last executing test programs: 11.501386047s ago: executing program 4 (id=812): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[], 0x174}, 0x1, 0x0, 0x0, 0x20000001}, 0x20011090) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES16]) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) 10.401412399s ago: executing program 4 (id=815): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = dup3(r4, r3, 0x80000) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x30}, {0x0, 0x2}], 0x2, 0x0, 0x0) 10.104092554s ago: executing program 2 (id=819): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 9.626463874s ago: executing program 0 (id=821): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28", 0x6, 0x0, 0x0, 0x0) 8.450601227s ago: executing program 0 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 8.26932269s ago: executing program 0 (id=826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x5608, 0x3f00) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000002080)) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 7.408109797s ago: executing program 2 (id=829): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = socket(0x8000000010, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x20040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES8=r3, @ANYBLOB="010027bd70f3fcdb1701bf4ce9fb7afdfeb44f5881c44e250300000008000100", @ANYRES32=r5, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x7f4a6159e350f1b) bind$nfc_llcp(r2, &(0x7f0000000140)={0x27, r5, 0xffffffffffffffff, 0x5, 0x9, 0xfa, "b5d480867751b69ec2b236581f970eff55afaba119796125a69c93f0764bd17ec30b626939ad72cdf0837deffd48afb8dcd01673638ce6670fedecafbe8eb8", 0x8008}, 0x60) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) r7 = socket$isdn(0x22, 0x2, 0x2) r8 = dup3(r7, 0xffffffffffffffff, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_create(0x2) 6.73342169s ago: executing program 4 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r3 = syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000000140)=0x2, 0x3, 0x0, 0x0, &(0x7f0000002240)=0x2, 0xab02000d) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073d415a7c66530797a320000000014000000110001ac373f22745f66e93159c5b25d8b3e3ca00d17c60adf2d685692cf9b1dda985412d3b3317d9b24eb60eadca1e1215e6f23a66ae1a49798ba9b144699f72a81a31ce89039d7521edc10", @ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC, @ANYRES8=r4, @ANYRESOCT=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) munlock(&(0x7f0000002000/0x4000)=nil, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES8=r3], 0xb8}, 0x1, 0x0, 0x0, 0x24004894}, 0x40) sendmsg$nl_xfrm(r7, 0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}}, 0x0) close(r5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 6.050616813s ago: executing program 0 (id=836): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 5.820094327s ago: executing program 4 (id=838): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/193, 0xc1) fsopen(0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000001, 0x31, 0xffffffffffffffff, 0x3000) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) readv(r2, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz1\x00', {0x7, 0x4, 0xa8, 0x62d3}, 0x31, [0x2, 0x0, 0x5, 0x7fffffff, 0x60, 0x2, 0x7, 0x2, 0x80000001, 0x1, 0x5, 0x101, 0xe, 0xb, 0x7, 0x8, 0x80000000, 0xfffff000, 0x1, 0x9047, 0x6d4, 0x2, 0x8, 0xff, 0x52fa, 0x2, 0x7ff, 0xff, 0x100, 0x3, 0x2, 0x2, 0x4, 0xd42, 0xd, 0xef5, 0xe38, 0x1ff, 0x30, 0x3, 0x5, 0x1, 0x31, 0x40, 0x801, 0x9, 0x1, 0xf67, 0x0, 0x7b83, 0x1, 0x800, 0x5, 0x3, 0x6, 0x7, 0xff000000, 0xfffffff1, 0x7, 0x6, 0x2, 0x400, 0x4, 0x80000001], [0x3, 0xd, 0x81, 0x6, 0xffffff77, 0x785a, 0x8, 0x7, 0x8, 0x7fffffff, 0x10000, 0x4, 0x6, 0x7f, 0xfffffffe, 0x3, 0x1, 0x15, 0x1, 0x9, 0x1fb, 0x9, 0x2, 0x5, 0x3, 0xdfc, 0xb6fc, 0x8, 0x4, 0x81, 0x6, 0x0, 0x81, 0x0, 0x0, 0x9, 0xa, 0x9, 0xce4, 0x2, 0x4, 0x9, 0x7, 0x6016, 0x70b, 0x8, 0xfffffff7, 0xfffffff8, 0x5, 0x7f, 0xb28, 0x5, 0x6, 0xfffffff7, 0x92, 0xc55, 0xb6, 0x2, 0x5, 0x6, 0x8, 0xeb82f2e, 0x40, 0x8], [0x8358, 0x0, 0x6, 0x9, 0x4, 0x100, 0x3, 0x8, 0xfffffff7, 0x938, 0x7, 0x3, 0x10000, 0xffff, 0x81, 0x8, 0x2c6d, 0xc, 0x7, 0x4, 0x3, 0x2, 0x1, 0x7, 0x5ed, 0x3, 0x7, 0x4, 0x8, 0x4, 0x120000, 0x8, 0x9, 0x7440, 0x9, 0x0, 0x800, 0x5, 0xf2a, 0x6, 0x8, 0x1, 0x9, 0x5, 0x9, 0x6, 0x582a, 0x40, 0x8, 0x0, 0x7, 0x54bf, 0x7, 0x8, 0x3, 0x9, 0x101, 0x6, 0x4, 0x3, 0x2, 0x5, 0x4, 0x10001], [0x1, 0x5, 0xfffffff8, 0x5, 0x7f, 0x1006, 0x38, 0x4, 0x400, 0xc, 0xc, 0x5, 0x3, 0x6, 0x3, 0x1, 0xfffff801, 0x23ba, 0x1, 0x9, 0x81, 0x6, 0xffffffb1, 0x9, 0x90000000, 0x1000, 0x1, 0x9, 0x1000, 0x2, 0x5, 0x40, 0x9, 0x2, 0x4b8, 0x0, 0x81, 0x1, 0x3, 0x51, 0x588, 0x0, 0x9, 0x4, 0x3, 0x8, 0x7, 0x80000000, 0x4, 0x2, 0x0, 0x6, 0x8001, 0xe15, 0x2, 0x84, 0xfffffef6, 0x0, 0x6, 0x7fffffff, 0x186, 0x7, 0xa9, 0x9]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(r0) 4.748934858s ago: executing program 1 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000e0601010000000000000000020000000900020073797a3202000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40c4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000007acc000000000000000017000000", @ANYRES32, @ANYBLOB], 0x48) 4.15031549s ago: executing program 2 (id=841): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = dup3(r4, r3, 0x80000) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x30}, {0x0, 0x2}], 0x2, 0x0, 0x0) 3.62832324s ago: executing program 1 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000000000)=""/193, &(0x7f0000000100)=0xc1) 3.406693614s ago: executing program 1 (id=843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r2}}, 0x48) 3.389406725s ago: executing program 0 (id=844): shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000002c0)={0x2, 0x4}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000300)="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"/602, 0x25a}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d", 0x41}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00'}, 0x18) setreuid(0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000580)=0x14) 3.323563825s ago: executing program 1 (id=845): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) read$alg(0xffffffffffffffff, &(0x7f0000001e80)=""/4097, 0x1001) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) 2.843053195s ago: executing program 4 (id=846): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x1}, 0x20) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902"], 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) socket$kcm(0x2, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 2.58305372s ago: executing program 1 (id=847): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x1138) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) 2.57639148s ago: executing program 3 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 2.463056353s ago: executing program 1 (id=849): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) socket$inet6(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, @in6=@empty, @in6=@local}]}]}, 0x148}}, 0x0) 2.456855343s ago: executing program 3 (id=850): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) syz_open_dev$dri(0x0, 0x5, 0x200000) r0 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000011c0)='./file0\x00', 0x21f) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f696e74722c00daf24d4ede11483257f671497a20957223be3291146acb0364c507047dfca45ce3458240e5e5c0"]) r4 = socket$kcm(0x29, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000909000/0x2000)=nil, 0x2000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff0000ffffffff00000000004a26a29a549b10cda8531dfc5aad50ee", @ANYRES32=0x0, @ANYBLOB="000000009180000024001280090001007866726d00000000fbfe0280080001000100000008000200040000000a000100aaaaaaaaaabb0000"], 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 1.766309646s ago: executing program 0 (id=851): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = socket(0x8000000010, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x20040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES8=r3, @ANYBLOB="010027bd70f3fcdb1701bf4ce9fb7afdfeb44f5881c44e250300000008000100", @ANYRES32=r5, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x7f4a6159e350f1b) bind$nfc_llcp(r2, &(0x7f0000000140)={0x27, r5, 0xffffffffffffffff, 0x5, 0x9, 0xfa, "b5d480867751b69ec2b236581f970eff55afaba119796125a69c93f0764bd17ec30b626939ad72cdf0837deffd48afb8dcd01673638ce6670fedecafbe8eb8", 0x8008}, 0x60) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) r7 = socket$isdn(0x22, 0x2, 0x2) r8 = dup3(r7, 0xffffffffffffffff, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_create(0x2) 1.580994769s ago: executing program 3 (id=852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000e0601010000000000000000020000000900020073797a3202000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40c4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000007acc000000000000000017000000", @ANYRES32, @ANYBLOB], 0x48) 1.399477883s ago: executing program 2 (id=853): gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000340), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xb80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010b2a52d006d2fc05000000000000000000", @ANYRES32=0x0, @ANYBLOB="08003c00ee10000008003c0028ffffff08002c0000000000"], 0x34}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0xe58, 0x10100}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_enter(r4, 0xb15, 0xffffbffe, 0x8, 0x0, 0x0) io_uring_enter(r4, 0x847be, 0x0, 0xe, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 595.230459ms ago: executing program 3 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000080)=@ax25={{0x3, @bcast, 0x7}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="bf1bf30bc00bd3c72c0023e09788ed839a7bcd077e38ecdcdbcb082a984326d819f9c95c6e3df66143216d15aec8e35a00d7a9e79a6b728d4f2c69a7", 0x3c}, {&(0x7f0000000300)="85a0ea9087ec53f8da73218a213d32978f50ed8320cac9ba80de261f143b320e76aa2f9ab3c63afff5e09c4bcfb36091fd3f62244a50cfddd383bb474ee944a8558acbc6648480d0ad7bb0283c0006dea1c3c2493cec784b0b77a01258098ce51f56a112d4a2d92d2bdebb5d22630c3b7947b1db3f151467378f8cd31d9bdbe943e51eaeb95c9ea515ce2cc5087deaab1dc5283940796580f472e88f4120c9750a7a413510dd86ece4985573a0282fa7954f7a4aee5fca946bd59db32d660923a5ece91a2e6044d6a2499f85b456143d83482fc401d0b4ac5490cc7c4045", 0xde}], 0x2, &(0x7f0000000540)}, 0x24000481) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0x26, 0x19, {0x2, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0x6, 0xeb4d, 0xfff3}}}) readv(r2, 0x0, 0x0) dup(0xffffffffffffffff) 437.364922ms ago: executing program 2 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 369.659563ms ago: executing program 3 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 202.935606ms ago: executing program 3 (id=857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 125.113328ms ago: executing program 4 (id=858): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 2 (id=859): syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. syzkaller login: [ 59.373928][ T4172] cgroup: Unknown subsys name 'net' [ 59.505871][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.942351][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.427266][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 