last executing test programs: 14.465635536s ago: executing program 3 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xff7f000000000000, 0x0) 12.789462684s ago: executing program 3 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) 11.018042445s ago: executing program 3 (id=672): setreuid(0x0, 0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 10.845251912s ago: executing program 3 (id=675): socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mq_notify(0xffffffffffffffff, 0x0) creat(0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 10.773131146s ago: executing program 1 (id=676): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.100745073s ago: executing program 3 (id=677): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x803, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 7.968679885s ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setgroups(0xefff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x700}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1d7", 0x3}], 0x1}}], 0x20, 0x10081) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) 7.916704117s ago: executing program 4 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xff7f000000000000, 0x0) 5.65879219s ago: executing program 1 (id=687): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x2, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5.299220037s ago: executing program 1 (id=689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, r0, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) listen(r0, 0xffffffff) 5.259677429s ago: executing program 4 (id=691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xff7f000000000000, 0x0) 4.316874392s ago: executing program 1 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200440e0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x1}}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) r5 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000962313827b7c870c0000002a9000070000000083"], 0x0}, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x448d5}, 0x4000000) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000040)="c35f", 0x2}], 0x1) writev(r2, 0x0, 0x0) 4.303819133s ago: executing program 4 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="85820528c32ef8bdfcaf925ed8b87c82d543b54a8dfd870b12d8e35da72ca1b0054905cabfe96f752e0bccc2078abbd6d9c9309834cceba35fac931bf01ef0991e0e0ea292937dbfa714c9e599064d1c25e4", 0xffffffe4}], 0x31, 0x1400, 0x0, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) 4.184696048s ago: executing program 0 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) unshare(0x4020400) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r4, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 3.898030302s ago: executing program 4 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x9edd5782728076f1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 3.897829981s ago: executing program 2 (id=699): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(&(0x7f00000001c0), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2a, 0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701040000000000000000000000000900010073797a310000000013918afccdcf79d73143b5b9d6374198876f18876b2f291bea6e5a620978f5df71d4453afd5451e50e8bd55387d33b5530ccc1492215d7818fc9b330526e8cd3456ad84880ff730389b8636c7d74e9efa2f1606dd571c95ba9c429c784511a6e7f1eebe1"], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x5014) 2.656697478s ago: executing program 0 (id=700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c7555", 0x45, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2.656474268s ago: executing program 4 (id=701): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xa000000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 2.40875865s ago: executing program 2 (id=702): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xff7f000000000000, 0x0) 2.19265083s ago: executing program 3 (id=703): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x29, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400"/471], 0x258) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 1.235142684s ago: executing program 0 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000130001002abd7000fedbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000a0790000080013"], 0x3c}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) 1.141618528s ago: executing program 4 (id=705): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xff7f000000000000, 0x0) 928.291468ms ago: executing program 2 (id=706): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109002, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 622.282991ms ago: executing program 0 (id=707): r0 = open(&(0x7f0000000000)='.\x00', 0x80800, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 622.127581ms ago: executing program 2 (id=708): add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000000)="30000000000000000a126183020307000000982b8f57fb20a392ce0500", 0x1d, 0xfffffffffffffffe) 622.055912ms ago: executing program 2 (id=709): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 579.024824ms ago: executing program 0 (id=710): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x57}}], 0x18}}], 0x1, 0x4040800) 39.542429ms ago: executing program 2 (id=711): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xa7, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff5}, 0x1c, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x4800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x200, 0x200, 0x2d0, 0x410, 0x410, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0x0, 0xff], [0xffffffff, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0xf5, 0x3, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8, 0xfffffffd, 0x5d7, 0x7ae2, 0x0, 0x2, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'vlan0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5c, 0xa, 0x1, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x82}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xff000000, 0x0, 0xffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'macvtap0\x00', 'veth1\x00', {}, {0x7f}, 0x62, 0x3, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@broadcast, 0x3, 0x21}}}, {{@ipv6={@local, @remote, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xffffff00], 'dvmrp1\x00', 'geneve0\x00', {}, {0xff}, 0x2b, 0x9, 0x0, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd, 0x40, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$I2C(&(0x7f0000003980), 0x0, 0x80801) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) 39.346159ms ago: executing program 0 (id=712): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/4, 0x4}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 1 (id=713): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 51.922269][ T4170] cgroup: Unknown subsys name 'net' [ 52.057943][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.611518][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.470786][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 55.492326][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 55.636793][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.647301][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.655330][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.672228][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.679525][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.687585][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.711990][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.719270][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.727551][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.735316][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 55.745305][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.752370][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.760371][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.796599][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 55.831437][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.843072][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 55.859594][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.875771][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.886263][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.959566][ T4182] team0: Port device team_slave_0 added [ 55.967947][ T4183] team0: Port device team_slave_0 added [ 55.985318][ T4182] team0: Port device team_slave_1 added [ 55.996578][ T4183] team0: Port device team_slave_1 added [ 56.066209][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.073460][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.081221][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.089198][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.096608][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.104554][ T4181] device bridge_slave_0 entered promiscuous mode [ 56.120172][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.127378][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.153325][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.165677][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.173154][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.199204][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.210401][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.217739][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.225945][ T4195] device bridge_slave_1 entered promiscuous mode [ 56.233237][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.240301][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.249089][ T4181] device bridge_slave_1 entered promiscuous mode [ 56.263880][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.270857][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.297026][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.308924][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.316117][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.342081][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.366818][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.374035][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.381781][ T4192] device bridge_slave_0 entered promiscuous mode [ 56.427195][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.434581][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.442340][ T4192] device bridge_slave_1 entered promiscuous mode [ 56.462019][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.468889][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.477791][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.493389][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.520429][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.531095][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.543070][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.564689][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.603254][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.611854][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.620829][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.628775][ T4183] Cannot create hsr debugfs directory [ 56.668363][ T4195] team0: Port device team_slave_0 added [ 56.679381][ T4195] team0: Port device team_slave_1 added [ 56.700087][ T4192] team0: Port device team_slave_0 added [ 56.708327][ T4181] team0: Port device team_slave_0 added [ 56.738958][ T4192] team0: Port device team_slave_1 added [ 56.746215][ T4181] team0: Port device team_slave_1 added [ 56.764497][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.771486][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.797681][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.834789][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.841794][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.870160][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.887346][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.894534][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.921522][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.944426][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.951490][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.977944][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.989564][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.996748][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.023126][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.062989][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.069968][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.096774][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.133598][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 