last executing test programs: 19.817176909s ago: executing program 2 (id=473): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$qrtr(r0, 0x0, &(0x7f0000000180)) 18.681400737s ago: executing program 2 (id=477): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000027c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x10, 0x1, 0x1, 0x6, 0x3, 0xec4, 0xb32a, [{0x6, 0x80000001, 0x6, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 17.131207097s ago: executing program 2 (id=480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) bind$bt_hci(r0, 0x0, 0x0) 12.501751118s ago: executing program 4 (id=492): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 12.273324379s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1e, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 12.272607899s ago: executing program 0 (id=494): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00082cbd7000fcdbdf25200000000c009900070000005b000000"], 0x20}, 0x1, 0x0, 0x0, 0x40055}, 0x48004) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x1) ioctl$EVIOCGSND(r3, 0x8040451a, 0xfffffffffffffffd) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x24) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000080), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.519210244s ago: executing program 4 (id=495): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) 10.117971052s ago: executing program 4 (id=496): io_setup(0x6, &(0x7f00000002c0)) syz_io_uring_setup(0x2afc, &(0x7f0000000380)={0x0, 0x2, 0x13090, 0x2010045, 0x394}, &(0x7f0000000400), &(0x7f0000000240)) r0 = io_uring_setup(0x855, &(0x7f0000000a80)={0x0, 0xd3d2, 0x400, 0x3, 0x2b0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x71, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x33, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d041", 0x400, 0x88, 0x1, @mcast1, @rand_addr=' \x01\x00', [], "64a998"}}}}}}}, 0x0) sendmsg$NFC_CMD_GET_SE(r2, 0x0, 0x20000001) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="009effff"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xae, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1f, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x1f, &(0x7f0000000700)=""/31, 0x41100, 0x22, '\x00', r5, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r4, r4], &(0x7f0000000b00)=[{0x2, 0x3, 0x8, 0x4}, {0x3, 0x5, 0x7, 0x3}], 0x10, 0x6}, 0x94) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r3, 0x1) 10.117268492s ago: executing program 3 (id=497): tkill(0x0, 0x12) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 8.603879053s ago: executing program 3 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001380)=[{&(0x7f0000001100)=""/26, 0x1a}], 0x1, 0x20010000, 0xd56a) read$msr(r5, &(0x7f0000000180)=""/92, 0x5c) signalfd(r2, &(0x7f0000000180)={[0x7]}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r6, r1], 0x3) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.920411604s ago: executing program 3 (id=500): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.902420504s ago: executing program 4 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) setrlimit(0x8, &(0x7f00000000c0)={0x3ff, 0x7}) shmctl$IPC_INFO(0x0, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r3, 0xfff) 5.487785194s ago: executing program 1 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000027c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x10, 0x1, 0x1, 0x6, 0x3, 0xec4, 0xb32a, [{0x6, 0x80000001, 0x6, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 5.387601744s ago: executing program 2 (id=504): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 5.152314575s ago: executing program 1 (id=505): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.238609252s ago: executing program 1 (id=506): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0xd, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x68}}, 0x0) 4.112670012s ago: executing program 1 (id=507): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xd1, 0x0, 0x0) 3.911498914s ago: executing program 1 (id=508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_usb_connect(0x2, 0x24, &(0x7f0000000e00)={{0x12, 0x1, 0x201, 0x92, 0x90, 0x4c, 0x10, 0x402, 0x5602, 0xa07, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6a, 0xa0, 0x2, [{{0x9, 0x4, 0x15, 0x57, 0x0, 0x85, 0x5f, 0xc0, 0xd3}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.719297925s ago: executing program 0 (id=509): tkill(0x0, 0x12) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 3.508279856s ago: executing program 3 (id=510): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1e, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 2.728380432s ago: executing program 0 (id=511): r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x1f4}) clock_adjtime(0x41, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x2, 0x7ff, 0x2, 0x3, 0x587, 0x0, 0x7f, 0x7fffffffffffffff, 0x1, 0x5, 0x7, 0x7fffffff, 0x200, 0x200, 0x8000000000000001, 0x7, 0x2, 0x6, 0x55a5, 0x3, 0x6, 0xde99, 0x9, 0x8000}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2.623556323s ago: executing program 0 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xffffff9a}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.623204003s ago: executing program 4 (id=513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20048010) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) 2.338647044s ago: executing program 2 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) 1.54439354s ago: executing program 4 (id=515): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) close(0x3) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, &(0x7f0000000200), 0x4, &(0x7f0000000380)) recvmmsg$unix(r4, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 1.358892291s ago: executing program 3 (id=516): r0 = syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 307.060668ms ago: executing program 2 (id=517): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 306.909648ms ago: executing program 0 (id=518): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0xd, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x68}}, 0x0) 306.693478ms ago: executing program 1 (id=519): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x14, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xe, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x6, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800081, 0x0, 0x0, 0x0, 0x4c6, 0x2, 0x0, 0x476f], [0x0, 0x7c, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x4338, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x4, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0xe, 0x0, 0xffffffff, 0x90000000, 0x0, 0x0, 0x0, 0x5, 0xfffffff8, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) socketpair(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x77, @mcast1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076"], 0xa8}}, 0x0) r4 = fanotify_init(0x1, 0x1) r5 = open$dir(0x0, 0x0, 0x0) fanotify_mark(r4, 0x641, 0x1020, r5, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0xc0000484) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2483, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 0 (id=520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e23, @loopback}}) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r9, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x805) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 49.267798][ T4172] cgroup: Unknown subsys name 'net' [ 49.400371][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.661106][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.551308][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.629442][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.658736][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.683360][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.692423][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.747027][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.754101][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.762592][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.797701][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.804773][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.812724][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.833902][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.841003][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.849351][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.872063][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.879218][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.887660][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.924342][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.936786][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.982498][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.989848][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.997845][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.005857][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.012914][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.020784][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.029925][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.052537][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.059728][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.068114][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.075400][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.082452][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.090311][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.098863][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.110360][ T4188] team0: Port device team_slave_0 added [ 53.118254][ T4188] team0: Port device team_slave_1 added [ 53.124114][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.131335][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.139532][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.173032][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.180359][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.188183][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.226871][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.237846][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.250049][ T4187] team0: Port device team_slave_0 added [ 53.256866][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.263808][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.289995][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.312701][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.323474][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.339282][ T4187] team0: Port device team_slave_1 added [ 53.345893][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.352846][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.378796][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.391584][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.430639][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.448812][ T4184] team0: Port device team_slave_0 added [ 53.456697][ T4182] team0: Port device team_slave_0 added [ 