62.470798][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.480345][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.533887][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.605089][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.652299][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.660096][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.668258][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.676768][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.683981][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.692489][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.714025][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.721277][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.729124][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.736776][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.744203][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.752316][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.806208][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.813737][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.821703][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.834173][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.841347][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.849598][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.871354][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.878496][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.886901][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.900925][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.907997][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.916071][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.933702][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.944771][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.974933][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.986394][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.005376][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.030397][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.048766][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.090490][ T4186] team0: Port device team_slave_0 added [ 63.097840][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.115757][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.123592][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.131973][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.140433][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.147506][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.156247][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.165329][ T4190] team0: Port device team_slave_0 added [ 63.175487][ T4186] team0: Port device team_slave_1 added [ 63.190093][ T4182] team0: Port device team_slave_0 added [ 63.211716][ T4190] team0: Port device team_slave_1 added [ 63.232956][ T4182] team0: Port device team_slave_1 added [ 63.241139][ T4191] team0: Port device team_slave_0 added [ 63.248736][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.280197][ T4191] team0: Port device team_slave_1 added [ 63.296564][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.314881][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.322117][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.348637][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.362024][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.368988][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.395066][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.414947][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.422054][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.448017][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.467196][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.474429][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.500831][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.532740][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.539951][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.566123][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.579036][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.586631][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.617955][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.635833][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.643262][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.669451][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.687780][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.695029][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.720992][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.737623][ T4194] team0: Port device team_slave_0 added [ 63.773313][ T4194] team0: Port device team_slave_1 added [ 63.797534][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.804900][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.836764][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.843783][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.850659][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.858425][ T4186] Cannot create hsr debugfs directory [ 63.882994][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.889929][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.896382][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.904205][ T4182] Cannot create hsr debugfs directory [ 63.923239][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.930461][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.936936][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.944608][ T4191] Cannot create hsr debugfs directory [ 63.975417][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.982574][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.008839][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.010572][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 64.030253][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 64.064209][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.072020][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.098854][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 64.104497][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.105107][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 64.169442][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 64.246154][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.256522][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.263538][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.271308][ T4194] Cannot create hsr debugfs directory [ 64.433254][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.449785][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.458885][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.474128][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.511234][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.526918][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.536400][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.554060][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.600400][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.617337][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.626530][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.636257][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.734522][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.748552][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.775307][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.787127][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.796383][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.806823][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.822739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.833562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.843451][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.850732][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.866035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.874711][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.885035][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.901632][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.911990][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.921359][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.928458][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.961183][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.011617][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.018542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.028914][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.051599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.062302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.071941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.081885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.091610][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.101575][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.126633][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.134300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.142492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.153165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.162409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.171415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.179095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.188218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.197876][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.210778][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.222774][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.233929][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.243570][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.253450][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.260556][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.284145][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.300760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.318108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.335661][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.342855][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.362113][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.381640][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.391856][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.400514][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.409189][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.418551][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.427557][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.436708][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.443808][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.453555][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.485151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.496399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.506152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.518255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.528022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.545095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.554388][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.561520][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.570011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.585188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.596169][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.605067][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.638423][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.652489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.665815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.678170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.687050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.695875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.705970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.718712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.731407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.741192][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.751885][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.771621][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.787543][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.804655][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.821080][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.842984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.858829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.881142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.899182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.913189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.947854][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.963579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.973278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.987196][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.005385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.020507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.052563][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.078164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.089066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.098144][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 