57.189606][ T4192] device hsr_slave_0 entered promiscuous mode [ 57.196646][ T4192] device hsr_slave_1 entered promiscuous mode [ 57.203459][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.211015][ T4192] Cannot create hsr debugfs directory [ 57.213478][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 57.216893][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 57.232800][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 57.239041][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 57.250167][ T4195] device hsr_slave_0 entered promiscuous mode [ 57.257091][ T4195] device hsr_slave_1 entered promiscuous mode [ 57.266758][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.274655][ T4195] Cannot create hsr debugfs directory [ 57.300879][ T4181] device hsr_slave_0 entered promiscuous mode [ 57.310567][ T4181] device hsr_slave_1 entered promiscuous mode [ 57.317290][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.328033][ T4181] Cannot create hsr debugfs directory [ 57.499683][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.513724][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.538875][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.550343][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.592214][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.608010][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.629155][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.641235][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.673241][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.706073][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.716765][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.743562][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.796060][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.806094][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.829545][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.867251][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.899936][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.911405][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.941732][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.952095][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.964532][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.977148][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.994598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.007042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.027673][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.041607][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.054539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.062322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.087935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.098755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.108980][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.116203][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.139804][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.148581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.157794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.166865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.176235][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.183371][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.192094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.232090][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.241063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.251218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.261586][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.268717][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.280022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.289384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.297924][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.304979][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.312756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.321290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.330932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.340075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.348826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.358702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.367600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.376175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.387964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.396508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.404642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.412403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.458771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.468008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.479486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.488545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.498012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.506818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.515513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.524638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.533299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.541652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.550869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.560661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.569361][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.576460][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.585862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.594575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.603348][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.610407][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.618394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.627390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.640682][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.682960][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.703689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.712262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.727669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.737600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.747313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.756182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.764526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.772226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.781537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.791532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.805680][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.820475][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.831834][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.853141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.874639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.896213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.923681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.963395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.971191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.981702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.997477][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.004651][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.014066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.023926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.032295][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.039381][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.047917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.057427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.082228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.097500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.110881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.125559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.150019][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.163739][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.170878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.186509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.199455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.211271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.219977][ T4223] Bluetooth: hci1: command 0x041b tx timeout [ 59.237266][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.249763][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.269639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.278845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.287728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.295932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.303058][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 59.303504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.312548][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 59.318756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.327671][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 59.335788][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.343749][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 59.358451][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.374868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.388571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.397280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.405455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.413064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.449311][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.457299][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.469093][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.478343][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.487914][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.496900][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.504011][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.511812][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.521633][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.530237][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.537339][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.545238][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.554528][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.620333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.629606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.638738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.648181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.657088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.665804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.674326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.682925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.691793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.701097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.716450][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.726130][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.736121][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.744493][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.754029][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.763662][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.795298][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.808351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.819085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.826936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.836435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.845475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.854476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.862818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.870606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.880089][ T4192] device veth0_vlan entered promiscuous mode [ 59.888087][ T4182] device veth0_vlan entered promiscuous mode [ 59.906549][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.920007][ T4192] device veth1_vlan entered promiscuous mode [ 59.947097][ T4182] device veth1_vlan entered promiscuous mode [ 59.961756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.976377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.988621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.008751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.043584][ T4183] device veth0_vlan entered promiscuous mode [ 60.068651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.096107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.128698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.137305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.151169][ T4183] device veth1_vlan entered promiscuous mode [ 60.170718][ T4182] device veth0_macvtap entered promiscuous mode [ 60.189792][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.199906][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.217016][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.230076][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.242360][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.253702][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.261186][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.268977][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.284655][ T4182] device veth1_macvtap entered promiscuous mode [ 60.295002][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.310766][ T4192] device veth0_macvtap entered promiscuous mode [ 60.322209][ T4192] device veth1_macvtap entered promiscuous mode [ 60.345789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.354851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.363794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.371836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.380520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.389602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.408469][ T4183] device veth0_macvtap entered promiscuous mode [ 60.428878][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.440878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.450040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.459967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.469544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.478603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.488611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.498614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.510678][ T4183] device veth1_macvtap entered promiscuous mode [ 60.523472][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.548216][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.556934][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.565925][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.585104][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.595306][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.604422][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613425][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.629241][ T4195] device veth0_vlan entered promiscuous mode [ 60.637189][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.648645][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.664038][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.676602][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.687747][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.697851][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.710635][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.722790][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.733213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.742353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.752211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.761504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.770833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.779193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.787438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.796287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.805299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.814202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.822101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.830162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.841281][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.851952][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.864011][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.874408][ T4181] device veth0_vlan entered promiscuous mode [ 60.895709][ T4195] device veth1_vlan entered promiscuous mode [ 60.912666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.924818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.935132][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.946046][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.957690][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.968405][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.980854][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.990875][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.999753][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.008752][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.017562][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.044455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.063446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.078609][ T4181] device veth1_vlan entered promiscuous mode [ 61.089043][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.098697][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108580][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.117581][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.192018][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.201770][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.214236][ T4195] device veth0_macvtap entered promiscuous mode [ 61.264984][ T4195] device veth1_macvtap entered promiscuous mode [ 61.284974][ T4181] device veth0_macvtap entered promiscuous mode [ 61.300077][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.307763][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.309144][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.316346][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 61.329659][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.338326][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.348088][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.357124][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.366880][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.386123][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 61.390784][ T4181] device veth1_macvtap entered promiscuous mode [ 61.408239][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 61.422226][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 61.437927][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 61.449596][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.451791][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.468004][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.474922][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.486692][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.497440][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.507611][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.518091][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.529408][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.542399][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.554285][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.564432][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.575051][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.585728][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.596247][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.606141][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.616798][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.627851][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.643175][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.657474][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.665575][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.677572][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.686477][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.695546][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.710286][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.721414][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.731365][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.742165][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.752056][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.763355][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.781000][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.790969][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.801891][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.811998][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.822789][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.832884][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.843594][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.854291][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.865273][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.876239][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.891975][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.902811][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.911505][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.920640][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.936194][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.945007][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.954716][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.963488][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.975381][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.984295][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.993402][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.002099][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.030725][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.048498][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.102725][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.113672][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.134371][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.140038][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.142340][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.155656][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.168395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.180743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.191129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.330770][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.356495][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.368332][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.383433][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.421123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.443346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.021868][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.198677][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.282504][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.432436][ C0] sched: RT throttling activated [ 63.441024][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 63.564672][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.611132][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.653297][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 63.661475][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 63.667690][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 63.674672][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 63.690391][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.703398][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.782699][ T4258] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.950332][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.960116][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.971692][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.989491][ T4321] device bridge_slave_0 left promiscuous mode [ 64.009390][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.077489][ T4321] device bridge_slave_1 left promiscuous mode [ 64.107824][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.187041][ T4321] bond0: (slave bond_slave_0): Releasing backup interface [ 64.201693][ T4321] bond0: (slave bond_slave_1): Releasing backup interface [ 64.209574][ T4291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.263856][ T4321] team0: Port device team_slave_0 removed [ 64.472958][ T4291] usb 5-1: Using ep0 maxpacket: 8 [ 64.663660][ T4291] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.852722][ T4259] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.860583][ T4291] usb 5-1: config 4 interface 0 has no altsetting 0 [ 64.874698][ T4321] team0: Port device team_slave_1 removed [ 64.912102][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.926628][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.940817][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.952585][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.002783][ T4258] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 65.015137][ T4258] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.029375][ T4258] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.032773][ T4291] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 65.042988][ T4258] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.058532][ T4323] team0: Mode changed to "loadbalance" [ 65.067501][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.076679][ T4291] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 65.101161][ T4291] usb 5-1: Manufacturer: syz [ 65.117558][ T4291] usb 5-1: SerialNumber: syz [ 65.168836][ T4258] usb 1-1: invalid MIDI out EP 0 [ 65.258457][ T4258] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 65.411690][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.430665][ T4291] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 65.438729][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.982064][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.407060][ T4291] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 66.418074][ T4259] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 66.427590][ T4291] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 66.435886][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.444491][ T4291] usb 5-1: media controller created [ 66.465054][ T4259] usb 2-1: config 0 descriptor?? [ 66.515576][ T4291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.542795][ T4290] usb 1-1: USB disconnect, device number 2 [ 66.740498][ T4291] zl10353_read_register: readreg error (reg=127, ret==0) [ 66.829928][ T4291] usb 5-1: USB disconnect, device number 2 [ 66.962722][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.434980][ T4328] udc-core: couldn't find an available UDC or it's busy [ 67.462716][ T4328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.502662][ T4328] udc-core: couldn't find an available UDC or it's busy [ 67.512908][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.518281][ T4259] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 67.534199][ T4259] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 67.556528][ T4328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.578321][ T4259] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input5 [ 67.586985][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.627008][ T4258] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.641373][ T4258] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.642243][ T4259] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 67.652113][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.702292][ T4258] usb 3-1: config 0 descriptor?? [ 67.731736][ T4259] usb 2-1: USB disconnect, device number 2 [ 68.023085][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.036054][ T4363] fido_id[4363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 68.724869][ T4258] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 68.791545][ T4258] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.972708][ T4291] usb 5-1: Using ep0 maxpacket: 8 [ 68.993539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 69.006439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 69.022464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.085828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 69.094957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 69.103949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.113026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.122461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.131551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.140664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.913829][ T4258] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.263121][ T4238] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 70.357925][ T4378] Zero length message leads to an empty skb [ 70.413939][ T4258] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 70.431853][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.488672][ T4258] usb 4-1: config 0 descriptor?? [ 70.534620][ T4258] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 70.552669][ T4291] usb 5-1: unable to read config index 0 descriptor/all [ 70.559873][ T4291] usb 5-1: can't read configurations, error -71 [ 70.742688][ T4258] gp8psk: usb in 128 operation failed. [ 70.782422][ T4396] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 70.789187][ T4396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.824460][ T4396] vhci_hcd vhci_hcd.0: Device attached [ 70.834632][ T4401] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 70.841231][ T4401] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.105380][ T4401] vhci_hcd vhci_hcd.0: Device attached [ 71.128471][ T4258] gp8psk: usb in 146 operation failed. [ 71.153567][ T4258] gp8psk: failed to get FW version [ 71.582848][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.591996][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.623634][ T1107] usb 3-1: USB disconnect, device number 2 [ 71.652718][ T4410] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 71.659304][ T4410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.669287][ T4258] gp8psk: usb in 149 operation failed. [ 71.676726][ T4258] gp8psk: failed to get FPGA version [ 71.693885][ T4410] vhci_hcd vhci_hcd.0: Device attached [ 71.702693][ T4258] gp8psk: usb in 138 operation failed. [ 71.730432][ T4397] vhci_hcd: connection closed [ 71.733659][ T4303] vhci_hcd: stop threads [ 71.746063][ T4258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.765383][ T4231] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 71.776627][ T4404] vhci_hcd: connection closed [ 71.803504][ T4303] vhci_hcd: release socket [ 71.863912][ T4258] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 71.873999][ T4303] vhci_hcd: disconnect device [ 71.880852][ T4303] vhci_hcd: stop threads [ 71.885512][ T4303] vhci_hcd: release socket [ 71.890021][ T4303] vhci_hcd: disconnect device [ 71.901750][ T4415] netlink: 51 bytes leftover after parsing attributes in process `syz.1.31'. [ 71.901881][ T4411] vhci_hcd: connection closed [ 71.915363][ T4303] vhci_hcd: stop threads [ 71.928291][ T4258] usb 4-1: media controller created [ 71.932068][ T4303] vhci_hcd: release socket [ 71.938470][ T4303] vhci_hcd: disconnect device [ 71.982209][ T4258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.021651][ T4258] gp8psk_fe: Frontend attached [ 72.028827][ T4258] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 72.040194][ T4258] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 72.127445][ T4258] gp8psk: usb in 138 operation failed. [ 72.139025][ T4258] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 72.174908][ T4258] gp8psk: found Genpix USB device pID = 203 (hex) [ 72.207716][ T4258] usb 4-1: USB disconnect, device number 2 [ 72.412569][ T4291] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.154432][ T4258] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 74.005881][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.163169][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.173630][ T4291] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 74.201544][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.212092][ T4291] usb 5-1: config 0 descriptor?? [ 74.427367][ T4462] binder: 4459:4462 ioctl c0306201 0 returned -14 [ 74.780377][ T4291] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 74.949675][ T4291] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 75.176679][ T4449] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.196309][ T4419] udc-core: couldn't find an available UDC or it's busy [ 75.236593][ T4291] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input7 [ 75.256229][ T4419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.360587][ T4419] udc-core: couldn't find an available UDC or it's busy [ 75.380074][ T4419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.473180][ T4291] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 75.488882][ T4291] usb 5-1: USB disconnect, device number 5 [ 76.824831][ T4449] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.910804][ T4449] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.962523][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.075841][ T4231] vhci_hcd: vhci_device speed not set [ 77.092377][ T4487] fido_id[4487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 77.155547][ T4449] usb 1-1: config 0 descriptor?? [ 77.192892][ T4449] usb 1-1: can't set config #0, error -71 [ 77.542714][ T4449] usb 1-1: USB disconnect, device number 3 [ 77.950147][ T4505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 77.956730][ T4505] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.022937][ T4505] vhci_hcd vhci_hcd.0: Device attached [ 78.061436][ T4510] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 78.068009][ T4510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.161238][ T4510] vhci_hcd vhci_hcd.0: Device attached [ 78.203159][ T4511] vhci_hcd: connection closed [ 78.203271][ T4507] vhci_hcd: connection closed [ 78.203436][ T1158] vhci_hcd: stop threads [ 78.250969][ T1158] vhci_hcd: release socket [ 78.263013][ T4291] vhci_hcd: vhci_device speed not set [ 78.269191][ T1158] vhci_hcd: disconnect device [ 78.274853][ T1158] vhci_hcd: stop threads [ 78.279222][ T1158] vhci_hcd: release socket [ 78.299413][ T1158] vhci_hcd: disconnect device [ 78.354696][ T4291] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 78.366906][ T4291] usb 35-1: enqueue for inactive port 0 [ 78.462550][ T4291] vhci_hcd: vhci_device speed not set [ 78.480678][ T4523] tipc: Can't bind to reserved service type 0 [ 81.472617][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.507342][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 81.679974][ T1110] cfg80211: failed to load regulatory.db [ 81.712755][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 82.272869][ T1107] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 82.443468][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.476923][ T1107] usb 5-1: config 0 has no interface number 0 [ 82.635068][ T4572] sd 0:0:1:0: device reset [ 82.733650][ T1107] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 82.748159][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.774039][ T1107] usb 5-1: Product: syz [ 82.778261][ T1107] usb 5-1: Manufacturer: syz [ 82.792192][ T1107] usb 5-1: SerialNumber: syz [ 82.849004][ T1107] usb 5-1: config 0 descriptor?? [ 85.122659][ T1107] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 85.132009][ T1107] usb 5-1: No valid video chain found. [ 85.212938][ T1107] usb 5-1: USB disconnect, device number 6 [ 85.522557][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.593303][ T4604] device veth1_macvtap left promiscuous mode [ 85.600338][ T4604] device macsec0 entered promiscuous mode [ 85.862657][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 86.642577][ T4230] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.742470][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.944847][ T4230] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.973316][ T4230] pvrusb2: ********** [ 87.003152][ T4230] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 87.060826][ T4230] pvrusb2: Important functionality might not be entirely working. [ 87.092101][ T4230] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 87.142511][ T4230] pvrusb2: ********** [ 87.224500][ T2421] pvrusb2: Invalid write control endpoint [ 87.396172][ T2421] pvrusb2: Invalid write control endpoint [ 87.413208][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.476897][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.519472][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.580452][ T2421] pvrusb2: Device being rendered inoperable [ 87.598663][ T4592] pvrusb2: Attempted to execute control transfer when device not ok [ 87.622867][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.633204][ T1110] usb 1-1: USB disconnect, device number 4 [ 87.650145][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.698853][ T2421] pvrusb2: Attached sub-driver cx25840 [ 87.737063][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.800959][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 89.519185][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'. [ 90.982763][ T4259] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.060974][ T4674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.113'. [ 91.102582][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.502931][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.562650][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.792764][ T21] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.839994][ T21] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 91.903217][ T21] usb 4-1: Manufacturer: syz [ 91.939989][ T21] usb 4-1: config 0 descriptor?? [ 92.492984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.097572][ T4703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.124'. [ 93.106694][ T4703] netem: unknown loss type 13 [ 93.111725][ T4703] netem: change failed [ 93.122720][ T21] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 93.138533][ T21] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 93.162678][ T4259] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 93.178508][ T21] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 93.182007][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.196122][ T21] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 93.219622][ T21] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 93.244336][ T4259] usb 3-1: config 0 descriptor?? [ 93.263597][ T21] usb 4-1: USB disconnect, device number 3 [ 93.462501][ T4258] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 93.502611][ T4259] [drm] vendor descriptor length:6 data:06 5f 01 00 04 00 00 00 00 00 00 [ 93.722601][ T4259] [drm:udl_init] *ERROR* Selecting channel failed [ 93.749632][ T4259] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 93.757614][ T4259] [drm] Initialized udl on minor 2 [ 93.782845][ T4259] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 93.792304][ T4259] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 93.802670][ T4259] usb 3-1: USB disconnect, device number 3 [ 93.810889][ T4291] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 93.821643][ T4291] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 93.830814][ T4291] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 93.912589][ T4258] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.922687][ T4333] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.952611][ T4258] usb 5-1: not running at top speed; connect to a high speed hub [ 94.002522][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.032590][ T4258] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.043353][ T4258] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.572923][ T4258] usb 5-1: string descriptor 0 read error: -22 [ 94.623512][ T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.653932][ T4258] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.722872][ T21] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.765429][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.826915][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.856403][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.883118][ T4715] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.885890][ T4258] usb 5-1: 0:2 : does not exist [ 94.902689][ T4333] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.953482][ T4333] usb 4-1: not running at top speed; connect to a high speed hub [ 95.082827][ T4333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.099483][ T4333] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.385171][ T4333] usb 4-1: string descriptor 0 read error: -22 [ 95.398030][ T4333] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.407868][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.482673][ T4258] usb 5-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 96.492220][ T4258] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 96.632856][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 96.643487][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 96.651160][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.661235][ T4184] Workqueue: hci0 hci_rx_work [ 96.665960][ T4184] Call Trace: [ 96.669258][ T4184] [ 96.672213][ T4184] dump_stack_lvl+0x168/0x230 [ 96.676924][ T4184] ? show_regs_print_info+0x20/0x20 [ 96.682156][ T4184] ? load_image+0x3b0/0x3b0 [ 96.686695][ T4184] sysfs_create_dir_ns+0x252/0x280 [ 96.691845][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 96.696897][ T4184] ? sysfs_warn_dup+0xa0/0xa0 [ 96.701605][ T4184] ? le_conn_complete_evt+0xcbc/0x1590 [ 96.707095][ T4184] ? hci_event_packet+0xe05/0x12f0 [ 96.712250][ T4184] ? process_one_work+0x863/0x1000 [ 96.717395][ T4184] ? do_raw_spin_unlock+0x11d/0x230 [ 96.722770][ T4184] kobject_add_internal+0x662/0xd00 [ 96.728109][ T4184] kobject_add+0x152/0x210 [ 96.732587][ T4184] ? kobject_init+0x1d0/0x1d0 [ 96.737394][ T4184] ? klist_children_get+0x50/0x50 [ 96.742457][ T4184] ? get_device_parent+0x121/0x3f0 [ 96.747622][ T4184] device_add+0x483/0xfb0 [ 96.752003][ T4184] hci_conn_add_sysfs+0xd1/0x1e0 [ 96.756990][ T4184] le_conn_complete_evt+0xcbc/0x1590 [ 96.762323][ T4184] ? cs_le_create_conn+0x5e0/0x5e0 [ 96.767476][ T4184] ? __mutex_trylock_common+0x14f/0x250 [ 96.773063][ T4184] hci_le_meta_evt+0x289/0x3b80 [ 96.777952][ T4184] ? hci_event_packet+0x36d/0x12f0 [ 96.783098][ T4184] ? hci_event_packet+0x2e2/0x12f0 [ 96.788243][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 96.793303][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 96.799393][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 96.805050][ T4184] ? mark_lock+0x94/0x320 [ 96.809402][ T4184] ? mutex_unlock+0x10/0x10 [ 96.813928][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.820040][ T4184] ? lock_chain_count+0x20/0x20 [ 96.824904][ T4184] ? __rwlock_init+0x140/0x140 [ 96.829676][ T4184] hci_event_packet+0xe05/0x12f0 [ 96.834620][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 96.839917][ T4184] ? rcu_lock_release+0x20/0x20 [ 96.844776][ T4184] ? hci_send_to_monitor+0x9c/0x4a0 [ 96.849981][ T4184] hci_rx_work+0x255/0xa10 [ 96.854416][ T4184] process_one_work+0x863/0x1000 [ 96.859372][ T4184] ? worker_detach_from_pool+0x240/0x240 [ 96.865003][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 96.870294][ T4184] ? _raw_spin_lock_irq+0xab/0xe0 [ 96.875319][ T4184] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 96.880695][ T4184] ? wq_worker_running+0x97/0x170 [ 96.885749][ T4184] worker_thread+0xaa8/0x12a0 [ 96.890452][ T4184] kthread+0x436/0x520 [ 96.894537][ T4184] ? rcu_lock_release+0x20/0x20 [ 96.899479][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 96.904073][ T4184] ret_from_fork+0x1f/0x30 [ 96.908506][ T4184] [ 96.917192][ T4184] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.931889][ T4184] Bluetooth: hci0: failed to register connection device [ 96.982506][ T1107] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 96.992647][ T4258] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.215959][ T4258] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.298936][ T4258] usb 5-1: USB disconnect, device number 7 [ 97.314831][ T4333] usb 4-1: 0:2 : does not exist [ 97.316647][ T21] usb 1-1: USB disconnect, device number 5 [ 97.352900][ T1107] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 97.377605][ T1107] usb 3-1: config 8 has no interface number 0 [ 97.391776][ T1107] usb 3-1: config 8 interface 177 has no altsetting 0 [ 97.540438][ T1107] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 97.573068][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.574066][ T4333] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 98.893370][ T1107] usb 3-1: string descriptor 0 read error: -71 [ 98.914666][ T1107] ir_toy 3-1:8.177: required endpoints not found [ 98.930099][ T1107] usb 3-1: USB disconnect, device number 4 [ 99.252687][ T4333] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 99.492900][ T4333] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 99.793335][ T4333] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 99.870318][ T4333] usb 4-1: USB disconnect, device number 4 [ 100.104685][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.160119][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 100.191087][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 100.274179][ T4814] netlink: 5 bytes leftover after parsing attributes in process `syz.1.162'. [ 104.718261][ T4859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'. [ 106.711460][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.022622][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 107.150390][ T1107] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 107.169046][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.361749][ T1107] usb 5-1: config 0 has no interface number 0 [ 107.913921][ T1107] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 107.923285][ T21] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 107.941201][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.952068][ T1107] usb 5-1: Product: syz [ 107.962291][ T1107] usb 5-1: Manufacturer: syz [ 107.968612][ T1107] usb 5-1: SerialNumber: syz [ 107.993257][ T1107] usb 5-1: config 0 descriptor?? [ 110.436740][ T4289] usb 5-1: USB disconnect, device number 8 [ 110.582706][ T4291] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.633708][ T4921] kAFS: unparsable volume name [ 110.653091][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 110.661134][ T21] usb 3-1: can't read configurations, error -71 [ 110.858317][ T4936] syz.4.205 sent an empty control message without MSG_MORE. [ 110.952709][ T4291] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.966823][ T4291] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.997267][ T4291] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.724328][ T4291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.923558][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.931825][ T4291] usb 2-1: Product: syz [ 112.039269][ T4949] loop8: detected capacity change from 0 to 8 [ 112.135919][ T4291] usb 2-1: can't set config #1, error -71 [ 112.487604][ T4291] usb 2-1: USB disconnect, device number 3 [ 112.573825][ T4949] Dev loop8: unable to read RDB block 8 [ 112.591520][ T4949] loop8: unable to read partition table [ 112.610347][ T4949] loop8: partition table beyond EOD, truncated [ 113.654257][ T4949] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 114.522499][ T4291] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.843493][ T4238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 114.882974][ T4238] Bluetooth: hci3: Injecting HCI hardware error event [ 114.903131][ T4184] Bluetooth: hci3: hardware error 0x00 [ 114.953706][ T4259] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.192837][ T4291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 115.207598][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.219386][ T4291] usb 2-1: Product: syz [ 115.228399][ T4291] usb 2-1: Manufacturer: syz [ 115.236046][ T4291] usb 2-1: SerialNumber: syz [ 115.250801][ T4259] usb 1-1: Using ep0 maxpacket: 8 [ 115.294340][ T4291] usb 2-1: config 0 descriptor?? [ 115.432867][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.591897][ T4291] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.593916][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 115.624179][ T4259] usb 1-1: config 4 interface 0 has no altsetting 0 [ 116.555337][ T4291] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 116.581376][ T4291] usb 2-1: USB disconnect, device number 4 [ 116.632717][ T4259] usb 1-1: string descriptor 0 read error: -22 [ 116.639305][ T4259] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 116.724175][ T4259] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 116.888884][ T4259] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 116.979738][ T4259] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.148610][ T4259] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 117.369452][ T4259] usb 1-1: media controller created [ 117.590066][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.222763][ T4259] zl10353_read_register: readreg error (reg=127, ret==0) [ 118.946444][ T4259] usb 1-1: USB disconnect, device