53.471022][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.478284][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.504530][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.523568][ T4184] team0: Port device team_slave_1 added [ 53.530841][ T4182] team0: Port device team_slave_1 added [ 53.550449][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.557463][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.583478][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.616424][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.623201][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.635077][ T4183] team0: Port device team_slave_0 added [ 53.643807][ T4183] team0: Port device team_slave_1 added [ 53.663983][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.671032][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.697655][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.732521][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.739674][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.766113][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.777806][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.784755][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.811003][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.828643][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.835518][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.842089][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.849894][ T4187] Cannot create hsr debugfs directory [ 53.862986][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.870002][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.896139][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.922560][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.929595][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.955588][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.990545][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.997779][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.023835][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.056857][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.063874][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.072010][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.080249][ T4182] Cannot create hsr debugfs directory [ 54.126603][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.133286][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.141463][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.149329][ T4183] Cannot create hsr debugfs directory [ 54.168635][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.175835][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.182562][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.190265][ T4184] Cannot create hsr debugfs directory [ 54.215848][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 54.222554][ T4191] Bluetooth: hci4: command 0x0409 tx timeout [ 54.225020][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.295102][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 54.301178][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 54.465789][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.479382][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.489052][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.499473][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.552709][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.561649][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.570998][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.587539][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.645515][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.656634][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.665915][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.695061][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.751349][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.759445][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.771749][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.784544][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.794377][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.831573][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.863285][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.876489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.887426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.897229][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.912418][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.926395][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.935274][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.943771][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.952844][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.963780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.974318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.984096][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.991352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.016793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.024858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.033621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.042386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.049619][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.060345][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.086516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.095954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.104810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.111910][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.121324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.153006][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.162955][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.171997][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.181903][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.189017][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.197212][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.206883][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.215726][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.233430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.242689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.252903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.261711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.271345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.280673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.302473][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.316947][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.336917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.346187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.354852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.364306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.374590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.382704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.390667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.399991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.408909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.418075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.426649][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.433710][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.441468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.450511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.459610][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.466728][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.474581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.483666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.492803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.501265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.526751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.537794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.546743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.556940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.566233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.577098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.590837][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.602004][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.613389][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.630367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.641437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.651798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.661247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.670218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.714510][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.729746][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.752035][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.765309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.774641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.784450][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.791568][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.803816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.820456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.829890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.838756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.847677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.857676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.866115][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.873159][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.880814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.889898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.898425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.907087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.915719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.946679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.965756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.978055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.988861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.003346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.012492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.027708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.036194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.044467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.053217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.069869][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.077871][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.090608][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.108760][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.129949][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.142869][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.151723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.161402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.170628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.183687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.191376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.200418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.210178][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.217358][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.225298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.233959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.243079][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.250165][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.257872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.271912][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.297574][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 