66.100239][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 66.118658][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.125865][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.134016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.161784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.171128][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 66.177176][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 66.177697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.193725][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.200841][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.208796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.217610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.226355][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.233476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.242162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.249958][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 66.252528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.265713][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.272820][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.281005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.289962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.315972][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.337494][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.346655][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.356347][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.364055][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.373034][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.400855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.411082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.418520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.426365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.435771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.446014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.455152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.463701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.472393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.481794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.490416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.511269][ T4190] device veth0_vlan entered promiscuous mode [ 66.518638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.531023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.540285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.548719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.564203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.573875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.593115][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.608927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.618710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.629101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.637925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.646632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.655967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.664783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.676176][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.685636][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.696297][ T4190] device veth1_vlan entered promiscuous mode [ 66.712465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.722567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.733709][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.761895][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.776615][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.792572][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.822042][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.837365][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.847394][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.855710][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.865472][ T4182] device veth0_vlan entered promiscuous mode [ 66.885655][ T4190] device veth0_macvtap entered promiscuous mode [ 66.900178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.909913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.918653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.934254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.945862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.958691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.968867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.979468][ T4191] device veth0_vlan entered promiscuous mode [ 66.996900][ T4190] device veth1_macvtap entered promiscuous mode [ 67.023369][ T4191] device veth1_vlan entered promiscuous mode [ 67.040229][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.058444][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.068880][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.078174][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.093095][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.104468][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.113745][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.125498][ T4182] device veth1_vlan entered promiscuous mode [ 67.145986][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.161480][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.173670][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.186869][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.198734][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.210922][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.221341][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.233668][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.243451][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.252701][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261679][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297816][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.305554][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.317380][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.326505][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.351679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.361268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.371835][ T4191] device veth0_macvtap entered promiscuous mode [ 67.381332][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.394837][ T4182] device veth0_macvtap entered promiscuous mode [ 67.413386][ T4191] device veth1_macvtap entered promiscuous mode [ 67.426929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.435662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.444554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.454413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.463518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.474535][ T4182] device veth1_macvtap entered promiscuous mode [ 67.495807][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.506797][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520509][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.557632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.575113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.584339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.593178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.602275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.615474][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.627202][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.638765][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.655034][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.666411][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.676570][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.688269][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.700913][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.726663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.737669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.747201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.757523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.766655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.778669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.792840][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.802203][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.811321][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.820885][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.841754][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.853231][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.867305][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.878075][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.890695][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.905969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.915084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.923250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.933075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.941664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.950528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.959181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.967808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.978325][ T4186] device veth0_vlan entered promiscuous mode [ 68.001361][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012114][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.021443][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.032483][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.060533][ T4186] device veth1_vlan entered promiscuous mode [ 68.068166][ T4194] device veth0_vlan entered promiscuous mode [ 68.102881][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.112154][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.128142][ T4194] device veth1_vlan entered promiscuous mode [ 68.170403][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.171028][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 68.178834][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 68.197712][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.207647][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.232126][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.241370][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.250135][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 