140.637911][ T26] audit: type=1326 audit(1753951885.611:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.700310][ T26] audit: type=1326 audit(1753951885.611:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.714796][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.731507][ T26] audit: type=1326 audit(1753951885.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.758276][ T26] audit: type=1326 audit(1753951885.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.809871][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.816891][ T1108] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 140.828649][ T21] usb 5-1: config 0 descriptor?? [ 140.853619][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.872084][ T26] audit: type=1326 audit(1753951885.621:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd394e9a9 code=0x7ffc0000 [ 140.917090][ T1108] usb 3-1: config 0 descriptor?? [ 140.931667][ T5193] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 141.104262][ T21] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.253121][ T5201] Invalid ELF header magic: != ELF [ 141.410747][ T4978] usb 5-1: USB disconnect, device number 3 [ 141.423511][ T1108] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 142.911341][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 143.059421][ T21] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 143.122684][ T1108] usb 3-1: USB disconnect, device number 4 [ 143.385696][ T5212] kthread_run failed with err -4 [ 143.419804][ T21] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.427860][ T21] usb 4-1: config 0 has no interface number 0 [ 143.453595][ T21] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 143.492472][ T21] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 143.503632][ T21] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.512893][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.549819][ T21] usb 4-1: config 0 descriptor?? [ 143.743535][ T5205] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 143.772571][ T21] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.098888][ T4196] usb 4-1: USB disconnect, device number 6 [ 144.109400][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 144.419534][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.839486][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 144.959733][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.979700][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.996405][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.028112][ T21] usb 5-1: config 0 descriptor?? [ 145.097385][ T5259] process 'syz.1.250' launched './file2' with NULL argv: empty string added [ 145.293982][ T21] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 145.616427][ T21] usb 5-1: USB disconnect, device number 4 [ 146.128206][ T5279] ISOFS: Unable to identify CD-ROM format. [ 146.961420][ T5287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.969280][ T5287] IPv6: NLM_F_CREATE should be set when creating new route [ 146.976633][ T5287] IPv6: NLM_F_CREATE should be set when creating new route [ 147.001326][ T5285] capability: warning: `syz.2.258' uses deprecated v2 capabilities in a way that may be insecure [ 149.564556][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.136264][ T5315] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 150.179604][ T5315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.265'. [ 150.228160][ T5316] Invalid ELF header magic: != ELF [ 150.329835][ T1108] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.359427][ T1108] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.404151][ T5326] ======================================================= [ 150.404151][ T5326] WARNING: The mand mount option has been deprecated and [ 150.404151][ T5326] and is ignored by this kernel. Remove the mand [ 150.404151][ T5326] option from the mount to silence this warning. [ 150.404151][ T5326] ======================================================= [ 150.439103][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.446414][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.466810][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 150.503124][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 150.514988][ T5326] 9pnet_virtio: no channels available for device syz [ 150.529475][ T4978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.689911][ T1108] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.809620][ T4978] usb 4-1: Using ep0 maxpacket: 8 [ 151.538917][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.603856][ T1108] usb 3-1: Product: syz [ 151.608061][ T1108] usb 3-1: Manufacturer: syz [ 151.669534][ T4978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.708149][ T4978] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.738788][ T4978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.779616][ T1108] usb 3-1: can't set config #1, error -71 [ 151.788263][ T1108] usb 3-1: USB disconnect, device number 5 [ 152.156999][ T4978] usb 4-1: config 0 descriptor?? [ 152.408666][ T5344] netlink: 80 bytes leftover after parsing attributes in process `syz.4.275'. [ 152.643728][ T4978] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 153.124126][ T4978] usb 4-1: USB disconnect, device number 7 [ 156.876258][ T5390] tipc: Enabled bearer , priority 0 [ 156.886838][ T5390] device syzkaller0 entered promiscuous mode [ 156.906963][ T5390] tipc: Resetting bearer [ 156.917008][ T5389] tipc: Resetting bearer [ 156.953114][ T5389] tipc: Disabling bearer [ 157.620416][ T5402] netlink: 2 bytes leftover after parsing attributes in process `syz.1.296'. [ 158.811793][ T5424] 9pnet_virtio: no channels available for device syz [ 159.658737][ T5437] 9pnet_virtio: no channels available for device syz [ 159.709986][ T5439] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 159.739622][ T4977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.999994][ T4977] usb 4-1: Using ep0 maxpacket: 8 [ 160.079735][ T4978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.130680][ T4977] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 160.147301][ T4977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.172960][ T4977] usb 4-1: config 0 has no interfaces? [ 160.177512][ T5456] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 160.178914][ T4977] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 160.349569][ T4978] usb 2-1: Using ep0 maxpacket: 8 [ 160.739600][ T4977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.806961][ T4977] usb 4-1: config 0 descriptor?? [ 160.850023][ T4978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.896535][ T4978] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.928240][ T4978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.960161][ T4978] usb 2-1: config 0 descriptor?? [ 161.172225][ T5469] input: syz0 as /devices/virtual/input/input9 [ 161.241699][ T4978] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.462881][ T1326] usb 2-1: USB disconnect, device number 9 [ 162.243297][ T5491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.514480][ T5503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.550839][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.563881][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.564274][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.567960][ T5503] device bridge_slave_0 left promiscuous mode [ 162.568202][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.577433][ T5503] device bridge_slave_1 left promiscuous mode [ 162.577766][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.586582][ T5503] bond0: (slave bond_slave_0): Releasing backup interface [ 162.669260][ T5506] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 162.671181][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 162.684728][ T5503] bond0: (slave bond_slave_1): Releasing backup interface [ 162.792495][ T5503] team0: Port device team_slave_0 removed [ 162.850195][ T5503] team0: Port device team_slave_1 removed [ 162.851939][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.852035][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.855637][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.855722][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.909560][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.129736][ T1326] Bluetooth: hci5: command 0x1003 tx timeout [ 163.129899][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 163.155642][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 163.269686][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.269740][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.269766][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.276859][ T1108] usb 5-1: config 0 descriptor?? [ 163.335479][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 163.604183][ T1108] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.831976][ T1108] usb 5-1: USB disconnect, device number 5 [ 164.354450][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 164.539799][ T5525] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 165.209616][ T4250] Bluetooth: hci5: command 0x1001 tx timeout [ 165.216739][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 165.624589][ T5543] tipc: Enabled bearer , priority 0 [ 165.632944][ T5543] device syzkaller0 entered promiscuous mode [ 165.678796][ T5543] tipc: Resetting bearer [ 165.700762][ T5542] tipc: Resetting bearer [ 165.720922][ T5542] tipc: Disabling bearer [ 166.273382][ T5552] nftables ruleset with unbound chain [ 167.005033][ T5572] tmpfs: Unknown parameter 'usrquota' [ 167.289629][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 168.014242][ T5582] Illegal XDP return value 471201843, expect packet loss! [ 168.112311][ T5584] binder: 5583:5584 ioctl c00c6211 0 returned -22 [ 168.324154][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 168.600194][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 168.970567][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 169.205481][ T5602] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 170.137691][ T5609] binder: 5608:5609 ioctl c00c620f 0 returned -14 [ 171.159786][ T4977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.180898][ T5639] ksmbd: Unknown IPC event: 6, ignore. [ 171.479205][ T5643] syz.2.383 uses obsolete (PF_INET,SOCK_PACKET) [ 171.486035][ T4977] usb 2-1: Using ep0 maxpacket: 8 [ 171.609654][ T4977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.639474][ T4977] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.645588][ T1108] usb 4-1: USB disconnect, device number 8 [ 171.648758][ T4977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.686388][ T4977] usb 2-1: config 0 descriptor?? [ 171.951049][ T4977] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 172.077944][ T5654] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 172.084528][ T5654] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.107171][ T5654] vhci_hcd vhci_hcd.0: Device attached [ 172.170405][ T1108] usb 2-1: USB disconnect, device number 10 [ 172.369479][ T4977] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 172.719421][ T4978] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 173.161909][ T4978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.205067][ T4978] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 173.237066][ T4978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.267007][ T4978] usb 4-1: config 0 descriptor?? [ 173.559959][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.899725][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 