56.301195][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.311026][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 56.322259][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 56.329147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.347178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.354695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.375615][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 56.395560][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 56.409124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.419461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.429073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.438705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.448524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.457615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.466989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.475836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.484136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.492793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.501485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.510573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.523732][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.535592][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.573567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.583282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.592148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.601224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.610268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.619852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.647267][ T4183] device veth0_vlan entered promiscuous mode [ 56.671334][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.686308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.694731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.703413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.711360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.718950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.727915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.739959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.748148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.758518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.767044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.780988][ T4183] device veth1_vlan entered promiscuous mode [ 56.798281][ T4188] device veth0_vlan entered promiscuous mode [ 56.817503][ T4187] device veth0_vlan entered promiscuous mode [ 56.830513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.839296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.871733][ T4188] device veth1_vlan entered promiscuous mode [ 56.893163][ T4183] device veth0_macvtap entered promiscuous mode [ 56.908164][ T4187] device veth1_vlan entered promiscuous mode [ 56.918127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.928088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.936495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.943933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.952961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.963287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.977087][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.986210][ T4183] device veth1_macvtap entered promiscuous mode [ 57.016673][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.027304][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.036055][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.050274][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.072844][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.084536][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.095857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.117046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.131160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.141468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.150998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.159903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.170161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.179016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.189822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.197806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.210158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.218806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.229960][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239461][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.249000][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258445][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277656][ T4187] device veth0_macvtap entered promiscuous mode [ 57.291473][ T4188] device veth0_macvtap entered promiscuous mode [ 57.302407][ T4184] device veth0_vlan entered promiscuous mode [ 57.318766][ T4187] device veth1_macvtap entered promiscuous mode [ 57.342653][ T4188] device veth1_macvtap entered promiscuous mode [ 57.356204][ T4184] device veth1_vlan entered promiscuous mode [ 57.402351][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.415841][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.429167][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.438410][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.446961][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.454830][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.463080][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.471608][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.480120][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.489045][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.498278][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.507141][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.516547][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.541644][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.553597][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.569075][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.578468][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.589302][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.600702][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.611179][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.622389][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.634296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.648836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.657524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.666525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.676874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.686287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.695123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.702780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.714458][ T4182] device veth0_vlan entered promiscuous mode [ 57.726001][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.739357][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.749348][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.759830][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.771044][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.788286][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.797604][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.806715][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.820984][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834435][ T4182] device veth1_vlan entered promiscuous mode [ 57.841982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.851027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.860334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.869120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.887914][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.897461][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.906854][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.915862][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948395][ T4184] device veth0_macvtap entered promiscuous mode [ 57.992475][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.999916][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.008213][ T4184] device veth1_macvtap entered promiscuous mode [ 58.017547][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.026777][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.067183][ T4182] device veth0_macvtap entered promiscuous mode [ 58.078423][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.087349][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.096057][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.103772][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.114792][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.123556][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.132547][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.151325][ T4182] device veth1_macvtap entered promiscuous mode [ 58.169918][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.182011][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.192266][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.203007][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.213233][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.224677][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.241685][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.273772][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.284512][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.298345][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.310612][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.313334][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.319440][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.330271][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.347942][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.359019][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.369097][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.375784][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 58.380315][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 58.390484][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 