68.250304][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 68.274030][ T4186] device veth0_macvtap entered promiscuous mode [ 68.288086][ T4186] device veth1_macvtap entered promiscuous mode [ 68.294689][ T504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.299522][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.307085][ T504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.315411][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.326077][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.334484][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 68.341794][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.350750][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.360192][ T4194] device veth0_macvtap entered promiscuous mode [ 68.398322][ T4194] device veth1_macvtap entered promiscuous mode [ 68.422931][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.452961][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.459977][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.466606][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.480620][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.493087][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.503873][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.506778][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.514007][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.533685][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.546310][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.572162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.605133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.615590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.630809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.647660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.658374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.692536][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.708618][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.725243][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.737350][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.748220][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.760898][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.770880][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.781521][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.793097][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.802912][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.826033][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.837007][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.853790][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.866058][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.881948][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.894406][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.926013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.936643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.990062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.998932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.017599][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.033922][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.044347][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.062001][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.075138][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.093649][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.107380][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.124215][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.139125][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.156696][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.166290][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.176030][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.184870][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.197040][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.214951][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.215833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.237131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.252030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.459453][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.551434][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.668530][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.731657][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931872][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.940999][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.987855][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.145902][ T504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.295714][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 70.307204][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.314860][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 70.322035][ T504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.322839][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.405943][ T4306] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 70.425808][ T4306] ubi31: attaching mtd0 [ 70.439177][ T4306] ubi31: scanning is finished [ 70.444084][ T4306] ubi31: empty MTD device detected [ 70.579291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.589290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 70.598391][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 70.609283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.624555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.639284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.648570][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.659278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.669289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.678567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.989002][ T4306] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 71.089958][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 71.096715][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 71.110123][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 71.125933][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.279961][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.294013][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301413][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.386403][ T504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.403494][ T504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.436807][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.447666][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.477554][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.517418][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.074858][ T4345] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 75.083244][ T4345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.094276][ T4345] device dummy0 entered promiscuous mode [ 75.158851][ T4345] bridge0: port 3(dummy0) entered blocking state [ 75.169265][ T4345] bridge0: port 3(dummy0) entered disabled state [ 75.269737][ T4345] bridge0: port 3(dummy0) entered blocking state [ 75.276263][ T4345] bridge0: port 3(dummy0) entered forwarding state [ 75.736945][ T4354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'. [ 76.551111][ T4362] process 'syz.1.18' launched './file0' with NULL argv: empty string added [ 76.585067][ T4361] nfs: Deprecated parameter 'nointr' [ 76.595711][ T4361] ntfs3: loop2: try to read out of volume at offset 0x0 [ 76.746967][ T4361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19'. [ 79.280115][ T4390] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 79.286966][ T4390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.350767][ T4390] vhci_hcd vhci_hcd.0: Device attached [ 79.419380][ T4391] vhci_hcd: connection closed [ 79.439594][ T4379] vhci_hcd: stop threads [ 79.457113][ T4379] vhci_hcd: release socket [ 79.462154][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.485260][ T4379] vhci_hcd: disconnect device [ 79.563569][ T4287] vhci_hcd: vhci_device speed not set [ 79.849504][ T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.868773][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.820206][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.971160][ T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.020390][ T21] usb 1-1: Product: syz [ 81.042915][ T21] usb 1-1: Manufacturer: syz [ 81.068362][ T21] usb 1-1: SerialNumber: syz [ 81.103022][ T21] usb 1-1: config 0 descriptor?? [ 81.169041][ T21] usb 1-1: selecting invalid altsetting 0 [ 81.508994][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.542771][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.559608][ T1108] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 81.656121][ T1111] usb 1-1: USB disconnect, device number 2 [ 81.789378][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 81.910375][ T21] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.936873][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.958742][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.982557][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.008345][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.031905][ T1108] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.039403][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.074963][ T1108] usb 2-1: config 0 has no interface number 0 [ 82.079356][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.089945][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 82.113718][ T1108] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 82.134835][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 82.149413][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.172062][ T1108] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.184456][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.206037][ T1108] usb 2-1: config 0 descriptor?? [ 82.229777][ T4409] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.249620][ T4409] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.290840][ T1108] ldusb 2-1:0.55: Interrupt in endpoint not found [ 82.369541][ T21] usb 5-1: GET_CAPABILITIES returned 0 [ 82.375224][ T21] usbtmc 5-1:16.0: can't read capabilities [ 82.558325][ T1108] usb 2-1: USB disconnect, device number 2 [ 82.660201][ T4405] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 82.849993][ T4236] usb 5-1: USB disconnect, device number 2 [ 83.868487][ T4433] Zero length message leads to an empty skb [ 86.287196][ T4460] nfs: Deprecated parameter 'nointr' [ 86.590650][ T4460] ntfs3: loop1: try to read out of volume at offset 0x0 [ 86.758646][ T7] cfg80211: failed to load regulatory.db [ 87.619795][ T4472] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.678231][ T4492] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 90.959961][ T4499] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 90.972222][ T4499] ubi31: attaching mtd0 [ 90.983126][ T4499] ubi31: scanning is finished [ 91.553121][ T4499] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 93.625762][ T4505] sched: RT throttling activated [ 97.615018][ T4532] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 98.933205][ T21] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.387285][ T4545] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.399330][ T4545] ubi31: attaching mtd0 [ 99.409927][ T4545] ubi31: scanning is finished [ 99.986691][ T4545] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 