173.919581][ T4978] usbhid 4-1:0.0: can't add hid device: -71 [ 173.936658][ T4978] usbhid: probe of 4-1:0.0 failed with error -71 [ 174.008809][ T4978] usb 4-1: USB disconnect, device number 9 [ 174.050070][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.172367][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.373769][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1 [ 174.429563][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.476414][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.516460][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.693074][ T4978] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 174.839549][ T1108] usb 3-1: GET_CAPABILITIES returned 0 [ 174.845193][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 174.939471][ T4978] usb 4-1: Using ep0 maxpacket: 8 [ 175.042025][ T1108] usb 3-1: USB disconnect, device number 6 [ 175.059980][ T4978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.081184][ T4978] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.096088][ T4978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.126497][ T4978] usb 4-1: config 0 descriptor?? [ 175.391243][ T4978] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.415217][ T5699] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 175.770368][ T5655] vhci_hcd: connection reset by peer [ 175.770751][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 175.795264][ T1262] vhci_hcd: stop threads [ 175.799904][ T1262] vhci_hcd: release socket [ 175.815469][ T1262] vhci_hcd: disconnect device [ 175.850329][ T1108] usb 4-1: USB disconnect, device number 10 [ 175.889515][ T23] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 176.217812][ T5718] ubi31: attaching mtd0 [ 176.235721][ T5718] ubi31: scanning is finished [ 176.240550][ T5718] ubi31: empty MTD device detected [ 176.270188][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 176.319466][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.331165][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 176.537337][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 176.547349][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.558410][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 176.587429][ T5718] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 178.275616][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 178.283452][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 178.294343][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 178.359611][ T4977] vhci_hcd: vhci_device speed not set [ 178.594297][ T23] usb 2-1: string descriptor 0 read error: -22 [ 178.601691][ T23] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 178.611462][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.679868][ T23] usb 2-1: can't set config #168, error -71 [ 178.719663][ T23] usb 2-1: USB disconnect, device number 11 [ 178.820836][ T5734] device syzkaller0 entered promiscuous mode [ 178.979487][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.249411][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 179.259442][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 179.379694][ T1108] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 179.401102][ T1108] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.493288][ T1108] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 179.539298][ T5743] binder: 5742:5743 unknown command 0 [ 179.549704][ T5743] binder: 5742:5743 ioctl c0306201 200000000080 returned -22 [ 179.609641][ T1108] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 179.617246][ T1108] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.619708][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 179.698608][ T1108] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 179.704934][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.839775][ T1108] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 179.847885][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.878892][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.889453][ T1108] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 179.918960][ T23] usb 2-1: config 0 descriptor?? [ 179.938014][ T1108] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 179.993014][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 180.200106][ T1108] usb 4-1: string descriptor 0 read error: -22 [ 180.212237][ T1108] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.269109][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.430182][ T1108] adutux 4-1:168.0: interrupt endpoints not found [ 180.539628][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.694036][ T1108] usb 4-1: USB disconnect, device number 11 [ 180.809578][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 180.949946][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.079265][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.121738][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.147105][ T13] usb 3-1: config 0 descriptor?? [ 181.357127][ T23] usb 2-1: USB disconnect, device number 12 [ 181.437046][ T13] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 181.710732][ T13] usb 3-1: USB disconnect, device number 7 [ 182.917118][ T5777] 9pnet_virtio: no channels available for device syz [ 183.161025][ T5787] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.194269][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 183.757396][ T5799] lo speed is unknown, defaulting to 1000 [ 183.763802][ T5799] lo speed is unknown, defaulting to 1000 [ 183.769952][ T5799] lo speed is unknown, defaulting to 1000 [ 183.780101][ T5799] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.798908][ T5799] lo speed is unknown, defaulting to 1000 [ 183.807081][ T5799] lo speed is unknown, defaulting to 1000 [ 183.813662][ T5799] lo speed is unknown, defaulting to 1000 [ 183.820193][ T5799] lo speed is unknown, defaulting to 1000 [ 183.826736][ T5799] lo speed is unknown, defaulting to 1000 [ 186.172229][ T5822] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 186.191505][ T4250] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.459633][ T4250] usb 5-1: Using ep0 maxpacket: 8 [ 187.869654][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.934278][ T4250] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.012330][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.168405][ T4250] usb 5-1: config 0 descriptor?? [ 188.360311][ T5830] lo speed is unknown, defaulting to 1000 [ 188.512892][ T4250] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 188.733987][ T4250] usb 5-1: USB disconnect, device number 6 [ 189.950793][ T4198] ------------[ cut here ]------------ [ 189.956855][ T4198] WARNING: CPU: 0 PID: 4198 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.966824][ T4198] Modules linked in: [ 189.970803][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:5 Not tainted 5.15.189-syzkaller #0 [ 189.979160][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.004975][ T4198] Workqueue: hci1 hci_conn_timeout [ 190.010278][ T4198] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 190.016012][ T4198] Code: 69 8d e8 b4 4b f1 f8 48 8b 35 25 93 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 29 82 f8 e8 51 e8 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 190.037385][ T4198] RSP: 0018:ffffc900023b7c08 EFLAGS: 00010293 [ 190.043675][ T4198] RAX: ffffffff88cadbcf RBX: ffff888019df0138 RCX: ffff88807422d940 [ 190.051758][ T4198] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 190.060317][ T4198] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed10033be003 [ 190.368344][ T23] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 190.377469][ T23] Bluetooth: hci2: Injecting HCI hardware error event [ 190.414034][ T4191] Bluetooth: hci2: hardware error 0x00 [ 190.513598][ T4198] R10: ffffed10033be003 R11: 1ffff110033be002 R12: dffffc0000000000 [ 190.549411][ T4198] R13: dffffc0000000000 R14: ffff888019df0000 R15: ffff888019df0010 [ 190.557567][ T4198] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 190.566654][ T4198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.581820][ T4198] CR2: 0000555565d50808 CR3: 0000000072c01000 CR4: 00000000003506e0 [ 190.589948][ T4198] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.598253][ T4198] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.606362][ T4198] Call Trace: [ 190.609786][ T4198] [ 190.612730][ T4198] process_one_work+0x863/0x1000 [ 190.617991][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 190.623721][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 190.629028][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 190.634372][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 190.639860][ T4198] ? wq_worker_running+0x97/0x170 [ 190.644936][ T4198] worker_thread+0xaa8/0x12a0 [ 190.649841][ T4198] kthread+0x436/0x520 [ 190.654011][ T4198] ? rcu_lock_release+0x20/0x20 [ 190.658875][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 190.663567][ T4198] ret_from_fork+0x1f/0x30 [ 190.668046][ T4198] [ 190.671173][ T4198] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.678477][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted 5.15.189-syzkaller #0 [ 190.686839][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.696901][ T4198] Workqueue: hci1 hci_conn_timeout [ 190.702126][ T4198] Call Trace: [ 190.705424][ T4198] [ 190.708361][ T4198] dump_stack_lvl+0x168/0x230 [ 190.713057][ T4198] ? show_regs_print_info+0x20/0x20 [ 190.718271][ T4198] ? load_image+0x3b0/0x3b0 [ 190.722794][ T4198] panic+0x2c9/0x7f0 [ 190.726715][ T4198] ? bpf_jit_dump+0xd0/0xd0 [ 190.731240][ T4198] ? ret_from_fork+0x1f/0x30 [ 190.735848][ T4198] ? hci_conn_timeout+0x24f/0x450 [ 190.740877][ T4198] __warn+0x248/0x2b0 [ 190.744865][ T4198] ? hci_conn_timeout+0x24f/0x450 [ 190.749897][ T4198] report_bug+0x1b7/0x2e0 [ 190.754239][ T4198] handle_bug+0x3a/0x70 [ 190.758408][ T4198] exc_invalid_op+0x16/0x40 [ 190.762922][ T4198] asm_exc_invalid_op+0x16/0x20 [ 190.767781][ T4198] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 190.773418][ T4198] Code: 69 8d e8 b4 4b f1 f8 48 8b 35 25 93 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 29 82 f8 e8 51 e8 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 190.793348][ T4198] RSP: 0018:ffffc900023b7c08 EFLAGS: 00010293 [ 190.799450][ T4198] RAX: ffffffff88cadbcf RBX: ffff888019df0138 RCX: ffff88807422d940 [ 190.807445][ T4198] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 190.815422][ T4198] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed10033be003 [ 190.823410][ T4198] R10: ffffed10033be003 R11: 1ffff110033be002 R12: dffffc0000000000 [ 190.831460][ T4198] R13: dffffc0000000000 R14: ffff888019df0000 R15: ffff888019df0010 [ 190.839470][ T4198] ? hci_conn_timeout+0x24f/0x450 [ 190.844544][ T4198] ? hci_conn_timeout+0x24f/0x450 [ 190.849580][ T4198] process_one_work+0x863/0x1000 [ 190.854538][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 190.860311][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 190.865630][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 190.870668][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 190.876072][ T4198] ? wq_worker_running+0x97/0x170 [ 190.881373][ T4198] worker_thread+0xaa8/0x12a0 [ 190.886080][ T4198] kthread+0x436/0x520 [ 190.890167][ T4198] ? rcu_lock_release+0x20/0x20 [ 190.895019][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 190.899622][ T4198] ret_from_fork+0x1f/0x30 [ 190.904164][ T4198] [ 190.907532][ T4198] Kernel Offset: disabled [ 190.912199][ T4198] Rebooting in 86400 seconds..