58.391662][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.410466][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.434406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.442925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.457668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.470453][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 58.477110][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 58.498318][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.509654][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.520028][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.529371][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.541231][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.552000][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.562505][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.573847][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.584106][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.594842][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.605709][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.617131][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.630680][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.650075][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.662680][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.672819][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.683350][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.693554][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.706111][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.716188][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.727730][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.739129][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.746844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.755853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.765169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.773738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.805667][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.814288][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.823676][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.838376][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.848683][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.867160][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.910513][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.922437][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.938048][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.946728][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.958144][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.987870][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.001591][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.027590][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 59.041769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 59.067950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 59.791022][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.804046][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.978525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 59.987455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 59.996373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.005271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.014144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.023216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.128000][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.479987][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 60.500884][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 60.512382][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 60.521411][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.554178][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.561623][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 60.566761][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 60.776149][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.796316][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.960410][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.985082][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 61.133762][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.217045][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.245125][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.254034][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.288067][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.309354][ T4242] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.344732][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 61.495080][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.112974][ T4242] usb 2-1: config 0 has no interface number 0 [ 62.159170][ T4315] hugetlbfs: syz.3.4 (4315): Using mlock ulimits for SHM_HUGETLB is deprecated [ 62.173250][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.185093][ T4242] usb 2-1: string descriptor 0 read error: -71 [ 62.295951][ T4242] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 62.305520][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.339606][ T4242] usb 2-1: config 0 descriptor?? [ 63.070317][ T4242] usb 2-1: can't set config #0, error -71 [ 63.087958][ T4242] usb 2-1: USB disconnect, device number 2 [ 63.215147][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.531178][ T4351] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 64.029995][ T4191] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 64.065116][ T4311] usb 5-1: Using ep0 maxpacket: 8 [ 64.326161][ T4311] usb 5-1: config 8 has an invalid interface number: 160 but max is 0 [ 64.337106][ T4311] usb 5-1: config 8 has no interface number 0 [ 64.889814][ T4311] usb 5-1: config 8 interface 160 has no altsetting 0 [ 64.992981][ T4191] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 65.051524][ T4191] usb 1-1: config 0 has no interface number 1 [ 66.361099][ T4311] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 66.370657][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.378731][ T4311] usb 5-1: Product: syz [ 66.382899][ T4311] usb 5-1: Manufacturer: syz [ 66.387562][ T4311] usb 5-1: SerialNumber: syz [ 66.406999][ T4191] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 66.454558][ T4191] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 66.480527][ T4191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.488585][ T4191] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 66.498955][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.520895][ T26] audit: type=1326 audit(1761890831.673:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.17" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a30fcfc9 code=0x0 [ 66.558709][ T4191] usb 1-1: config 0 descriptor?? [ 66.575669][ T4191] usb 1-1: can't set config #0, error -71 [ 66.594190][ T4191] usb 1-1: USB disconnect, device number 2 [ 66.625769][ T4311] usb 5-1: can't set config #8, error -71 [ 66.668905][ T4311] usb 5-1: USB disconnect, device number 2 [ 66.691063][ T4373] genirq: Flags mismatch irq 9. 00000000 (at-a2150c) vs. 00000080 (acpi) [ 67.293912][ T4390] overlayfs: missing 'lowerdir' [ 67.412975][ T4391] ======================================================= [ 67.412975][ T4391] WARNING: The mand mount option has been deprecated and [ 67.412975][ T4391] and is ignored by this kernel. Remove the mand [ 67.412975][ T4391] option from the mount to silence this warning. [ 67.412975][ T4391] ======================================================= [ 67.453634][ T4391] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 67.655930][ T4391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.175478][ T4425] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.32'. [ 71.272546][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279266][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.384695][ T4457] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.395280][ T4457] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.386550][ T4467] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.43'. [ 74.905196][ T4490] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 75.778517][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 75.948155][ T4505] Zero length message leads to an empty skb [ 76.376908][ T7] cfg80211: failed to load regulatory.db [ 77.922887][ T4526] tipc: Enabling of bearer rejected, failed to enable media [ 78.234475][ T4536] netlink: 104 bytes leftover after parsing attributes in process `syz.3.60'. [ 78.840381][ T4191] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 78.849764][ T4191] Bluetooth: hci3: Injecting HCI hardware error event [ 78.858589][ T4201] Bluetooth: hci3: hardware error 0x00 [ 79.197794][ T4553] capability: warning: `syz.4.67' uses deprecated v2 capabilities in a way that may be insecure [ 79.304995][ T4242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.645096][ T4242] usb 1-1: Using ep0 maxpacket: 32 [ 80.225762][ T4242] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.255025][ T4242] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.386779][ T4242] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.821377][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 81.313061][ T4242] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.326044][ T4242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.332689][ T4242] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 81.356854][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.396817][ T4242] usb 1-1: config 0 descriptor?? [ 81.590363][ T4581] tipc: Enabling of bearer rejected, failed to enable media [ 81.671778][ T4585] process 'syz.3.76' launched './file0' with NULL argv: empty string added [ 82.146737][ T4242] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 82.155593][ T4242] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 82.163837][ T4242] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 82.177493][ T4242] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 82.205782][ T4242] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 82.255800][ T4242] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 82.273038][ T4242] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 82.289668][ T4242] usb 1-1: USB disconnect, device number 3 [ 82.295680][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 82.413093][ T26] audit: type=1800 audit(1761890847.563:3): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="/" dev="fuse" ino=9 res=0 errno=0 [ 82.517801][ T4599] fido_id[4599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 84.616652][ T4622] ceph: No mds server is up or the cluster is laggy [ 84.787815][ T4242] libceph: connect (1)[c::]:6789 error -101 [ 84.794631][ T4242] libceph: mon0 (1)[c::]:6789 connect error [ 85.660581][ T4637] tipc: Enabling of bearer rejected, failed to enable media [ 86.216822][ T4465] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.346592][ T4628] syz.3.83 (4628): drop_caches: 2 [ 88.215074][ T4242] Bluetooth: hci5: command 0x1003 tx timeout [ 88.224880][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 88.652216][ T1111] libceph: connect (1)[c::]:6789 error -101 [ 88.660524][ T1111] libceph: mon0 (1)[c::]:6789 connect error [ 88.681591][ T4673] ceph: No mds server is up or the cluster is laggy [ 88.688822][ T1111] libceph: connect (1)[c::]:6789 error -101 [ 88.695866][ T1111] libceph: mon0 (1)[c::]:6789 connect error [ 90.295142][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 90.405149][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 92.455059][ T4263] Bluetooth: hci5: command 0x1009 tx timeout [ 93.517884][ T4263] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 93.702613][ T4747] tipc: Enabling of bearer rejected, failed to enable media [ 93.895982][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 94.185996][ T4263] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 94.272998][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.419201][ T4263] usb 5-1: Product: syz [ 94.491333][ T4263] usb 5-1: Manufacturer: syz [ 94.608306][ T4263] usb 5-1: SerialNumber: syz [ 94.649483][ T4263] usb 5-1: config 0 descriptor?? [ 94.722855][ T4263] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 94.898729][ T4263] usb 5-1: USB disconnect, device number 3 [ 96.184408][ T4793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.445211][ T4793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.147568][ T4793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.512555][ T4793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.719518][ T4793] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.768453][ T4793] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.823073][ T4793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.874108][ T4793] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.986665][ T4822] input: syz0 as /devices/virtual/input/input5 [ 100.125080][ T4263] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.565117][ T4263] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 100.905070][ T4263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.927964][ T4263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.949410][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.035191][ T4263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.081557][ T4263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.121047][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.240344][ T4263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.264007][ T4263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.284304][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.375353][ T4263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.416111][ T4263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.456010][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.488576][ T4191] Bluetooth: hci5: command 0x1003 tx timeout [ 101.494788][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 101.749231][ T4263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.773898][ T4263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.808108][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.005138][ T4263] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 102.017760][ T4263] usb 3-1: can't read configurations, error -71 [ 103.575255][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 103.583634][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 105.057213][ T4311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.724208][ T4263] Bluetooth: hci5: command 0x1009 tx timeout [ 105.965015][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 106.095177][ T4311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.165625][ T4311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.196791][ T4311] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 106.240815][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.136076][ T4311] usb 4-1: config 0 descriptor?? [ 107.939082][ T4311] hid-generic 0003:1B1C:0A1F.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1f] on usb-dummy_hcd.3-1/input0 [ 108.238153][ T4311] usb 4-1: USB disconnect, device number 2 [ 108.373961][ T4978] fido_id[4978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.003007][ T4985] fuse: Bad value for 'fd' [ 110.452003][ T4998] atomic_op ffff88807d562198 conn xmit_atomic 0000000000000000 [ 110.535254][ T4781] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.665447][ T4781] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.996295][ T5018] tipc: Started in network mode [ 111.997958][ T4781] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 112.011786][ T4781] usb 5-1: config 1 interface 0 has no altsetting 0 [ 112.011911][ T5018] tipc: Node identity 2a9c22a220b6, cluster identity 4711 [ 112.037609][ T5018] tipc: Enabled bearer , priority 0 [ 112.213683][ T5020] device syzkaller0 entered promiscuous mode [ 112.225736][ T4781] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 112.267924][ T4781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.293891][ T4781] usb 5-1: Product: syz [ 112.300729][ T4781] usb 5-1: Manufacturer: syz [ 112.306715][ T4781] usb 5-1: SerialNumber: syz [ 112.331981][ T5017] tipc: Resetting bearer [ 112.418924][ T5017] tipc: Disabling bearer [ 112.485228][ T5005] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.492632][ T5005] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.782737][ T5005] netlink: set zone limit has 8 unknown bytes [ 112.789691][ T5028] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.170'. [ 113.777689][ T4958] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.417022][ T4781] rtl8150 5-1:1.0: couldn't reset the device [ 115.427712][ T4781] rtl8150: probe of 5-1:1.0 failed with error -5 [ 115.491678][ T4781] usb 5-1: USB disconnect, device number 4 [ 115.655107][ T4300] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.743080][ T5062] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.181'. [ 115.815035][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 115.821184][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 116.276942][ T4300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.322944][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.359846][ T4300] usb 2-1: Product: syz [ 116.379817][ T4300] usb 2-1: Manufacturer: syz [ 116.384593][ T4300] usb 2-1: SerialNumber: syz [ 117.645183][ T4300] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 117.928220][ T5086] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 118.251295][ T4300] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 118.452355][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 118.489218][ T4300] usb 2-1: USB disconnect, device number 3 [ 118.531216][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 118.559587][ T4300] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 120.087879][ T5101] device syzkaller0 entered promiscuous mode [ 120.625092][ T4263] Bluetooth: hci5: command 0x1009 tx timeout [ 121.557129][ T5121] netlink: 'syz.1.197': attribute type 72 has an invalid length. [ 122.188057][ T5133] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 124.716347][ T5158] device syzkaller0 entered promiscuous mode [ 125.056194][ T5167] netlink: 'syz.3.209': attribute type 72 has an invalid length. [ 125.495190][ T4311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.006700][ T5187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.885030][ T4311] usb 2-1: Using ep0 maxpacket: 8 [ 127.035056][ T4311] usb 2-1: config 8 has an invalid interface number: 160 but max is 0 [ 127.044970][ T4311] usb 2-1: config 8 has no interface number 0 [ 127.051170][ T4311] usb 2-1: config 8 interface 160 has no altsetting 0 [ 127.941314][ T5203] device syzkaller0 entered promiscuous mode [ 128.005298][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.075161][ T4311] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 128.415373][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.483219][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.745779][ T1108] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.810859][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.819379][ T4311] usb 2-1: Product: syz [ 128.823633][ T4311] usb 2-1: Manufacturer: syz [ 128.828537][ T4311] usb 2-1: SerialNumber: syz [ 128.844783][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.905280][ T4311] usb 2-1: can't set config #8, error -71 [ 128.913708][ T4311] usb 2-1: USB disconnect, device number 4 [ 128.936176][ T1108] usb 4-1: SerialNumber: syz [ 129.338050][ T1108] usb 4-1: 0:2 : does not exist [ 129.710070][ T1108] usb 4-1: USB disconnect, device number 3 [ 131.872949][ T4485] udevd[4485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.735807][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749130][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.827098][ T5253] device syzkaller0 entered promiscuous mode [ 133.107319][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.735203][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 133.855543][ T1108] usb 4-1: config 8 has an invalid interface number: 160 but max is 0 [ 133.887093][ T1108] usb 4-1: config 8 has no interface number 0 [ 133.945058][ T1108] usb 4-1: config 8 interface 160 has no altsetting 0 [ 134.555306][ T1108] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 134.581170][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.603944][ T1108] usb 4-1: Product: syz [ 134.613780][ T1108] usb 4-1: Manufacturer: syz [ 134.618969][ T1108] usb 4-1: SerialNumber: syz [ 134.905662][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.988203][ T1108] usb 4-1: Invalid firmware size=18. [ 135.011853][ T1108] usb 4-1: USB disconnect, device number 4 [ 135.155199][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 135.315158][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.405254][ T7] usb 1-1: config 2 has an invalid interface number: 206 but max is 2 [ 135.418798][ T7] usb 1-1: config 2 has an invalid interface number: 230 but max is 2 [ 135.476831][ T7] usb 1-1: config 2 has no interface number 0 [ 135.495371][ T7] usb 1-1: config 2 has no interface number 1 [ 135.516429][ T7] usb 1-1: config 2 interface 206 has no altsetting 0 [ 135.525028][ T7] usb 1-1: config 2 interface 2 has no altsetting 0 [ 135.531844][ T7] usb 1-1: config 2 interface 230 has no altsetting 0 [ 135.699732][ T7] usb 1-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=c9.9c [ 136.515694][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.558662][ T7] usb 1-1: Product: syz [ 136.583255][ T7] usb 1-1: Manufacturer: syz [ 136.636794][ T7] usb 1-1: SerialNumber: syz [ 136.787265][ T5296] binder: 5295:5296 ioctl 4018620d 0 returned -22 [ 137.641785][ T7] usb 1-1: selecting invalid altsetting 0 [ 138.409483][ T7] usb 1-1: Could not set interface, error -22 [ 138.427824][ T13] Bluetooth: hci1: command 0x0405 tx timeout [ 138.467579][ T7] usb 1-1: USB disconnect, device number 4 [ 142.556623][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 144.471242][ T5365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'. [ 146.975284][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.385625][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.454263][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 