102.319926][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.739487][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.759332][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.769377][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.919417][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.928647][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.941787][ T1111] usb 2-1: config 0 descriptor?? [ 102.989819][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.010802][ T4578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 103.259375][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 103.289476][ T21] usb 5-1: device descriptor read/all, error -71 [ 103.379815][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.407200][ T1111] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 103.422870][ T4584] binder: 4582:4584 unknown command 1074553619 [ 103.429078][ T4584] binder: 4582:4584 ioctl c0306201 200000000540 returned -22 [ 103.447220][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.466796][ T7] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 103.491616][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.523484][ T7] usb 1-1: config 0 descriptor?? [ 103.524652][ T1111] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 104.477866][ T7] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review [ 104.509859][ T7] bigben 0003:146B:0902.0002: hidraw1: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 104.532485][ T4592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.80'. [ 104.542415][ T7] bigben 0003:146B:0902.0002: missing HID_OUTPUT_REPORT 0 [ 104.559393][ T7] bigben 0003:146B:0902.0002: no output report found [ 104.650578][ T1111] usb 1-1: USB disconnect, device number 3 [ 104.895138][ T4600] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 104.907110][ T4600] ubi31: attaching mtd0 [ 105.541582][ T4600] ubi31: scanning is finished [ 105.577461][ T4600] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 105.651387][ T4287] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 105.746529][ T4597] fido_id[4597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.849416][ T4287] usb 2-1: device descriptor read/64, error -32 [ 106.120543][ T4287] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 106.295752][ T1111] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.337877][ T1111] Bluetooth: hci3: Injecting HCI hardware error event [ 106.424572][ T4189] Bluetooth: hci3: hardware error 0x00 [ 106.870893][ T4618] nfs: Deprecated parameter 'nointr' [ 107.740077][ T4626] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.836216][ T4627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.90'. [ 108.903686][ T4243] usb 2-1: USB disconnect, device number 3 [ 110.938014][ T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 112.869278][ T13] usb 1-1: device not accepting address 4, error -71 [ 113.133600][ T4670] nfs: Deprecated parameter 'nointr' [ 113.147396][ T4670] ntfs3: loop0: try to read out of volume at offset 0x0 [ 114.388667][ T4678] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 122.754318][ T4724] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 123.529627][ T4726] fuse: Unknown parameter 'fd0x0000000000000003' [ 128.697806][ T4775] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 129.699684][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 129.721754][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 129.732834][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 129.743711][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 129.753267][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 131.229920][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 133.981495][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.988417][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.994980][ T4830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 137.509780][ T4846] overlayfs: failed to clone upperpath [ 137.527579][ T4846] overlayfs: missing 'lowerdir' [ 140.840928][ T4850] could not allocate digest TFM handle sha384-ce [ 149.140948][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 149.406806][ T4947] hugetlbfs: syz.3.176 (4947): Using mlock ulimits for SHM_HUGETLB is deprecated [ 149.614086][ T4260] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 149.630173][ T4260] Bluetooth: hci2: Injecting HCI hardware error event [ 149.645590][ T4183] Bluetooth: hci2: hardware error 0x00 [ 151.235736][ T4968] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 153.022922][ T4982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.649816][ T5002] team0: No ports can be present during mode change [ 155.889861][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:1) [ 157.946269][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 165.975111][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 170.330472][ T1111] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 170.338793][ T1111] Bluetooth: hci1: Injecting HCI hardware error event [ 170.370454][ T4183] Bluetooth: hci1: hardware error 0x00 [ 170.618574][ T5118] syz.1.221 uses obsolete (PF_INET,SOCK_PACKET) [ 174.799064][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 175.329126][ T4189] Bluetooth: hci1: unexpected event for opcode 0x041c [ 184.242252][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 186.099050][ T5231] qnx6: unable to read the first superblock [ 186.859419][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 186.867300][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 187.106732][ T5245] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 187.116987][ T5245] ubi31: attaching mtd0 [ 187.127926][ T5245] ubi31: scanning is finished [ 187.695475][ T5245] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 189.213816][ T5252] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.225412][ T5252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.575815][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 192.589918][ T5293] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 192.600440][ T5293] ubi31: attaching mtd0 [ 192.605829][ T5293] ubi31: scanning is finished [ 192.808674][ T5293] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 192.816555][ T5293] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 192.824065][ T5293] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 192.831230][ T5293] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 192.838795][ T5293] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 192.845763][ T5293] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 192.854382][ T5293] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2337494871 [ 192.864772][ T5293] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 192.876640][ T5298] ubi31: background thread "ubi_bgt31d" started, PID 5298 [ 194.176792][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183583][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.200314][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 201.469510][ T4221] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 201.477944][ T4221] Bluetooth: hci0: Injecting HCI hardware error event [ 201.883847][ T4189] Bluetooth: hci0: hardware error 0x00 [ 205.389614][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 208.771735][ T5409] netlink: 'syz.1.299': attribute type 12 has an invalid length. [ 209.198417][ T4689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.003546][ T5429] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.013539][ T5429] ubi: mtd0 is already attached to ubi31 [ 210.669809][ T4689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.681336][ T4689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.691704][ T4689] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 210.701181][ T4689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.212923][ T4689] usb 2-1: config 0 descriptor?? [ 211.294234][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 213.079407][ T4689] usbhid 2-1:0.0: can't add hid device: -71 [ 213.109379][ T4689] usbhid: probe of 2-1:0.0 failed with error -71 [ 213.158339][ T4689] usb 2-1: USB disconnect, device number 4 [ 214.503484][ T5474] /dev/loop4: Can't open blockdev [ 215.169033][ T5470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.317'. [ 215.459991][ T5302] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 215.702834][ T5481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 215.711995][ T5481] ubi: mtd0 is already attached to ubi31 [ 216.623497][ T5302] Bluetooth: hci4: Injecting HCI hardware error event [ 216.630865][ T4183] Bluetooth: hci4: hardware error 0x00 [ 216.787970][ T5493] netlink: 'syz.3.322': attribute type 12 has an invalid length. [ 218.119502][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.242017][ T26] audit: type=1326 audit(1757201975.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f8acdbe9 code=0x7fc00000 [ 218.730359][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.761076][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.976575][ T4228] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 218.997637][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.033703][ T4228] usb 4-1: config 0 descriptor?? [ 220.781219][ T4228] usbhid 4-1:0.0: can't add hid device: -71 [ 220.787428][ T4228] usbhid: probe of 4-1:0.0 failed with error -71 [ 220.799123][ T4228] usb 4-1: USB disconnect, device number 2 [ 222.972706][ T5555] ntfs3: loop2: try to read out of volume at offset 0x0 [ 223.431605][ T5549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.340'. [ 228.709318][ T5613] ntfs3: loop0: try to read out of volume at offset 0x0 [ 228.760590][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 229.618826][ T5608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.357'. [ 236.610410][ T5685] fuse: Bad value for 'fd' [ 240.650032][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bdf8800: rx timeout, send abort [ 240.660353][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880627acc00: rx timeout, send abort [ 240.669229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bdf8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.752042][ T5737] /dev/sg0: Can't open blockdev [ 241.168590][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880627acc00: abort rx timeout. Force session deactivation [ 242.226774][ T5738] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 242.665955][ T5749] netlink: 'syz.2.398': attribute type 12 has an invalid length. [ 243.110556][ T5302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 243.519722][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.637902][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.648475][ T5302] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 243.657744][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.740624][ T5302] usb 3-1: config 0 descriptor?? [ 245.819279][ T5781] /dev/loop4: Can't open blockdev [ 246.457188][ T5779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.408'. [ 246.813624][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d182800: rx timeout, send abort [ 246.822469][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d182800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.837130][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880230eb000: rx timeout, send abort [ 247.299712][ T5302] usbhid 3-1:0.0: can't add hid device: -71 [ 247.308194][ T5302] usbhid: probe of 3-1:0.0 failed with error -71 [ 247.345480][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880230eb000: abort rx timeout. Force session deactivation [ 247.428604][ T5302] usb 3-1: USB disconnect, device number 2 [ 247.712293][ T5796] siw: device registration