number 6 [ 119.791782][ T26] audit: type=1326 audit(1763806283.976:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2616749 code=0x7ffc0000 [ 120.707128][ T26] audit: type=1326 audit(1763806284.726:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f36c2616749 code=0x7ffc0000 [ 120.732070][ T5059] tipc: Started in network mode [ 120.778635][ T26] audit: type=1326 audit(1763806284.726:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2616749 code=0x7ffc0000 [ 120.806973][ T5059] tipc: Node identity 4, cluster identity 4711 [ 120.811871][ T26] audit: type=1326 audit(1763806284.726:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c2616749 code=0x7ffc0000 [ 120.824605][ T5059] tipc: Node number set to 4 [ 121.941785][ T5080] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 122.062298][ T5080] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.273358][ T5087] syz.0.254 uses obsolete (PF_INET,SOCK_PACKET) [ 122.342700][ T4259] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.582525][ T4333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.013117][ T4259] usb 2-1: Using ep0 maxpacket: 32 [ 123.143041][ T4259] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 123.182534][ T4333] usb 4-1: Using ep0 maxpacket: 16 [ 123.216873][ T4259] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 123.267245][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.302684][ T4333] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 123.320027][ T4259] usb 2-1: config 0 descriptor?? [ 123.352873][ T5085] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.373831][ T4259] hub 2-1:0.0: bad descriptor, ignoring hub [ 123.380144][ T4259] hub: probe of 2-1:0.0 failed with error -5 [ 123.388999][ T4259] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 123.532796][ T4333] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.562181][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.600637][ T4333] usb 4-1: Product: syz [ 123.610621][ T4333] usb 4-1: Manufacturer: syz [ 123.620750][ T4333] usb 4-1: SerialNumber: syz [ 123.639992][ T4333] usb 4-1: config 0 descriptor?? [ 123.852547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.323113][ T4289] usb 2-1: USB disconnect, device number 5 [ 125.408137][ T4289] usb 4-1: USB disconnect, device number 5 [ 125.825155][ T5133] netlink: 43 bytes leftover after parsing attributes in process `syz.3.269'. [ 127.633570][ T4333] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.703267][ T5166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.722471][ T5166] overlayfs: missing 'lowerdir' [ 128.315599][ T5176] netlink: 244 bytes leftover after parsing attributes in process `syz.3.282'. [ 129.276513][ T4289] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.143280][ T4333] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 130.152890][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.160907][ T4333] usb 3-1: Product: syz [ 130.165499][ T4333] usb 3-1: Manufacturer: syz [ 130.170116][ T4333] usb 3-1: SerialNumber: syz [ 130.177185][ T4333] usb 3-1: config 0 descriptor?? [ 130.283498][ T4333] usb 3-1: can't set config #0, error -71 [ 130.289787][ T4289] usb 4-1: Using ep0 maxpacket: 16 [ 130.311468][ T4333] usb 3-1: USB disconnect, device number 7 [ 130.643230][ T5198] nfs: Unknown parameter 'ntext' [ 130.753955][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.042019][ T4289] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 131.296127][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.326636][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 131.350374][ T4289] usb 4-1: config 0 descriptor?? [ 131.365014][ T5206] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 131.427878][ T4289] usb 4-1: can't set config #0, error -71 [ 131.483732][ T4289] usb 4-1: USB disconnect, device number 6 [ 133.066978][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073548][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202534][ T4449] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.443246][ T4449] usb 3-1: Using ep0 maxpacket: 32 [ 133.614164][ T4449] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 133.744445][ T4449] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 133.900121][ T4449] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 133.999532][ T4449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.115371][ T4449] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.182563][ T4449] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.240502][ T4449] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.257801][ T4449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.318683][ T4449] usb 3-1: config 0 descriptor?? [ 135.311695][ T4449] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 135.567780][ T4231] usb 3-1: USB disconnect, device number 8 [ 135.667123][ T4231] usblp0: removed [ 136.293417][ T5280] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.637613][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 136.646826][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 138.903777][ T26] audit: type=1326 audit(1763806303.086:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz.0.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf853c9749 code=0x0 [ 139.803309][ T5331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.832474][ T4333] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.995716][ T4333] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.112890][ T4333] usb 2-1: not running at top speed; connect to a high speed hub [ 141.232863][ T4333] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 141.246630][ T4333] usb 2-1: config 1 has no interface number 0 [ 141.287780][ T4333] usb 2-1: config 1 interface 138 has no altsetting 0 [ 141.362839][ T5352] tmpfs: Unknown parameter 'grpquota' [ 141.534272][ T4333] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 141.548937][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.567464][ T4333] usb 2-1: Product: syz [ 141.572256][ T4333] usb 2-1: Manufacturer: syz [ 141.577384][ T4333] usb 2-1: SerialNumber: syz [ 142.102693][ T4333] usb 2-1: can't set config #1, error -71 [ 142.112060][ T4333] usb 2-1: USB disconnect, device number 6 [ 144.712693][ T4184] Bluetooth: Frame is too long (len 28, expected len 4) [ 144.932760][ T4238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.172553][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 145.673178][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.682735][ T4238] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 146.701360][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723219][ T4238] usb 4-1: Product: syz [ 146.733269][ T4238] usb 4-1: Manufacturer: syz [ 146.748252][ T4238] usb 4-1: SerialNumber: syz [ 146.773469][ T4238] usb 4-1: config 0 descriptor?? [ 146.850525][ T4238] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.018826][ T4238] usb 4-1: USB disconnect, device number 7 [ 147.032643][ T4433] usb 4-1: Failed to submit usb control message: -71 [ 147.050214][ T4433] usb 4-1: unable to send the bmi data to the device: -71 [ 147.121147][ T4433] usb 4-1: unable to get target info from device [ 147.140096][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 147.345056][ T4433] usb 4-1: could not get target info (-71) [ 147.509900][ T4433] usb 4-1: could not probe fw (-71) [ 151.014983][ T5560] process 'syz.3.393' launched './file1' with NULL argv: empty string added [ 151.999150][ T5570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 152.278658][ T5570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'. [ 152.340445][ T5570] tc_dump_action: action bad kind [ 153.944151][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.649136][ T5590] loop8: detected capacity change from 0 to 8 [ 154.665164][ T4343] Dev loop8: unable to read RDB block 8 [ 154.670797][ T4343] loop8: unable to read partition table [ 154.698531][ T4343] loop8: partition table beyond EOD, truncated [ 154.722188][ T5590] Dev loop8: unable to read RDB block 8 [ 154.731244][ T5590] loop8: unable to read partition table [ 154.760900][ T5590] loop8: partition table beyond EOD, truncated [ 154.780936][ T5590] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 154.802490][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 154.922919][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.947610][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.960710][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.065878][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.604950][ T7] usb 3-1: config 0 descriptor?? [ 155.692135][ T7] usb 3-1: can't set config #0, error -71 [ 155.718565][ T7] usb 3-1: USB disconnect, device number 9 [ 157.010877][ T5628] netlink: 168 bytes leftover after parsing attributes in process `syz.0.415'. [ 161.953222][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'. [ 161.964351][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'. [ 164.741662][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.792599][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.921580][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.448'. [ 164.941523][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.448'. [ 164.963616][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.448'. [ 164.987287][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 165.193772][ T23] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 165.211068][ T23] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 165.223870][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 165.236494][ T23] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 165.255649][ T23] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 165.269240][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.360160][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 165.533039][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 165.543469][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.552044][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.563129][ T23] usb 3-1: Product: syz [ 165.563155][ T23] usb 3-1: Manufacturer: syz [ 165.563233][ T23] usb 3-1: SerialNumber: syz [ 165.621237][ T23] usb 3-1: config 0 descriptor?? [ 165.709838][ T7] usb 5-1: Product: syz [ 165.726101][ T7] usb 5-1: Manufacturer: syz [ 165.738157][ T7] usb 5-1: SerialNumber: syz [ 165.760926][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 165.953558][ T23] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 165.971470][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 165.999871][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 166.009866][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 166.191908][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 166.537463][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 166.671794][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 166.729848][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 166.752549][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 166.759639][ T7] r8152-cfgselector 5-1: bad CDC descriptors [ 166.763351][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 166.802718][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 166.833408][ T7] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 166.835813][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 166.896522][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 166.917200][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 167.011046][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 167.232797][ T23] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 167.262731][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 167.273871][ T23] usb 3-1: USB disconnect, device number 10 [ 167.283966][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 167.297020][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 167.309862][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 167.322338][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 167.370462][ T23] keyspan 3-1:0.0: device disconnected [ 170.182642][ T4259] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.422522][ T4259] usb 2-1: Using ep0 maxpacket: 32 [ 170.542964][ T4259] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 170.562649][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.610401][ T4259] usb 2-1: config 0 descriptor?? [ 170.673330][ T4259] as10x_usb: device has been detected [ 170.690102][ T4259] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 170.751187][ T4259] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 170.824171][ T5795] tmpfs: Unknown parameter 'usrquota' [ 170.869589][ T4259] as10x_usb: error during firmware upload part1 [ 170.892839][ T4259] Registered device nBox DVB-T Dongle [ 170.911180][ T4259] usb 2-1: USB disconnect, device number 7 [ 170.938082][ T4231] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 170.951912][ T4231] Bluetooth: hci1: Injecting HCI hardware error event [ 170.959435][ T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 171.885437][ T4188] Bluetooth: hci1: hardware error 0x00 [ 172.060042][ T4259] Unregistered device nBox DVB-T Dongle [ 172.163888][ T4259] as10x_usb: device has been disconnected [ 173.303455][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.337386][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.416737][ T5822] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.553098][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.669735][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.818796][ T7] usb 4-1: Product: syz [ 173.864810][ T7] usb 4-1: Manufacturer: syz [ 173.907464][ T7] usb 4-1: SerialNumber: syz [ 174.133430][ T7] usb 4-1: can't set config #1, error -71 [ 174.152443][ T7] usb 4-1: USB disconnect, device number 8 [ 174.307890][ T5829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.484'. [ 174.852483][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.979045][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.215131][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 175.236754][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.279662][ T7] usb 3-1: config 0 descriptor?? [ 175.334645][ T7] gspca_main: spca508-2.14.0 probing 8086:0110 [ 175.415340][ T23] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 175.435213][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.475951][ T23] usb 4-1: config 0 descriptor?? [ 175.552747][ T7] gspca_spca508: reg_read err -71 [ 175.572621][ T7] gspca_spca508: reg_read err -71 [ 175.603188][ T7] gspca_spca508: reg_read err -71 [ 175.622567][ T7] gspca_spca508: reg_read err -71 [ 175.760752][ T23] usb 4-1: string descriptor 0 read error: -71 [ 175.782142][ T23] usb-storage 4-1:0.0: USB Mass Storage device detected [ 175.802010][ T7] gspca_spca508: reg_read err -71 [ 175.822558][ T7] gspca_spca508: reg write: error -71 [ 175.828042][ T7] spca508: probe of 3-1:0.0 failed with error -71 [ 175.838353][ T7] usb 3-1: USB disconnect, device number 11 [ 175.850787][ T23] usb-storage 4-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 177.116715][ T23] usb 4-1: USB disconnect, device number 9 [ 178.552710][ T4238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.012852][ T4238] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 179.060990][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.150323][ T4238] usb 2-1: config 0 descriptor?? [ 179.364684][ T4238] gspca_main: spca508-2.14.0 probing 8086:0110 [ 179.367686][ T5884] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 179.387523][ T5884] bridge0: port 3(macsec0) entered blocking state [ 179.398805][ T5884] bridge0: port 3(macsec0) entered disabled state [ 179.418828][ T5884] device macsec0 entered promiscuous mode [ 179.430613][ T5884] bridge0: port 3(macsec0) entered blocking state [ 179.437378][ T5884] bridge0: port 3(macsec0) entered forwarding state [ 179.582684][ T4238] gspca_spca508: reg_read err -32 [ 179.710726][ T4238] gspca_spca508: reg_read err -32 [ 179.752544][ T4238] gspca_spca508: reg_read err -32 [ 180.582866][ T4238] gspca_spca508: reg_read err -110 [ 180.624996][ T4238] gspca_spca508: reg_read err -71 [ 180.642652][ T4238] gspca_spca508: reg write: error -71 [ 180.652463][ T4238] spca508: probe of 2-1:0.0 failed with error -71 [ 180.682030][ T4238] usb 2-1: USB disconnect, device number 8 [ 180.842467][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.964575][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.506'. [ 180.972484][ T4238] Bluetooth: hci0: command 0x0406 tx timeout [ 180.979045][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 180.990675][ T4238] Bluetooth: hci4: command 0x0406 tx timeout [ 181.232676][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.241295][ T7] usb 1-1: config 0 has no interface number 0 [ 181.261353][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.288821][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.332526][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 181.362538][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.423268][ T7] usb 1-1: config 0 descriptor?? [ 182.370099][ T7] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 182.407102][ T7] hid_prodikeys: hid-prodikeys: failed to find output report [ 182.407102][ T7] [ 182.647268][ T7] usb 1-1: USB disconnect, device number 7 [ 183.484813][ T5920] ubi0: attaching mtd0 [ 183.491372][ T5920] ubi0: scanning is finished [ 183.496160][ T5920] ubi0: empty MTD device detected [ 183.575734][ T5920] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 183.575785][ T5920] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 183.575805][ T5920] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 183.575823][ T5920] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 183.575840][ T5920] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 183.575855][ T5920] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.575872][ T5920] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1950986779 [ 183.575901][ T5920] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.577700][ T5924] ubi0: background thread "ubi_bgt0d" started, PID 5924 [ 183.771314][ T5921] fido_id[5921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 184.368402][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 184.377627][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 185.252985][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 185.316734][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 189.133711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.856887][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 194.091649][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 194.262570][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280080][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.866743][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 195.092542][ T4379] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.281481][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.372669][ T4379] usb 4-1: Using ep0 maxpacket: 32 [ 195.693009][ T4379] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.701858][ T4379] usb 4-1: config 0 has no interface number 0 [ 195.738260][ T4379] usb 4-1: config 0 interface 12 has no altsetting 0 [ 196.213255][ T4379] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 196.241627][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.323104][ T4379] usb 4-1: Product: syz [ 196.327328][ T4379] usb 4-1: Manufacturer: syz [ 196.370582][ T4379] usb 4-1: SerialNumber: syz [ 196.474703][ T4379] usb 4-1: config 0 descriptor?? [ 197.082551][ T4289] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.430973][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 197.498756][ T4289] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 197.529373][ T4289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 197.787211][ T4289] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 197.891122][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.144504][ T4289] usb 1-1: Product: syz [ 198.270408][ T4289] usb 1-1: Manufacturer: syz [ 198.398912][ T4289] usb 1-1: SerialNumber: syz [ 198.442192][ T4379] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 198.462482][ T4379] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 198.469858][ T4379] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 198.493534][ T4379] f81534: probe of 4-1:0.12 failed with error -71 [ 198.504127][ T4289] usb 1-1: config 0 descriptor?? [ 198.524655][ T4379] usb 4-1: USB disconnect, device number 10 [ 198.947742][ T23] usb 1-1: USB disconnect, device number 8 [ 199.092527][ T4258] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.461420][ T4258] usb 3-1: Using ep0 maxpacket: 8 [ 199.583724][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.675195][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.866820][ T4258] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 199.876684][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.887570][ T4258] usb 3-1: config 0 descriptor?? [ 200.427854][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.477325][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.543109][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.594920][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.636954][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.674967][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.715298][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.722225][ T4258] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 200.794894][ T4258] wacom 0003:056A:0000.0006: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 200.884154][ T4258] wacom 0003:056A:0000.0006: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 200.950571][ T4258] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0006/input/input8 [ 201.169217][ T4258] usb 3-1: USB disconnect, device number 12 [ 202.333912][ T6133] fido_id[6133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 202.902719][ T4258] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.812553][ T4258] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 203.832430][ T4258] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.617309][ T4258] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.630762][ T4258] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.641642][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.662982][ T4258] usb 3-1: can't set config #27, error -71 [ 204.694312][ T4258] usb 3-1: USB disconnect, device number 13 [ 205.372476][ T4258] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.682568][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 206.075435][ T4258] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=94.07 [ 206.119966][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.168288][ T4258] usb 2-1: Product: syz [ 206.188597][ T4258] usb 2-1: Manufacturer: syz [ 206.198263][ T4258] usb 2-1: SerialNumber: syz [ 206.214853][ T4258] usb 2-1: config 0 descriptor?? [ 206.276575][ T4258] comedi comedi4: Wrong number of endpoints [ 206.312587][ T4258] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 206.502839][ T4258] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 206.572768][ T4259] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.604311][ T7] usb 2-1: USB disconnect, device number 9 [ 207.532276][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.545121][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.555423][ T4259] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.568759][ T4259] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.578188][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.596021][ T4259] usb 1-1: config 0 descriptor?? [ 207.888490][ T4258] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.908548][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.950020][ T4258] usb 3-1: config 0 descriptor?? [ 208.028802][ T4258] cp210x 3-1:0.0: cp210x converter detected [ 208.134030][ T4259] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 208.146025][ T4259] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.112521][ T4258] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 209.382519][ T4258] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 209.396050][ T4258] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 209.431202][ T4258] usb 3-1: cp210x converter now attached to ttyUSB0 [ 209.477364][ T4258] usb 3-1: USB disconnect, device number 14 [ 209.519288][ T4258] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.541267][ T4258] cp210x 3-1:0.0: device disconnected [ 209.800694][ T4333] usb 1-1: USB disconnect, device number 9 [ 213.672554][ T4259] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.733247][ T6282] capability: warning: `syz.1.613' uses 32-bit capabilities (legacy support in use) [ 213.932614][ T4259] usb 1-1: Using ep0 maxpacket: 8 [ 214.885415][ T4379] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.033662][ T4259] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.053799][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.087308][ T4259] usb 1-1: Product: syz [ 215.091696][ T4259] usb 1-1: Manufacturer: syz [ 215.121222][ T4259] usb 1-1: SerialNumber: syz [ 215.136739][ T4259] usb 1-1: config 0 descriptor?? [ 216.092961][ T4379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.237800][ T4259] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.250790][ T4379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.296853][ T4379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.317306][ T4379] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.326662][ T4379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.352466][ T4379] usb 4-1: config 0 descriptor?? [ 217.583261][ T4379] usbhid 4-1:0.0: can't add hid device: -71 [ 217.590892][ T4379] usbhid: probe of 4-1:0.0 failed with error -71 [ 218.554884][ T4379] usb 4-1: USB disconnect, device number 11 [ 218.695317][ T4259] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 218.818593][ T6328] netlink: 277 bytes leftover after parsing attributes in process `syz.1.630'. [ 219.036113][ T4259] usb 1-1: USB disconnect, device number 10 [ 219.311234][ T6317] overlayfs: overlapping lowerdir path [ 220.461447][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 221.307274][ T6349] syz.3.637 (6349) used greatest stack depth: 20416 bytes left [ 222.452471][ T4449] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 223.522914][ T4449] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.560669][ T4449] usb 4-1: config 0 has no interface number 0 [ 223.597533][ T4449] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 223.668489][ T4449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.709303][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 223.743811][ T4449] usb 4-1: config 0 descriptor?? [ 223.974720][ T4449] usb 4-1: selecting invalid altsetting 1 [ 224.004829][ T4449] dvb_ttusb_budget: ttusb_init_controller: error [ 224.059061][ T4449] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 224.818713][ T4449] DVB: Unable to find symbol cx22700_attach() [ 225.053813][ T4449] DVB: Unable to find symbol tda10046_attach() [ 225.082273][ T4449] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 225.332272][ T4449] usb 4-1: USB disconnect, device number 12 [ 229.415213][ T6464] ALSA: mixer_oss: invalid OSS volume 'VOLUM' [ 229.490693][ T6456] device ip6gre1 entered promiscuous mode [ 229.670647][ T6467] device vlan0 entered promiscuous mode [ 229.797489][ T6467] team0: Port device vlan0 added [ 229.843367][ C0] hrtimer: interrupt took 280598 ns [ 229.888992][ T6467] syz.1.670 (6467) used greatest stack depth: 20064 bytes left [ 231.702543][ T4291] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 231.953157][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 232.077332][ T4291] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 232.364449][ T4291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.772657][ T4291] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.809112][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.828170][ T4291] usb 5-1: Product: syz [ 232.933559][ T4291] usb 5-1: can't set config #1, error -71 [ 232.960160][ T4291] usb 5-1: USB disconnect, device number 10 [ 236.665398][ T4449] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.692865][ T4379] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.272499][ T4379] usb 2-1: Using ep0 maxpacket: 16 [ 238.439530][ T4379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.498252][ T4379] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.522721][ T4449] usb 4-1: unable to read config index 0 descriptor/all [ 238.544370][ T4449] usb 4-1: can't read configurations, error -71 [ 238.650973][ T4379] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.740189][ T4379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.802683][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 239.524326][ T4379] usb 2-1: config 0 descriptor?? [ 239.956092][ T4449] usb 2-1: USB disconnect, device number 10 [ 240.688258][ T6595] [ 240.690657][ T6595] ====================================================== [ 240.697794][ T6595] WARNING: possible circular locking dependency detected [ 240.704825][ T6595] syzkaller #0 Not tainted [ 240.709246][ T6595] ------------------------------------------------------ [ 240.716351][ T6595] syz.2.711/6595 is trying to acquire lock: [ 240.722247][ T6595] ffff8880776bcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 240.733314][ T6595] [ 240.733314][ T6595] but task is already holding lock: [ 240.740681][ T6595] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 240.750365][ T6595] [ 240.750365][ T6595] which lock already depends on the new lock. [ 240.750365][ T6595] [ 240.760776][ T6595] [ 240.760776][ T6595] the existing dependency chain (in reverse order) is: [ 240.769812][ T6595] [ 240.769812][ T6595] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 240.777836][ T6595] __mutex_lock_common+0x1eb/0x2390 [ 240.783584][ T6595] mutex_lock_nested+0x17/0x20 [ 240.788900][ T6595] rfkill_register+0x33/0x8a0 [ 240.794115][ T6595] hci_register_dev+0x452/0x970 [ 240.799633][ T6595] vhci_create_device+0x32c/0x5c0 [ 240.805189][ T6595] vhci_write+0x391/0x450 [ 240.810051][ T6595] vfs_write+0x712/0xd00 [ 240.814841][ T6595] ksys_write+0x14d/0x250 [ 240.819720][ T6595] do_syscall_64+0x4c/0xa0 [ 240.824667][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.831094][ T6595] [ 240.831094][ T6595] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 240.838930][ T6595] __mutex_lock_common+0x1eb/0x2390 [ 240.844673][ T6595] mutex_lock_nested+0x17/0x20 [ 240.849979][ T6595] vhci_send_frame+0x88/0x100 [ 240.855192][ T6595] hci_send_frame+0x1a9/0x2e0 [ 240.860414][ T6595] hci_tx_work+0x9f9/0x1710 [ 240.865447][ T6595] process_one_work+0x863/0x1000 [ 240.870916][ T6595] worker_thread+0xaa8/0x12a0 [ 240.876127][ T6595] kthread+0x436/0x520 [ 240.880726][ T6595] ret_from_fork+0x1f/0x30 [ 240.885681][ T6595] [ 240.885681][ T6595] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 240.894918][ T6595] __flush_work+0xdd/0x1b0 [ 240.899881][ T6595] hci_dev_do_close+0x1e7/0x1030 [ 240.905371][ T6595] hci_error_reset+0x101/0x2c0 [ 240.910701][ T6595] process_one_work+0x863/0x1000 [ 240.916287][ T6595] worker_thread+0xaa8/0x12a0 [ 240.921512][ T6595] kthread+0x436/0x520 [ 240.926125][ T6595] ret_from_fork+0x1f/0x30 [ 240.931089][ T6595] [ 240.931089][ T6595] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 240.938775][ T6595] __mutex_lock_common+0x1eb/0x2390 [ 240.944524][ T6595] mutex_lock_nested+0x17/0x20 [ 240.949831][ T6595] bg_scan_update+0x44/0x3b0 [ 240.954964][ T6595] process_one_work+0x863/0x1000 [ 240.960447][ T6595] worker_thread+0xaa8/0x12a0 [ 240.965657][ T6595] kthread+0x436/0x520 [ 240.970261][ T6595] ret_from_fork+0x1f/0x30 [ 240.975245][ T6595] [ 240.975245][ T6595] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 240.985154][ T6595] __lock_acquire+0x2c33/0x7c60 [ 240.990538][ T6595] lock_acquire+0x197/0x3f0 [ 240.995575][ T6595] __flush_work+0xdd/0x1b0 [ 241.000516][ T6595] __cancel_work_timer+0x3ac/0x520 [ 241.006159][ T6595] hci_request_cancel_all+0xcc/0x300 [ 241.011974][ T6595] hci_dev_do_close+0x4e/0x1030 [ 241.017347][ T6595] hci_rfkill_set_block+0x10a/0x190 [ 241.023080][ T6595] rfkill_set_block+0x1c6/0x420 [ 241.028475][ T6595] rfkill_fop_write+0x458/0x560 [ 241.033845][ T6595] vfs_write+0x300/0xd00 [ 241.038702][ T6595] ksys_write+0x14d/0x250 [ 241.043552][ T6595] do_syscall_64+0x4c/0xa0 [ 241.048489][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.054904][ T6595] [ 241.054904][ T6595] other info that might help us debug this: [ 241.054904][ T6595] [ 241.065128][ T6595] Chain exists of: [ 241.065128][ T6595] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 241.065128][ T6595] [ 241.080854][ T6595] Possible unsafe locking scenario: [ 241.080854][ T6595] [ 241.088300][ T6595] CPU0 CPU1 [ 241.093661][ T6595] ---- ---- [ 241.099017][ T6595] lock(rfkill_global_mutex); [ 241.103780][ T6595] lock(&data->open_mutex); [ 241.110883][ T6595] lock(rfkill_global_mutex); [ 241.118249][ T6595] lock((work_completion)(&hdev->bg_scan_update)); [ 241.124830][ T6595] [ 241.124830][ T6595] *** DEADLOCK *** [ 241.124830][ T6595] [ 241.132993][ T6595] 1 lock held by syz.2.711/6595: [ 241.137922][ T6595] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 241.148052][ T6595] [ 241.148052][ T6595] stack backtrace: [ 241.153945][ T6595] CPU: 1 PID: 6595 Comm: syz.2.711 Not tainted syzkaller #0 [ 241.161229][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.171290][ T6595] Call Trace: [ 241.174569][ T6595] [ 241.177513][ T6595] dump_stack_lvl+0x168/0x230 [ 241.182197][ T6595] ? load_image+0x3b0/0x3b0 [ 241.186698][ T6595] ? show_regs_print_info+0x20/0x20 [ 241.191898][ T6595] ? print_circular_bug+0x12b/0x1a0 [ 241.197100][ T6595] check_noncircular+0x274/0x310 [ 241.202045][ T6595] ? add_chain_block+0x940/0x940 [ 241.206998][ T6595] ? lockdep_lock+0xdc/0x1e0 [ 241.211588][ T6595] ? __lock_acquire+0x12d9/0x7c60 [ 241.216615][ T6595] ? lockdep_lock+0x1e0/0x1e0 [ 241.221296][ T6595] ? mark_lock+0x94/0x320 [ 241.225632][ T6595] __lock_acquire+0x2c33/0x7c60 [ 241.230493][ T6595] ? verify_lock_unused+0x140/0x140 [ 241.235693][ T6595] ? mark_lock+0x94/0x320 [ 241.240027][ T6595] ? verify_lock_unused+0x140/0x140 [ 241.245231][ T6595] lock_acquire+0x197/0x3f0 [ 241.249733][ T6595] ? __flush_work+0xc1/0x1b0 [ 241.254324][ T6595] ? __lock_acquire+0x7c60/0x7c60 [ 241.259352][ T6595] ? read_lock_is_recursive+0x10/0x10 [ 241.264732][ T6595] ? start_flush_work+0x776/0x820 [ 241.269753][ T6595] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 241.275658][ T6595] ? _raw_spin_unlock+0x40/0x40 [ 241.280516][ T6595] __flush_work+0xdd/0x1b0 [ 241.284936][ T6595] ? __flush_work+0xc1/0x1b0 [ 241.289531][ T6595] ? flush_work+0x20/0x20 [ 241.293874][ T6595] ? try_to_grab_pending+0xf3/0x7e0 [ 241.299075][ T6595] ? lockdep_hardirqs_off+0x70/0x100 [ 241.304360][ T6595] ? mark_lock+0x94/0x320 [ 241.308692][ T6595] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 241.314676][ T6595] ? lock_chain_count+0x20/0x20 [ 241.319530][ T6595] ? mark_lock+0x94/0x320 [ 241.323872][ T6595] ? __cancel_work_timer+0x331/0x520 [ 241.329336][ T6595] __cancel_work_timer+0x3ac/0x520 [ 241.334445][ T6595] ? cancel_work_sync+0x20/0x20 [ 241.339318][ T6595] ? __cancel_work+0x1f4/0x2d0 [ 241.344078][ T6595] ? lockdep_hardirqs_on+0x94/0x140 [ 241.349290][ T6595] ? __cancel_work+0x26f/0x2d0 [ 241.354050][ T6595] ? cancel_work+0x20/0x20 [ 241.358463][ T6595] ? lock_chain_count+0x20/0x20 [ 241.363314][ T6595] hci_request_cancel_all+0xcc/0x300 [ 241.368759][ T6595] hci_dev_do_close+0x4e/0x1030 [ 241.373634][ T6595] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 241.379545][ T6595] ? _raw_spin_unlock+0x40/0x40 [ 241.384399][ T6595] hci_rfkill_set_block+0x10a/0x190 [ 241.389602][ T6595] ? rcu_lock_release+0x20/0x20 [ 241.394631][ T6595] rfkill_set_block+0x1c6/0x420 [ 241.399489][ T6595] rfkill_fop_write+0x458/0x560 [ 241.404342][ T6595] ? rfkill_fop_read+0x4b0/0x4b0 [ 241.409469][ T6595] ? common_file_perm+0x130/0x1c0 [ 241.414521][ T6595] ? fsnotify_perm+0x5d/0x560 [ 241.419311][ T6595] ? security_file_permission+0x75/0xa0 [ 241.424859][ T6595] ? rfkill_fop_read+0x4b0/0x4b0 [ 241.429813][ T6595] vfs_write+0x300/0xd00 [ 241.434108][ T6595] ? file_end_write+0x250/0x250 [ 241.439098][ T6595] ? __fget_files+0x40f/0x480 [ 241.443800][ T6595] ? __fdget_pos+0x1e2/0x370 [ 241.448429][ T6595] ? ksys_write+0x71/0x250 [ 241.452853][ T6595] ksys_write+0x14d/0x250 [ 241.457189][ T6595] ? __ia32_sys_read+0x80/0x80 [ 241.461951][ T6595] ? lockdep_hardirqs_on+0x94/0x140 [ 241.467152][ T6595] do_syscall_64+0x4c/0xa0 [ 241.471618][ T6595] ? clear_bhb_loop+0x30/0x80 [ 241.476429][ T6595] ? clear_bhb_loop+0x30/0x80 [ 241.481126][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.487027][ T6595] RIP: 0033:0x7f36c2616749 [ 241.491457][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.511070][ T6595] RSP: 002b:00007f36c087d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.519487][ T6595] RAX: ffffffffffffffda RBX: 00007f36c286cfa0 RCX: 00007f36c2616749 [ 241.527460][ T6595] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000007 [ 241.535453][ T6595] RBP: 00007f36c269af91 R08: 0000000000000000 R09: 0000000000000000 [ 241.543425][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.551432][ T6595] R13: 00007f36c286d038 R14: 00007f36c286cfa0 R15: 00007ffec10b96b8 [ 241.559446][ T6595]