147.552900][ T13] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 147.633179][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.819223][ T13] usb 4-1: config 0 descriptor?? [ 148.010673][ T5391] netlink: 128 bytes leftover after parsing attributes in process `syz.2.274'. [ 148.415172][ T13] Bluetooth: Can't get version to change to load ram patch err [ 148.434108][ T13] Bluetooth: Loading patch file failed [ 148.453468][ T13] ath3k: probe of 4-1:0.0 failed with error -71 [ 148.505408][ T13] usb 4-1: USB disconnect, device number 5 [ 149.912732][ T5408] sched: RT throttling activated [ 151.789881][ T4952] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.788110][ T5428] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.797325][ T5428] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.806208][ T5428] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.815085][ T5428] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.106515][ T5425] [U]  [ 153.837250][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 153.848343][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 155.895081][ T4191] Bluetooth: hci5: command 0x1001 tx timeout [ 155.903629][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 156.406669][ T4191] Bluetooth: hci0: command 0x0c20 tx timeout [ 156.705246][ T5477] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.301'. [ 156.821573][ T5477] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value [ 157.146522][ T5482] tmpfs: Unknown parameter 'usrquota' [ 157.285679][ T5485] device syzkaller0 entered promiscuous mode [ 157.978116][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 161.514982][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.765060][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 161.885406][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 161.904674][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.967413][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 161.998706][ T13] pvrusb2: ********** [ 162.002820][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 162.019404][ T13] pvrusb2: Important functionality might not be entirely working. [ 162.028811][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 162.046736][ T13] pvrusb2: ********** [ 162.186612][ T2421] pvrusb2: Invalid write control endpoint [ 162.967316][ T4311] usb 3-1: USB disconnect, device number 4 [ 163.019461][ T2421] pvrusb2: Invalid write control endpoint [ 163.033933][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.058642][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.067199][ T5535] netem: incorrect gi model size [ 163.067288][ T5535] netem: change failed [ 163.110820][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.125628][ T2421] pvrusb2: Device being rendered inoperable [ 163.140747][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.309434][ T5540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.319'. [ 164.075123][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 164.168820][ T2421] pvrusb2: Attached sub-driver cx25840 [ 164.213108][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 164.344742][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 165.625621][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 165.955573][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.305109][ T1108] usb 3-1: device descriptor read/64, error -71 [ 166.535359][ T4967] Bluetooth: hci5: Frame reassembly failed (-84) [ 166.641966][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.835093][ T1108] usb 3-1: device descriptor read/64, error -71 [ 166.965146][ T1108] usb usb3-port1: attempt power cycle [ 167.485055][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.301553][ T1108] usb 3-1: device descriptor read/8, error -71 [ 168.545789][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 168.552365][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 168.965123][ T1108] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 169.519171][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.711377][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 169.887743][ T1108] usb 3-1: config 5 has an invalid interface number: 21 but max is 0 [ 169.995187][ T1108] usb 3-1: config 5 has no interface number 0 [ 170.021128][ T5601] overlayfs: failed to clone upperpath [ 170.031468][ T1108] usb 3-1: config 5 interface 21 has no altsetting 0 [ 170.129409][ T5609] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.225296][ T1108] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 170.245161][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.253182][ T1108] usb 3-1: Product: syz [ 170.261917][ T1108] usb 3-1: Manufacturer: syz [ 170.266900][ T1108] usb 3-1: SerialNumber: syz [ 170.896659][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 171.758313][ T4191] Bluetooth: hci5: command 0x1001 tx timeout [ 171.780551][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 172.267581][ T1108] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 172.450941][ T4781] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.961466][ T1225] wlan1: Trigger new scan to find an IBSS to join [ 173.165298][ T4781] usb 2-1: device descriptor read/64, error -71 [ 173.255174][ T1108] gspca_m5602: Failed to find a sensor [ 173.260804][ T1108] ALi m5602 3-1:5.21: ALi m5602 webcam failed [ 174.343237][ T1108] usb 3-1: USB disconnect, device number 8 [ 174.476365][ T4263] Bluetooth: hci5: command 0x1009 tx timeout [ 175.015222][ T4292] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.072825][ T5649] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.405408][ T1108] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 175.945631][ T4292] usb 1-1: Using ep0 maxpacket: 32 [ 176.125052][ T4292] usb 1-1: config 0 has an invalid interface number: 216 but max is 1 [ 176.217778][ T4292] usb 1-1: config 0 has an invalid interface number: 146 but max is 1 [ 176.227148][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.237524][ T4292] usb 1-1: config 0 has no interface number 0 [ 176.243716][ T4292] usb 1-1: config 0 has no interface number 1 [ 176.250699][ T4292] usb 1-1: config 0 interface 216 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 176.261972][ T4292] usb 1-1: config 0 interface 216 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 32 [ 176.281383][ T4292] usb 1-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 176.296937][ T4292] usb 1-1: config 0 interface 216 has no altsetting 0 [ 176.336225][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.345946][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 176.355034][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 176.375141][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 176.385202][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 176.391850][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 176.515807][ T1108] usb 3-1: config 5 has an invalid interface number: 21 but max is 0 [ 176.524216][ T1108] usb 3-1: config 5 has no interface number 0 [ 176.530779][ T1108] usb 3-1: config 5 interface 21 has no altsetting 0 [ 176.786071][ T1108] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 176.808679][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.957091][ T1108] usb 3-1: Product: syz [ 176.961355][ T1108] usb 3-1: Manufacturer: syz [ 176.966206][ T1108] usb 3-1: SerialNumber: syz [ 176.985093][ T4292] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=62.54 [ 177.014009][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.039793][ T4292] usb 1-1: Product: syz [ 177.044017][ T4292] usb 1-1: Manufacturer: syz [ 177.051645][ T4292] usb 1-1: SerialNumber: syz [ 177.073151][ T4292] usb 1-1: config 0 descriptor?? [ 177.146039][ T5641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.257325][ T5653] udc-core: couldn't find an available UDC or it's busy [ 177.264341][ T5653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.736600][ T4967] wlan1: Trigger new scan to find an IBSS to join [ 177.743516][ T1225] wlan1: Trigger new scan to find an IBSS to join [ 178.184589][ T5687] usb usb8: usbfs: process 5687 (syz.1.366) did not claim interface 0 before use [ 178.192639][ T4292] msi2500 1-1:0.216: Registered as swradio24 [ 178.212256][ T4292] msi2500 1-1:0.216: SDR API is still slightly experimental and functionality changes may follow [ 178.246376][ T5689] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.393449][ T4292] msi2500 1-1:0.146: Registered as swradio25 [ 178.414504][ T4292] msi2500 1-1:0.146: SDR API is still slightly experimental and functionality changes may follow [ 178.578698][ T4292] usb 1-1: USB disconnect, device number 5 [ 178.757837][ T1225] wlan1: Creating new IBSS network, BSSID 76:05:2e:9e:e3:ae [ 179.306729][ T1108] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 180.093712][ T1108] gspca_m5602: Failed to find a sensor [ 180.120620][ T1108] ALi m5602 3-1:5.21: ALi m5602 webcam failed [ 180.480968][ T1108] usb 3-1: USB disconnect, device number 9 [ 180.802759][ T4952] wlan1: Trigger new scan to find an IBSS to join [ 180.802792][ T1225] wlan1: Trigger new scan to find an IBSS to join [ 181.233764][ T5725] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 181.804946][ T5723] netlink: set zone limit has 8 unknown bytes [ 183.474793][ T5753] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.317349][ T4292] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 184.343939][ T1225] wlan1: Trigger new scan to find an IBSS to join [ 184.815300][ T4955] wlan1: Trigger new scan to find an IBSS to join [ 185.045059][ T4292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.085194][ T4292] usb 5-1: not running at top speed; connect to a high speed hub [ 185.125153][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.169738][ T4292] usb 5-1: config 5 has an invalid interface number: 21 but max is 0 [ 185.187471][ T4292] usb 5-1: config 5 has no interface number 0 [ 185.217844][ T4292] usb 5-1: config 5 interface 21 has no altsetting 0 [ 185.502096][ T4292] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 185.534243][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.574996][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.575277][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 185.617517][ T4292] usb 5-1: Product: syz [ 185.648129][ T4292] usb 5-1: Manufacturer: syz [ 185.670987][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.691168][ T4292] usb 5-1: SerialNumber: syz [ 185.735195][ T4538] wlan1: Trigger new scan to find an IBSS to join [ 185.766867][ T4967] wlan1: Creating new IBSS network, BSSID c6:34:e7:54:cb:c1 [ 185.816412][ T23] usb 2-1: config 0 descriptor?? [ 185.880603][ T4967] wlan1: Creating new IBSS network, BSSID 66:52:97:1e:d3:9d [ 186.117376][ T5742] udc-core: couldn't find an available UDC or it's busy [ 186.124350][ T5742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.291373][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 186.306514][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 