error -23 [ 249.683768][ T5817] netlink: 'syz.0.420': attribute type 12 has an invalid length. [ 250.379591][ T5302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.672523][ T5827] ntfs3: loop2: try to read out of volume at offset 0x0 [ 250.889416][ T5302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.909203][ T5302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.933430][ T5302] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 250.949219][ T5302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.969531][ T5302] usb 1-1: config 0 descriptor?? [ 251.117176][ T5826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.422'. [ 251.571888][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629c0800: rx timeout, send abort [ 251.641644][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629c2c00: rx timeout, send abort [ 251.650601][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880629c2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 251.840948][ T5843] siw: device registration error -23 [ 252.080326][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629c0800: abort rx timeout. Force session deactivation [ 254.379958][ T5302] usbhid 1-1:0.0: can't add hid device: -71 [ 254.386744][ T5302] usbhid: probe of 1-1:0.0 failed with error -71 [ 254.459351][ T5302] usb 1-1: USB disconnect, device number 6 [ 254.894551][ T5865] nfs: Deprecated parameter 'nointr' [ 254.901714][ T5865] /dev/loop4: Can't open blockdev [ 255.142750][ T5865] netlink: 48 bytes leftover after parsing attributes in process `syz.4.435'. [ 256.181710][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188142][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.330757][ T5880] siw: device registration error -23 [ 256.612971][ T5888] netlink: 'syz.0.443': attribute type 12 has an invalid length. [ 256.969476][ T4287] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.685582][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880603e9c00: rx timeout, send abort [ 257.723538][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880603e9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 257.737978][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806129c400: rx timeout, send abort [ 258.246271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806129c400: abort rx timeout. Force session deactivation [ 259.732535][ T4287] usb 1-1: unable to read config index 0 descriptor/all [ 259.743480][ T4287] usb 1-1: can't read configurations, error -71 [ 260.633116][ T5917] nfs: Deprecated parameter 'nointr' [ 260.662680][ T5917] ntfs3: loop0: try to read out of volume at offset 0x0 [ 261.465506][ T5904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.447'. [ 262.561568][ T5939] netlink: 'syz.0.458': attribute type 12 has an invalid length. [ 263.762946][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023e36400: rx timeout, send abort [ 263.771486][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023e36400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.785936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bdf7400: rx timeout, send abort [ 263.856985][ T4243] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.239520][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.253832][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.264172][ T4243] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 264.273413][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.290081][ T4243] usb 1-1: config 0 descriptor?? [ 264.295137][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bdf7400: abort rx timeout. Force session deactivation [ 265.218521][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 268.329412][ T4243] usbhid 1-1:0.0: can't add hid device: -71 [ 268.335557][ T4243] usbhid: probe of 1-1:0.0 failed with error -71 [ 268.356444][ T4243] usb 1-1: USB disconnect, device number 9 [ 269.616793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a285000: rx timeout, send abort [ 269.625136][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a284000: rx timeout, send abort [ 269.634860][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a285000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 270.133408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a284000: abort rx timeout. Force session deactivation [ 271.257152][ T6016] netlink: 'syz.1.485': attribute type 12 has an invalid length. [ 271.729572][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 272.399815][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.450583][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.460838][ T4228] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 272.470319][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.488856][ T4228] usb 2-1: config 0 descriptor?? [ 274.497944][ T6049] program syz.4.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.031880][ T4228] usbhid 2-1:0.0: can't add hid device: -71 [ 275.044570][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc5f400: rx timeout, send abort [ 275.059599][ T4228] usbhid: probe of 2-1:0.0 failed with error -71 [ 275.060595][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc5f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.080691][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc5d000: rx timeout, send abort [ 275.589023][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc5d000: abort rx timeout. Force session deactivation [ 275.772725][ T4228] usb 2-1: USB disconnect, device number 5 [ 277.971592][ T6085] netlink: 'syz.4.506': attribute type 12 has an invalid length. [ 279.399787][ T1335] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 280.600405][ T1335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.625737][ T1335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.753009][ T1335] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 280.919199][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.791173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8ef000: rx timeout, send abort [ 281.793658][ T1335] usb 5-1: config 0 descriptor?? [ 281.800400][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f8ef000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.818868][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8eec00: rx timeout, send abort [ 281.839354][ T1335] usb 5-1: can't set config #0, error -71 [ 281.876878][ T1335] usb 5-1: USB disconnect, device number 5 [ 282.327082][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8eec00: abort rx timeout. Force session deactivation [ 282.965627][ T6133] binder: 6131:6133 unknown command 0 [ 282.990259][ T6133] binder: 6131:6133 ioctl c0306201 2000000001c0 returned -22 [ 283.357179][ T6137] ubi: mtd0 is already attached to ubi31 [ 285.302774][ T6149] netlink: 'syz.2.523': attribute type 12 has an invalid length. [ 285.799314][ T4243] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 287.493848][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.590482][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.601521][ T4243] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 287.610952][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.621169][ T4243] usb 3-1: config 0 descriptor?? [ 288.049405][ T4243] usbhid 3-1:0.0: can't add hid device: -71 [ 288.055456][ T4243] usbhid: probe of 3-1:0.0 failed with error -71 [ 288.095092][ T4243] usb 3-1: USB disconnect, device number 3 [ 288.620624][ T6175] ubi: mtd0 is already attached to ubi31 [ 288.917749][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b1ac00: rx timeout, send abort [ 288.926408][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061b1ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 288.940915][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fe52000: rx timeout, send abort [ 288.992735][ T6185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.449301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fe52000: abort rx timeout. Force session deactivation [ 290.572747][ T6200] input: syz1 as /devices/virtual/input/input6 [ 293.419691][ T6224] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.161998][ T6237] ubi: mtd0 is already attached to ubi31 [ 294.443809][ T6241] netlink: 'syz.3.547': attribute type 27 has an invalid length. [ 295.119385][ T4221] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.519323][ T4221] usb 1-1: Using ep0 maxpacket: 32 [ 296.265752][ T4221] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 296.299752][ T4221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.354350][ T4221] usb 1-1: config 0 descriptor?? [ 296.619417][ T4221] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 296.704064][ T4221] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.769678][ T4221] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 296.824152][ T4221] usb 1-1: media controller created [ 296.952979][ T4221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.977941][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.986404][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.182850][ T6276] dib0700: tx buffer length is larger than 4. Not supported. [ 297.190344][ T4221] DVB: Unable to find symbol dib7000p_attach() [ 297.201118][ T4221] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 297.362314][ T4221] rc_core: IR keymap rc-dib0700-rc5 not found [ 297.373352][ T4221] Registered IR keymap rc-empty [ 297.387659][ T4221] dvb-usb: could not initialize remote control. [ 297.413549][ T4221] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 297.712855][ T4221] usb 1-1: USB disconnect, device number 10 [ 297.802755][ T4221] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 298.187258][ T6281] ubi: mtd0 is already attached to ubi31 [ 298.392349][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.443977][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.547610][ T6284] binder: 6283:6284 ioctl 4018620d 0 returned -22 [ 298.555495][ T6284] binder: 6283:6284 ioctl c0306201 0 returned -14 [ 298.564833][ T6284] ptrace attach of "./syz-executor exec"[4182] was attempted by "./syz-executor exec"[6284] [ 300.305408][ T6241] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.317835][ T6241] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.333088][ T6241] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.354503][ T6241] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.561394][ T5302] bond0 speed is unknown, defaulting to 1000 [ 301.972336][ T6312] input: syz1 as /devices/virtual/input/input8 [ 302.017794][ T6316] binder: 6315:6316 ioctl c0306201 200000000080 returned -14 [ 302.445338][ T6328] ubi: mtd0 is already attached to ubi31 [ 302.877742][ T6318] loop5: detected capacity change from 0 to 16384 [ 303.859363][ T1335] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 304.249219][ T1335] usb 2-1: Using ep0 maxpacket: 16 [ 304.879366][ T1335] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 304.889565][ T1335] usb 2-1: config 0 has no interface number 0 [ 304.896249][ T1335] usb 2-1: config 0 interface 217 has no altsetting 0 [ 304.971970][ T6353] input: syz1 as /devices/virtual/input/input9 [ 305.079525][ T1335] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 305.093023][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.108882][ T1335] usb 2-1: Product: syz [ 305.128151][ T1335] usb 2-1: Manufacturer: syz [ 305.151104][ T1335] usb 2-1: SerialNumber: syz [ 305.168425][ T1335] usb 2-1: config 0 descriptor?? [ 305.297289][ T6363] nfs: Deprecated parameter 'nointr' [ 305.317323][ T6363] ntfs3: loop2: try to read out of volume at offset 0x0 [ 305.434367][ T1335] usb 2-1: USB disconnect, device number 6 [ 305.459401][ T4244] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 