186.673668][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 186.782222][ T23] [drm] Initialized udl on minor 2 [ 186.961773][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.971541][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.981287][ T1108] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.985556][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err 0 [ 187.023677][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 187.199653][ T1108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 187.219076][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.237541][ T1108] usb 3-1: Product: syz [ 187.241747][ T1108] usb 3-1: Manufacturer: syz [ 187.261900][ T1108] usb 3-1: SerialNumber: syz [ 187.277808][ T23] usb 2-1: USB disconnect, device number 7 [ 187.295528][ T4234] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.567348][ T1108] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 187.788790][ T4234] usb 3-1: USB disconnect, device number 10 [ 187.821375][ T4234] usblp0: removed [ 189.276432][ T4292] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 190.289430][ T4292] gspca_m5602: Failed to find a sensor [ 190.298817][ T4952] wlan1: Trigger new scan to find an IBSS to join [ 190.329033][ T4292] ALi m5602 5-1:5.21: ALi m5602 webcam failed [ 190.490896][ T4292] usb 5-1: USB disconnect, device number 5 [ 191.118985][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 192.095117][ T13] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 192.450664][ T4952] wlan1: Creating new IBSS network, BSSID be:58:2b:4d:e4:40 [ 192.630438][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.470165][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 193.570441][ T5847] lo speed is unknown, defaulting to 1000 [ 193.579395][ T5847] lo speed is unknown, defaulting to 1000 [ 193.586426][ T5847] lo speed is unknown, defaulting to 1000 [ 193.637904][ T5847] infiniband sz1: set active [ 193.642800][ T5847] infiniband sz1: added lo [ 193.651460][ T13] usb 4-1: config 5 has an invalid interface number: 21 but max is 0 [ 193.655374][ T4292] lo speed is unknown, defaulting to 1000 [ 193.680362][ T5847] RDS/IB: sz1: added [ 193.685235][ T5847] smc: adding ib device sz1 with port count 1 [ 193.691515][ T5847] smc: ib device sz1 port 1 has pnetid [ 193.712374][ T5847] lo speed is unknown, defaulting to 1000 [ 193.778643][ T13] usb 4-1: config 5 has no interface number 0 [ 193.797604][ T13] usb 4-1: config 5 interface 21 has no altsetting 0 [ 193.863213][ T5847] lo speed is unknown, defaulting to 1000 [ 193.915637][ T5847] lo speed is unknown, defaulting to 1000 [ 193.966204][ T5847] lo speed is unknown, defaulting to 1000 [ 194.016823][ T5847] lo speed is unknown, defaulting to 1000 [ 194.068074][ T4292] lo speed is unknown, defaulting to 1000 [ 194.147046][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.153395][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.265113][ T13] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 194.286521][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.312160][ T13] usb 4-1: Product: syz [ 194.355124][ T13] usb 4-1: can't set config #5, error -71 [ 196.810360][ T13] usb 4-1: USB disconnect, device number 6 [ 197.840989][ T5868] input: syz0 as /devices/virtual/input/input6 [ 199.095038][ T13] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 200.547056][ T5911] lo speed is unknown, defaulting to 1000 [ 200.595275][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.655161][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 200.947758][ T13] usb 4-1: config 5 has an invalid interface number: 21 but max is 0 [ 201.052760][ T13] usb 4-1: config 5 has no interface number 0 [ 201.100808][ T13] usb 4-1: config 5 interface 21 has no altsetting 0 [ 201.162239][ T5926] device syzkaller0 entered promiscuous mode [ 201.185242][ T13] usb 4-1: string descriptor 0 read error: -71 [ 201.191506][ T13] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 201.236904][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.322650][ T13] usb 4-1: can't set config #5, error -71 [ 201.359841][ T13] usb 4-1: USB disconnect, device number 7 [ 202.305232][ T4234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.575172][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 202.735074][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.760028][ T4234] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.781415][ T4234] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.836533][ T4234] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.860144][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.870268][ T4234] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 202.894971][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.923922][ T4234] usb 2-1: config 0 descriptor?? [ 203.579772][ T4234] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 203.680452][ T4234] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 203.832373][ T4234] corsair-cpro 0003:1B1C:0C10.0003: item fetching failed at offset 2/5 [ 204.005384][ T4234] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -22 [ 204.020188][ T4234] usb 2-1: USB disconnect, device number 8 [ 204.030186][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 204.036363][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 206.802491][ T4234] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 206.813833][ T5819] Bluetooth: hci5: command 0x1001 tx timeout [ 206.825284][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 207.275516][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.335591][ T4234] usb 2-1: not running at top speed; connect to a high speed hub [ 207.485542][ T4234] usb 2-1: config 5 has an invalid interface number: 21 but max is 0 [ 207.495077][ T4234] usb 2-1: config 5 has no interface number 0 [ 207.519944][ T4234] usb 2-1: config 5 interface 21 has no altsetting 0 [ 207.685702][ T4234] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 207.695146][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.704979][ T4234] usb 2-1: Product: syz [ 207.711055][ T4234] usb 2-1: Manufacturer: syz [ 207.755108][ T4234] usb 2-1: SerialNumber: syz [ 208.086414][ T5961] udc-core: couldn't find an available UDC or it's busy [ 208.093380][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 208.931532][ T4292] Bluetooth: hci5: command 0x1009 tx timeout [ 209.027055][ T4234] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 209.245526][ T4234] gspca_m5602: Failed to find a sensor [ 209.255646][ T4234] ALi m5602 2-1:5.21: ALi m5602 webcam failed [ 209.310700][ T4234] usb 2-1: USB disconnect, device number 9 [ 209.735017][ T4249] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.145017][ T4249] usb 4-1: Using ep0 maxpacket: 32 [ 210.265238][ T4249] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 210.283691][ T4249] usb 4-1: config 0 has no interface number 0 [ 210.300247][ T4249] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.331645][ T4249] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 210.353476][ T4249] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.393907][ T4249] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 120, changing to 10 [ 210.411059][ T4249] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 50535, setting to 1024 [ 211.049038][ T4249] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.215239][ T4249] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 211.234840][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.253639][ T4249] usb 4-1: Product: syz [ 211.258264][ T4249] usb 4-1: Manufacturer: syz [ 211.268315][ T4249] usb 4-1: SerialNumber: syz [ 211.289172][ T4249] usb 4-1: config 0 descriptor?? [ 212.806106][ T4249] usb 4-1: can't set config #0, error -71 [ 212.813312][ T4249] usb 4-1: USB disconnect, device number 8 [ 212.854316][ T6009] vivid-006: disconnect [ 212.861574][ T6008] vivid-006: reconnect [ 215.095070][ T4235] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 216.607183][ T1225] wlan1: Trigger new scan to find an IBSS to join [ 216.614044][ T1225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.856062][ T1225] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.878646][ T6042] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 216.947272][ T4235] usb 1-1: device not accepting address 6, error -71 [ 218.778750][ T4967] wlan1: Trigger new scan to find an IBSS to join [ 218.905014][ T4304] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.935251][ T4249] Bluetooth: hci5: command 0x1003 tx timeout [ 218.945163][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 219.185027][ T4304] usb 4-1: Using ep0 maxpacket: 16 [ 219.325851][ T4304] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.415004][ T4304] usb 4-1: config 0 has no interface number 0 [ 219.449312][ T4304] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.460632][ T4304] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.471189][ T4304] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 219.480420][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.808317][ T4304] usb 4-1: config 0 descriptor?? [ 220.284995][ T4292] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 220.568141][ T4304] uclogic 0003:28BD:0071.0004: pen parameters not found [ 220.576156][ T4304] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 220.777390][ T1225] wlan1: Creating new IBSS network, BSSID 16:35:07:12:08:45 [ 220.845856][ T4292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.948998][ T4292] usb 2-1: not running at top speed; connect to a high speed hub [ 221.082502][ T21] usb 4-1: USB disconnect, device number 9 [ 221.166923][ T4292] usb 2-1: config 5 has an invalid interface number: 21 but max is 0 [ 221.228088][ T4249] Bluetooth: hci5: command 0x1001 tx timeout [ 221.235124][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 221.318817][ T4292] usb 2-1: config 5 has no interface number 0 [ 221.324994][ T4292] usb 2-1: config 5 interface 21 has no altsetting 0 [ 221.625723][ T4292] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 221.635675][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.644879][ T4292] usb 2-1: Product: syz [ 221.649186][ T4292] usb 2-1: Manufacturer: syz [ 221.653785][ T4292] usb 2-1: SerialNumber: syz [ 221.928650][ T6071] udc-core: couldn't find an available UDC or it's busy [ 221.935770][ T6071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.463440][ T4950] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.696417][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 225.347491][ T4292] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 226.780949][ T26] audit: type=1326 audit(1761890991.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 226.938642][ T4292] gspca_m5602: Failed to find a sensor [ 227.005085][ T26] audit: type=1326 audit(1761890991.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 227.027275][ T4292] ALi m5602 2-1:5.21: ALi m5602 webcam failed [ 227.049825][ T26] audit: type=1326 audit(1761890991.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 227.085715][ T4292] usb 2-1: USB disconnect, device number 10 [ 227.328350][ T26] audit: type=1326 audit(1761890991.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 228.540051][ T26] audit: type=1326 audit(1761890991.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 228.651179][ T26] audit: type=1326 audit(1761890991.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd5eb39810 code=0x7ffc0000 [ 228.714193][ T26] audit: type=1326 audit(1761890991.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 228.831364][ T26] audit: type=1326 audit(1761890991.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb3afc9 code=0x7ffc0000 [ 228.885134][ T4249] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.875237][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 229.934331][ T4249] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 229.977503][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 230.105420][ T4249] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 230.128706][ T4249] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 230.218155][ T4249] usb 3-1: Manufacturer: syz [ 230.250720][ T4249] usb 3-1: config 0 descriptor?? [ 230.321425][ T4249] smsusb:smsusb_probe: board id=9, interface number 0 [ 230.407814][ T4249] smsusb:smsusb_probe: Device initialized with return code -19 [ 230.512100][ T4311] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 231.155112][ T4311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 231.175967][ T4249] usb 3-1: USB disconnect, device number 11 [ 231.255071][ T4311] usb 2-1: not running at top speed; connect to a high speed hub [ 231.335307][ T4311] usb 2-1: config 5 has an invalid interface number: 21 but max is 0 [ 231.470243][ T4311] usb 2-1: config 5 has no interface number 0 [ 231.477072][ T4311] usb 2-1: config 5 interface 21 has no altsetting 0 [ 232.445168][ T4311] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 232.454513][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.553416][ T4311] usb 2-1: Product: syz [ 232.557685][ T4311] usb 2-1: Manufacturer: syz [ 232.562292][ T4311] usb 2-1: SerialNumber: syz [ 233.858176][ T4311] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 234.095206][ T4292] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.166133][ T4311] gspca_m5602: Failed to find a sensor [ 234.173318][ T4311] ALi m5602 2-1:5.21: ALi m5602 webcam failed [ 234.346657][ T4311] usb 2-1: USB disconnect, device number 11 [ 234.498892][ T6178] input: syz0 as /devices/virtual/input/input7 [ 235.046737][ T4292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.073795][ T4292] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.148898][ T4235] [ 235.151256][ T4235] ====================================================== [ 235.158275][ T4235] WARNING: possible circular locking dependency detected [ 235.165297][ T4235] syzkaller #0 Not tainted [ 235.169704][ T4235] ------------------------------------------------------ [ 235.176711][ T4235] kworker/0:5/4235 is trying to acquire lock: [ 235.182779][ T4235] ffff88807dcbcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 235.193823][ T4235] [ 235.193823][ T4235] but task is already holding lock: [ 235.201187][ T4235] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 235.210240][ T4235] [ 235.210240][ T4235] which lock already depends on the new lock. [ 235.210240][ T4235] [ 235.220638][ T4235] [ 235.220638][ T4235] the existing dependency chain (in reverse order) is: [ 235.229653][ T4235] [ 235.229653][ T4235] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 235.237650][ T4235] __mutex_lock_common+0x1eb/0x2390 [ 235.243378][ T4235] mutex_lock_nested+0x17/0x20 [ 235.248769][ T4235] rfkill_register+0x33/0x8a0 [ 235.253975][ T4235] hci_register_dev+0x452/0x970 [ 235.259350][ T4235] vhci_create_device+0x32c/0x5c0 [ 235.264901][ T4235] vhci_write+0x391/0x450 [ 235.269759][ T4235] vfs_write+0x712/0xd00 [ 235.274523][ T4235] ksys_write+0x14d/0x250 [ 235.279372][ T4235] do_syscall_64+0x4c/0xa0 [ 235.284292][ T4235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.290700][ T4235] [ 235.290700][ T4235] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 235.296524][ T4292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.298492][ T4235] __mutex_lock_common+0x1eb/0x2390 [ 235.298514][ T4235] mutex_lock_nested+0x17/0x20 [ 235.318645][ T4235] vhci_send_frame+0x88/0x100 [ 235.323824][ T4235] hci_send_frame+0x1a9/0x2e0 [ 235.329003][ T4235] hci_tx_work+0x9f9/0x1710 [ 235.334007][ T4235] process_one_work+0x863/0x1000 [ 235.339452][ T4235] worker_thread+0xaa8/0x12a0 [ 235.344626][ T4235] kthread+0x436/0x520 [ 235.349189][ T4235] ret_from_fork+0x1f/0x30 [ 235.354105][ T4235] [ 235.354105][ T4235] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 235.363313][ T4235] __flush_work+0xdd/0x1b0 [ 235.368268][ T4235] hci_dev_do_close+0x1e7/0x1030 [ 235.373726][ T4235] hci_error_reset+0x101/0x2c0 [ 235.378997][ T4235] process_one_work+0x863/0x1000 [ 235.384446][ T4235] worker_thread+0xaa8/0x12a0 [ 235.389629][ T4235] kthread+0x436/0x520 [ 235.394215][ T4235] ret_from_fork+0x1f/0x30 [ 235.399132][ T4235] [ 235.399132][ T4235] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 235.406773][ T4235] __mutex_lock_common+0x1eb/0x2390 [ 235.412476][ T4235] mutex_lock_nested+0x17/0x20 [ 235.417741][ T4235] bg_scan_update+0x44/0x3b0 [ 235.422835][ T4235] process_one_work+0x863/0x1000 [ 235.428272][ T4235] worker_thread+0xaa8/0x12a0 [ 235.433448][ T4235] kthread+0x436/0x520 [ 235.438014][ T4235] ret_from_fork+0x1f/0x30 [ 235.442941][ T4235] [ 235.442941][ T4235] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 235.452729][ T4235] __lock_acquire+0x2c33/0x7c60 [ 235.458085][ T4235] lock_acquire+0x197/0x3f0 [ 235.463095][ T4235] __flush_work+0xdd/0x1b0 [ 235.468007][ T4235] __cancel_work_timer+0x3ac/0x520 [ 235.473618][ T4235] hci_request_cancel_all+0xcc/0x300 [ 235.479405][ T4235] hci_dev_do_close+0x4e/0x1030 [ 235.484753][ T4235] hci_rfkill_set_block+0x10a/0x190 [ 235.490450][ T4235] rfkill_set_block+0x1c6/0x420 [ 235.495800][ T4235] rfkill_epo+0x75/0x170 [ 235.500540][ T4235] rfkill_op_handler+0x76/0x220 [ 235.505887][ T4235] process_one_work+0x863/0x1000 [ 235.511321][ T4235] worker_thread+0xaa8/0x12a0 [ 235.516498][ T4235] kthread+0x436/0x520 [ 235.521063][ T4235] ret_from_fork+0x1f/0x30 [ 235.525976][ T4235] [ 235.525976][ T4235] other info that might help us debug this: [ 235.525976][ T4235] [ 235.536175][ T4235] Chain exists of: [ 235.536175][ T4235] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 235.536175][ T4235] [ 235.551865][ T4235] Possible unsafe locking scenario: [ 235.551865][ T4235] [ 235.559291][ T4235] CPU0 CPU1 [ 235.564720][ T4235] ---- ---- [ 235.570064][ T4235] lock(rfkill_global_mutex); [ 235.574804][ T4235] lock(&data->open_mutex); [ 235.581887][ T4235] lock(rfkill_global_mutex); [ 235.589146][ T4235] lock((work_completion)(&hdev->bg_scan_update)); [ 235.595710][ T4235] [ 235.595710][ T4235] *** DEADLOCK *** [ 235.595710][ T4235] [ 235.603830][ T4235] 3 locks held by kworker/0:5/4235: [ 235.609004][ T4235] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 235.619325][ T4235] #1: ffffc9000421fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 235.629644][ T4235] #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 235.639096][ T4235] [ 235.639096][ T4235] stack backtrace: [ 235.644972][ T4235] CPU: 0 PID: 4235 Comm: kworker/0:5 Not tainted syzkaller #0 [ 235.652409][ T4235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.662457][ T4235] Workqueue: events rfkill_op_handler [ 235.667828][ T4235] Call Trace: [ 235.671091][ T4235] [ 235.674090][ T4235] dump_stack_lvl+0x168/0x230 [ 235.678749][ T4235] ? load_image+0x3b0/0x3b0 [ 235.683240][ T4235] ? show_regs_print_info+0x20/0x20 [ 235.688421][ T4235] ? print_circular_bug+0x12b/0x1a0 [ 235.693598][ T4235] check_noncircular+0x274/0x310 [ 235.698515][ T4235] ? add_chain_block+0x940/0x940 [ 235.703431][ T4235] ? lockdep_lock+0xdc/0x1e0 [ 235.708001][ T4235] ? __lock_acquire+0x12d9/0x7c60 [ 235.713001][ T4235] ? lockdep_lock+0x1e0/0x1e0 [ 235.717664][ T4235] ? mark_lock+0x94/0x320 [ 235.721984][ T4235] __lock_acquire+0x2c33/0x7c60 [ 235.726822][ T4235] ? add_lock_to_list+0x18d/0x280 [ 235.731830][ T4235] ? __lock_acquire+0x289d/0x7c60 [ 235.736832][ T4235] ? verify_lock_unused+0x140/0x140 [ 235.742027][ T4235] lock_acquire+0x197/0x3f0 [ 235.746516][ T4235] ? __flush_work+0xc1/0x1b0 [ 235.751086][ T4235] ? __lock_acquire+0x7c60/0x7c60 [ 235.756102][ T4235] ? read_lock_is_recursive+0x10/0x10 [ 235.761454][ T4235] ? start_flush_work+0x776/0x820 [ 235.766454][ T4235] __flush_work+0xdd/0x1b0 [ 235.770848][ T4235] ? __flush_work+0xc1/0x1b0 [ 235.775419][ T4235] ? flush_work+0x20/0x20 [ 235.779789][ T4235] ? try_to_grab_pending+0xf3/0x7e0 [ 235.784979][ T4235] ? lockdep_hardirqs_off+0x70/0x100 [ 235.790248][ T4235] ? mark_lock+0x94/0x320 [ 235.794556][ T4235] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 235.800524][ T4235] ? lock_chain_count+0x20/0x20 [ 235.805353][ T4235] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 235.811224][ T4235] ? _raw_spin_unlock+0x40/0x40 [ 235.816049][ T4235] ? __cancel_work_timer+0x331/0x520 [ 235.821310][ T4235] __cancel_work_timer+0x3ac/0x520 [ 235.826401][ T4235] ? cancel_work_sync+0x20/0x20 [ 235.831226][ T4235] ? remove_wait_queue+0x120/0x120 [ 235.836410][ T4235] ? __cancel_work+0x1f4/0x2d0 [ 235.841150][ T4235] ? __cancel_work+0x26f/0x2d0 [ 235.845889][ T4235] ? cancel_work+0x20/0x20 [ 235.850284][ T4235] hci_request_cancel_all+0xcc/0x300 [ 235.855548][ T4235] hci_dev_do_close+0x4e/0x1030 [ 235.860384][ T4235] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 235.866253][ T4235] ? _raw_spin_unlock+0x40/0x40 [ 235.871077][ T4235] ? kobject_uevent_env+0x371/0x890 [ 235.876263][ T4235] hci_rfkill_set_block+0x10a/0x190 [ 235.881446][ T4235] ? rcu_lock_release+0x20/0x20 [ 235.886272][ T4235] rfkill_set_block+0x1c6/0x420 [ 235.891103][ T4235] rfkill_epo+0x75/0x170 [ 235.895322][ T4235] rfkill_op_handler+0x76/0x220 [ 235.900148][ T4235] process_one_work+0x863/0x1000 [ 235.905069][ T4235] ? worker_detach_from_pool+0x240/0x240 [ 235.910675][ T4235] ? lockdep_hardirqs_off+0x70/0x100 [ 235.916028][ T4235] ? _raw_spin_lock_irq+0xab/0xe0 [ 235.921039][ T4235] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 235.926431][ T4235] ? wq_worker_running+0x97/0x170 [ 235.931438][ T4235] worker_thread+0xaa8/0x12a0 [ 235.936098][ T4235] ? lockdep_hardirqs_on+0x94/0x140 [ 235.941275][ T4235] ? lockdep_hardirqs_on+0x94/0x140 [ 235.946447][ T4235] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 235.952320][ T4235] kthread+0x436/0x520 [ 235.956368][ T4235] ? rcu_lock_release+0x20/0x20 [ 235.961198][ T4235] ? kthread_blkcg+0xd0/0xd0 [ 235.965764][ T4235] ret_from_fork+0x1f/0x30 [ 235.970166][ T4235] [ 236.048792][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.067951][ T4292] usb 4-1: Product: syz [ 236.092067][ T4292] usb 4-1: Manufacturer: syz [ 236.102543][ T4292] usb 4-1: SerialNumber: syz [ 236.136040][ T4292] usb 4-1: can't set config #1, error -71 [ 236.251446][ T4292] usb 4-1: USB disconnect, device number 10