305.468831][ T6368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.589'. [ 305.739210][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 305.869512][ T4244] usb 4-1: config index 0 descriptor too short (expected 61219, got 36) [ 305.892599][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.924209][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.956963][ T4244] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 306.213267][ T6377] ubi: mtd0 is already attached to ubi31 [ 306.409382][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.424433][ T4244] usb 4-1: config 0 descriptor?? [ 306.899379][ T4244] usbhid 4-1:0.0: can't add hid device: -71 [ 306.906208][ T4244] usbhid: probe of 4-1:0.0 failed with error -71 [ 307.021443][ T4244] usb 4-1: USB disconnect, device number 3 [ 308.577508][ T6392] input: syz1 as /devices/virtual/input/input10 [ 308.592472][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 308.601989][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 309.260421][ T6409] ubi: mtd0 is already attached to ubi31 [ 309.739301][ T4221] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.785318][ T6420] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 310.049342][ T4221] usb 2-1: Using ep0 maxpacket: 8 [ 310.150724][ T6426] nfs: Deprecated parameter 'nointr' [ 310.169427][ T4221] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.183502][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.192888][ T4221] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 310.215073][ T6429] netlink: 80 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.228487][ T6431] ntfs3: loop0: try to read out of volume at offset 0x0 [ 310.237991][ T4221] usb 2-1: config 179 has no interface number 0 [ 310.257506][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.272584][ T4221] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.291662][ T6429] netlink: 80 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.305196][ T4221] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 310.323067][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.335043][ T4221] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.352119][ T6429] netlink: 80 bytes leftover after parsing attributes in process `syz.4.610'. [ 310.364892][ T4221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.375637][ T6429] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 310.424843][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.609'. [ 310.660812][ T4221] usb 2-1: USB disconnect, device number 7 [ 310.959640][ T6438] input: syz1 as /devices/virtual/input/input11 [ 311.542155][ T6447] ubi: mtd0 is already attached to ubi31 [ 312.229789][ T6456] mmap: syz.2.618 (6456) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 314.967052][ T6456] syz.2.618 (6456): drop_caches: 1 [ 315.194115][ T6473] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 315.495443][ T6480] ubi: mtd0 is already attached to ubi31 [ 317.055005][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062544][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.103867][ T6497] nfs: Deprecated parameter 'nointr' [ 318.116345][ T6493] ntfs3: loop0: try to read out of volume at offset 0x0 [ 318.208566][ T6497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.631'. [ 320.311304][ T6515] ubi: mtd0 is already attached to ubi31 [ 324.619275][ T4221] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 324.879296][ T4221] usb 5-1: Using ep0 maxpacket: 16 [ 324.999452][ T4221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.065130][ T4221] usb 5-1: config 0 has no interfaces? [ 325.240670][ T4221] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 325.255306][ T4221] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 325.303707][ T4221] usb 5-1: Product: syz [ 325.308209][ T4221] usb 5-1: Manufacturer: syz [ 325.318477][ T4221] usb 5-1: SerialNumber: syz [ 325.355390][ T4221] usb 5-1: config 0 descriptor?? [ 325.634120][ T4221] usb 5-1: USB disconnect, device number 6 [ 325.674861][ T6563] netlink: 'syz.2.653': attribute type 12 has an invalid length. [ 326.039228][ T5302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 326.161355][ T6573] ubi: mtd0 is already attached to ubi31 [ 327.249339][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.073279][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.978545][ T5302] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 329.462528][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.135763][ T5302] usb 3-1: config 0 descriptor?? [ 330.219353][ T5302] usb 3-1: can't set config #0, error -71 [ 330.274934][ T5302] usb 3-1: USB disconnect, device number 4 [ 330.521339][ T6601] netlink: 292 bytes leftover after parsing attributes in process `syz.1.666'. [ 330.836197][ T6612] ubi: mtd0 is already attached to ubi31 [ 330.940964][ T6611] netlink: 'syz.3.672': attribute type 12 has an invalid length. [ 330.969573][ T4244] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 331.309237][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 331.349324][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.175990][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.186553][ T4244] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 332.196250][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.219971][ T4244] usb 5-1: config 0 descriptor?? [ 332.354624][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 332.500405][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 332.530580][ T5302] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 332.549662][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.581892][ T4244] usbhid 5-1:0.0: can't add hid device: -71 [ 332.588330][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.601268][ T4244] usbhid: probe of 5-1:0.0 failed with error -71 [ 332.612813][ T4244] usb 5-1: USB disconnect, device number 7 [ 332.618795][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 332.632635][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.651553][ T1108] usb 4-1: config 0 descriptor?? [ 332.664071][ T6635] device syzkaller1 entered promiscuous mode [ 332.889462][ T5302] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.905789][ T5302] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.918023][ T5302] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.933910][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.969983][ T6619] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 334.364778][ T4221] usb 2-1: USB disconnect, device number 8 [ 334.499447][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 334.509356][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 334.556723][ T1108] usb 4-1: USB disconnect, device number 4 [ 336.704380][ T6654] input: syz1 as /devices/virtual/input/input12 [ 336.861712][ T6663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.689'. [ 336.924867][ T6667] tipc: Enabling of bearer rejected, failed to enable media [ 337.131177][ T6675] siw: device registration error -23 [ 338.038294][ T6687] netlink: 108 bytes leftover after parsing attributes in process `syz.1.698'. [ 338.261530][ T6696] input: syz1 as /devices/virtual/input/input13 [ 338.816671][ T6711] siw: device registration error -23 [ 339.891563][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 340.188738][ T6733] input: syz1 as /devices/virtual/input/input14 [ 340.669291][ T4860] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 340.939202][ T4860] usb 1-1: Using ep0 maxpacket: 8 [ 341.059442][ T4860] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 341.075519][ T4860] usb 1-1: config 0 has no interface number 0 [ 341.097431][ T4860] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 341.137338][ T4860] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 17056, setting to 1024 [ 341.165583][ T4860] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 341.209211][ T4860] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.267802][ T4860] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.326944][ T4860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.358552][ T4860] usb 1-1: config 0 descriptor?? [ 341.440922][ T4860] ldusb 1-1:0.55: Interrupt in endpoint not found [ 341.731845][ T1335] usb 1-1: USB disconnect, device number 11 [ 341.973412][ T6752] ubi: mtd0 is already attached to ubi31 [ 342.064443][ T6754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 342.989244][ T4244] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 342.990354][ T6769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.728'. [ 343.158774][ T6775] nfs: Deprecated parameter 'nointr' [ 343.249289][ T4244] usb 5-1: Using ep0 maxpacket: 8 [ 343.288303][ T6774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.730'. [ 343.369416][ T4244] usb 5-1: config 0 has no interfaces? [ 344.279480][ T4244] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 344.299230][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.325346][ T4244] usb 5-1: Product: syz [ 344.329941][ T4244] usb 5-1: Manufacturer: syz [ 344.334715][ T4244] usb 5-1: SerialNumber: syz [ 344.348898][ T4244] usb 5-1: config 0 descriptor?? [ 344.598946][ T5302] usb 5-1: USB disconnect, device number 8 [ 347.220280][ T6817] nfs: Deprecated parameter 'nointr' [ 347.299574][ T6817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.744'. [ 347.757347][ T6823] bond0 speed is unknown, defaulting to 1000 [ 348.646098][ T6837] siw: device registration error -23 [ 351.200046][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 351.686612][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'. [ 351.695750][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'. [ 351.706259][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'. [ 351.716080][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'. [ 353.153157][ T6915] nfs: Deprecated parameter 'nointr' [ 353.411406][ T6915] ntfs3: loop0: try to read out of volume at offset 0x0 [ 354.031209][ T6930] siw: device registration error -23 [ 355.573168][ T6946] ======================================================= [ 355.573168][ T6946] WARNING: The mand mount option has been deprecated and [ 355.573168][ T6946] and is ignored by this kernel. Remove the mand [ 355.573168][ T6946] option from the mount to silence this warning. [ 355.573168][ T6946] ======================================================= [ 356.939353][ T4245] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 357.157283][ T6965] netlink: 'syz.3.789': attribute type 12 has an invalid length. [ 357.809568][ T4245] usb 1-1: config 0 has no interfaces? [ 357.979439][ T6977] siw: device registration error -23 [ 357.999226][ T1335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 358.705451][ T1335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.839447][ T4245] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.851921][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.860053][ T4245] usb 1-1: Product: syz [ 358.864229][ T4245] usb 1-1: Manufacturer: syz [ 358.868827][ T4245] usb 1-1: SerialNumber: syz [ 358.875830][ T4245] usb 1-1: config 0 descriptor?? [ 358.914069][ T1335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.993684][ T1335] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 359.004497][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.037473][ T1335] usb 4-1: config 0 descriptor?? [ 359.243091][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 359.309411][ T6987] device ip6gretap0 entered promiscuous mode [ 359.330320][ T6987] device macvtap1 entered promiscuous mode [ 359.359367][ T6989] device ip6gretap0 left promiscuous mode [ 359.570900][ T1335] usbhid 4-1:0.0: can't add hid device: -71 [ 359.581826][ T1335] usbhid: probe of 4-1:0.0 failed with error -71 [ 359.648570][ T1335] usb 4-1: USB disconnect, device number 5 [ 359.705972][ T6994] input: syz1 as /devices/virtual/input/input15 [ 359.812810][ T26] audit: type=1326 audit(1757202116.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f8acdbe9 code=0x7ffc0000 [ 359.847227][ T26] audit: type=1326 audit(1757202116.869:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.2.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f8acdbe9 code=0x7ffc0000 [ 361.820801][ T5302] usb 1-1: USB disconnect, device number 12 [ 368.019250][ T5302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 368.389466][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.415504][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.438690][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 368.448847][ T5302] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 368.500639][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.549474][ T5302] usb 3-1: config 0 descriptor?? [ 368.658058][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 368.816502][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 368.884947][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 369.045904][ T26] audit: type=1326 audit(1757202126.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.156547][ T26] audit: type=1326 audit(1757202126.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.194460][ T26] audit: type=1326 audit(1757202126.119:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.223860][ T26] audit: type=1326 audit(1757202126.119:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.255756][ T26] audit: type=1326 audit(1757202126.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.285642][ T26] audit: type=1326 audit(1757202126.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.318214][ T26] audit: type=1326 audit(1757202126.119:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.361190][ T26] audit: type=1326 audit(1757202126.139:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.396615][ T26] audit: type=1326 audit(1757202126.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.459044][ T26] audit: type=1326 audit(1757202126.139:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771a63be9 code=0x7ffc0000 [ 369.529250][ T4860] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 369.889364][ T4860] usb 5-1: Using ep0 maxpacket: 32 [ 370.019311][ T4860] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.199312][ T4860] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.213496][ T4860] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.232150][ T4860] usb 5-1: Product: syz [ 370.248046][ T4860] usb 5-1: Manufacturer: syz [ 370.258559][ T4860] usb 5-1: SerialNumber: syz [ 370.275498][ T4860] usb 5-1: config 0 descriptor?? [ 370.299570][ T7130] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 370.363949][ T4860] hub 5-1:0.0: bad descriptor, ignoring hub [ 370.371186][ T4860] hub: probe of 5-1:0.0 failed with error -5 [ 370.679821][ T5302] usbhid 3-1:0.0: can't add hid device: -71 [ 370.688353][ T5302] usbhid: probe of 3-1:0.0 failed with error -71 [ 370.761208][ T5302] usb 3-1: USB disconnect, device number 5 [ 371.441546][ T4860] usb 5-1: USB disconnect, device number 9 [ 372.125324][ T7154] trusted_key: encrypted_key: insufficient parameters specified [ 372.430768][ T4244] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 372.574037][ T7164] nfs: Deprecated parameter 'nointr' [ 372.839413][ T4244] usb 5-1: config 0 has no interfaces? [ 373.219809][ T4244] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 373.241628][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.268620][ T4244] usb 5-1: Product: syz [ 373.302568][ T4244] usb 5-1: Manufacturer: syz [ 373.315790][ T4244] usb 5-1: SerialNumber: syz [ 373.336146][ T4244] usb 5-1: config 0 descriptor?? [ 373.608691][ T1108] usb 5-1: USB disconnect, device number 10 [ 374.344494][ T4244] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 374.424131][ T7179] input: syz1 as /devices/virtual/input/input16 [ 374.599808][ T7184] tipc: Started in network mode [ 374.606986][ T7184] tipc: Node identity fffffffa, cluster identity 4711 [ 374.616818][ T7184] tipc: Node number set to 4294967290 [ 374.749402][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.789266][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.835618][ T4244] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 374.970799][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.127343][ T4244] usb 1-1: config 0 descriptor?? [ 375.180779][ T7193] [ 375.183161][ T7193] ====================================================== [ 375.190192][ T7193] WARNING: possible circular locking dependency detected [ 375.197227][ T7193] syzkaller #0 Not tainted [ 375.201634][ T7193] ------------------------------------------------------ [ 375.208654][ T7193] syz.2.859/7193 is trying to acquire lock: [ 375.214549][ T7193] ffff888023379450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 375.225947][ T7193] [ 375.225947][ T7193] but task is already holding lock: [ 375.233299][ T7193] ffff888023378120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 375.242262][ T7193] [ 375.242262][ T7193] which lock already depends on the new lock. [ 375.242262][ T7193] [ 375.252669][ T7193] [ 375.252669][ T7193] the existing dependency chain (in reverse order) is: [ 375.261668][ T7193] [ 375.261668][ T7193] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 375.269391][ T7193] lock_sock_nested+0x44/0x100 [ 375.274671][ T7193] smc_listen_out+0x109/0x3d0 [ 375.279858][ T7193] process_one_work+0x863/0x1000 [ 375.285310][ T7193] worker_thread+0xaa8/0x12a0 [ 375.290498][ T7193] kthread+0x436/0x520 [ 375.295092][ T7193] ret_from_fork+0x1f/0x30 [ 375.300035][ T7193] [ 375.300035][ T7193] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 375.310184][ T7193] __lock_acquire+0x2c33/0x7c60 [ 375.315550][ T7193] lock_acquire+0x197/0x3f0 [ 375.320569][ T7193] __flush_work+0xdd/0x1b0 [ 375.325506][ T7193] __cancel_work_timer+0x3ac/0x520 [ 375.331145][ T7193] smc_clcsock_release+0x5c/0xe0 [ 375.336599][ T7193] __smc_release+0x398/0x500 [ 375.341699][ T7193] smc_close_non_accepted+0xd1/0x1f0 [ 375.347494][ T7193] smc_close_active+0x9d3/0xd90 [ 375.352855][ T7193] __smc_release+0x9a/0x500 [ 375.357867][ T7193] smc_release+0x2ca/0x530 [ 375.362794][ T7193] sock_close+0xd5/0x240 [ 375.367569][ T7193] __fput+0x234/0x930 [ 375.372066][ T7193] task_work_run+0x125/0x1a0 [ 375.377170][ T7193] exit_to_user_mode_loop+0x10f/0x130 [ 375.383059][ T7193] exit_to_user_mode_prepare+0xb1/0x140 [ 375.389137][ T7193] syscall_exit_to_user_mode+0x16/0x40 [ 375.395126][ T7193] do_syscall_64+0x58/0xa0 [ 375.400069][ T7193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.406474][ T7193] [ 375.406474][ T7193] other info that might help us debug this: [ 375.406474][ T7193] [ 375.416781][ T7193] Possible unsafe locking scenario: [ 375.416781][ T7193] [ 375.424229][ T7193] CPU0 CPU1 [ 375.429585][ T7193] ---- ---- [ 375.434940][ T7193] lock(sk_lock-AF_SMC/1); [ 375.439436][ T7193] lock((work_completion)(&new_smc->smc_listen_work)); [ 375.448879][ T7193] lock(sk_lock-AF_SMC/1); [ 375.455896][ T7193] lock((work_completion)(&new_smc->smc_listen_work)); [ 375.462832][ T7193] [ 375.462832][ T7193] *** DEADLOCK *** [ 375.462832][ T7193] [ 375.470960][ T7193] 2 locks held by syz.2.859/7193: [ 375.475982][ T7193] #0: ffff888060f6be10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 375.486172][ T7193] #1: ffff888023378120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 375.495559][ T7193] [ 375.495559][ T7193] stack backtrace: [ 375.501434][ T7193] CPU: 0 PID: 7193 Comm: syz.2.859 Not tainted syzkaller #0 [ 375.508741][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.518811][ T7193] Call Trace: [ 375.522090][ T7193] [ 375.525012][ T7193] dump_stack_lvl+0x168/0x230 [ 375.529687][ T7193] ? load_image+0x3b0/0x3b0 [ 375.534191][ T7193] ? show_regs_print_info+0x20/0x20 [ 375.539383][ T7193] ? print_circular_bug+0x12b/0x1a0 [ 375.544575][ T7193] check_noncircular+0x274/0x310 [ 375.549512][ T7193] ? add_chain_block+0x940/0x940 [ 375.554455][ T7193] ? lockdep_lock+0xdc/0x1e0 [ 375.559253][ T7193] ? rcu_lock_release+0x5/0x20 [ 375.564023][ T7193] ? __kernel_text_address+0x9a/0x100 [ 375.569412][ T7193] ? mark_lock+0x94/0x320 [ 375.573742][ T7193] __lock_acquire+0x2c33/0x7c60 [ 375.578587][ T7193] ? deref_stack_reg+0xd0/0x120 [ 375.583434][ T7193] ? hlock_conflict+0x59/0x1f0 [ 375.588210][ T7193] ? check_path+0x40/0x40 [ 375.592538][ T7193] ? verify_lock_unused+0x140/0x140 [ 375.597730][ T7193] ? mark_lock+0x94/0x320 [ 375.602070][ T7193] ? __lock_acquire+0x13ad/0x7c60 [ 375.607088][ T7193] ? add_chain_block+0x940/0x940 [ 375.612028][ T7193] lock_acquire+0x197/0x3f0 [ 375.616527][ T7193] ? __flush_work+0xc1/0x1b0 [ 375.621111][ T7193] ? read_lock_is_recursive+0x10/0x10 [ 375.626480][ T7193] __flush_work+0xdd/0x1b0 [ 375.630890][ T7193] ? __flush_work+0xc1/0x1b0 [ 375.635470][ T7193] ? flush_work+0x20/0x20 [ 375.639792][ T7193] ? try_to_grab_pending+0xf3/0x7e0 [ 375.644979][ T7193] ? lockdep_hardirqs_off+0x70/0x100 [ 375.650255][ T7193] ? mark_lock+0x94/0x320 [ 375.654575][ T7193] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 375.660552][ T7193] ? lock_chain_count+0x20/0x20 [ 375.665415][ T7193] ? print_unlock_imbalance_bug+0x160/0x160 [ 375.671302][ T7193] ? __cancel_work_timer+0x331/0x520 [ 375.676583][ T7193] __cancel_work_timer+0x3ac/0x520 [ 375.681690][ T7193] ? cancel_work_sync+0x20/0x20 [ 375.686540][ T7193] ? __local_bh_enable_ip+0x12a/0x1b0 [ 375.691943][ T7193] ? lockdep_hardirqs_on+0x94/0x140 [ 375.697156][ T7193] ? __local_bh_enable_ip+0x12a/0x1b0 [ 375.702519][ T7193] ? _local_bh_enable+0xa0/0xa0 [ 375.707361][ T7193] smc_clcsock_release+0x5c/0xe0 [ 375.712292][ T7193] __smc_release+0x398/0x500 [ 375.716872][ T7193] smc_close_non_accepted+0xd1/0x1f0 [ 375.722173][ T7193] smc_close_active+0x9d3/0xd90 [ 375.727071][ T7193] __smc_release+0x9a/0x500 [ 375.731584][ T7193] smc_release+0x2ca/0x530 [ 375.736015][ T7193] sock_close+0xd5/0x240 [ 375.740290][ T7193] ? sock_mmap+0x90/0x90 [ 375.744537][ T7193] __fput+0x234/0x930 [ 375.748519][ T7193] task_work_run+0x125/0x1a0 [ 375.753133][ T7193] exit_to_user_mode_loop+0x10f/0x130 [ 375.758525][ T7193] exit_to_user_mode_prepare+0xb1/0x140 [ 375.764069][ T7193] syscall_exit_to_user_mode+0x16/0x40 [ 375.769527][ T7193] do_syscall_64+0x58/0xa0 [ 375.773940][ T7193] ? clear_bhb_loop+0x30/0x80 [ 375.778634][ T7193] ? clear_bhb_loop+0x30/0x80 [ 375.783329][ T7193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.789232][ T7193] RIP: 0033:0x7f47f8acdbe9 [ 375.793639][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.813252][ T7193] RSP: 002b:00007fff6e383308 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 375.821658][ T7193] RAX: 0000000000000000 RBX: 000000000005b8a8 RCX: 00007f47f8acdbe9 [ 375.829638][ T7193] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 375.837606][ T7193] RBP: 00007f47f8d06da0 R08: 0000000000000001 R09: 0000000b6e3835ff [ 375.845570][ T7193] R10: 0000001b31320000 R11: 0000000000000246 R12: 00007f47f8d04fac [ 375.853535][ T7193] R13: 00007f47f8d04fa0 R14: ffffffffffffffff R15: 00007fff6e383420 [ 375.861507][ T7193] [ 377.069263][ T4244] usbhid 1-1:0.0: can't add hid device: -71 [ 377.075379][ T4244] usbhid: probe of 1-1:0.0 failed with error -71 [ 377.084651][ T4244] usb 1-1: USB disconnect, device number 13 [ 378.490709][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497024][ T1422] ieee802154 phy1 wpan1: encryption failed: -22