last executing test programs: 10.357084012s ago: executing program 4 (id=583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/110, 0x88, 0x400) add_key$fscrypt_v1(0x0, &(0x7f0000001800)={'fscrypt:', @desc3}, &(0x7f0000001840)={0x0, "e857c32234bfbc6e2ee8cc17d2fcb69c1f772ae98abbabb6a592da302abdd67c82ff8fe37596bfcdb6c800ca766581cd46000d12e10854de6591cd74a7aab2ff", 0x14}, 0x48, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.241707761s ago: executing program 4 (id=610): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) ptrace(0x10, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x600000, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 6.041229925s ago: executing program 1 (id=612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x41) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xe0000017}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 5.860538818s ago: executing program 1 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getegid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4) 4.585176132s ago: executing program 4 (id=619): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 4.508477604s ago: executing program 4 (id=621): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040), 0xf, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x5, 0x6}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e0001000000000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.257297709s ago: executing program 1 (id=624): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 4.106952292s ago: executing program 1 (id=626): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) setpriority(0x1, 0x0, 0x1) 2.937151574s ago: executing program 3 (id=634): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010000}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 2.802353277s ago: executing program 3 (id=637): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r7, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x3, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.722309878s ago: executing program 1 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x0) 2.722166338s ago: executing program 2 (id=639): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x1e, 0x4, 0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000280)={0x4bb0, 0x2e5, &(0x7f0000000440)="8ebb12f95b17a09610c0d47f4f64fe7317f07958cc3f4d1f691ed202fadcfabf6a60ab4abacd5effae61aee423dfe9cdabbbf8af2f965ab6595f11d791a56097baf3341a94b0a72c5cf9cffb02e58a86b75e8afbeb24bbd2fb1b57af94332bfabda625f15167f1ccb10a8032aabc1bf7604a90d9fe6a362db079e146491a0e0c7b405160b3a680dfb9f6e37a41fcc195f2e1f40576cdf73fb702613aeae4859fd0f66625772b73424aeb58f5de37c1a64de7eb89ee9eb8760b9971fe8ebe03b70454768b6014068332e69b71e52f89cffe982418a1428ece70cdce7b56e7ada16147811c19c3c43bb96e7531886018b66fcb656503c3", &(0x7f00000000c0)="234efce3faa7ca43282d7854e43801409a1526f5d4969c253ed1f0b919b2d9ea86ae08d04ac26b6207ca4d0fef1d67c4d1c2", 0xf6, 0x32}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="7c0fc7ad", 0x4}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x24000015, 0x0, 0x0) 2.664597249s ago: executing program 0 (id=640): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000004c0)={[&(0x7f0000000000)='\xd9']}, 0x0, 0x0) 2.562143431s ago: executing program 2 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x24}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 2.373054445s ago: executing program 1 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x3b, 0xfe}, {0x9, 0x5, 0xd, 0x2, 0x200, 0xd, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 2.365192455s ago: executing program 4 (id=643): r0 = socket(0xa, 0x3, 0x1) getsockopt(r0, 0x0, 0xfffffffb, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03000000082001"], 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000003c0)={0x8, 'veth0_to_team\x00', {'wg0\x00'}, 0x8}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x70000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000300)={0x2, r8}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.362753785s ago: executing program 2 (id=644): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x422842) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r0) 2.155812409s ago: executing program 2 (id=645): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x9}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}]}}]}, 0x68}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.041302571s ago: executing program 0 (id=646): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x2000) 2.003160782s ago: executing program 0 (id=647): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x0, 0x7, 0x8, 0x0, 0x8, 0x4, 0x5, 0x5d, 0x4, 0x8, 0x4f, 0x8, 0x0, 0xd, 0xa, 0x5, 0x1, 0xa, 0x80, '\x00', 0x80, 0xf}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_io_uring_setup(0x890, &(0x7f0000000240)={0x0, 0xc941, 0x100, 0x0, 0xf9}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000040)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x29ca00, 0x80}, 0x18) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(r7, 0x0, 0x0) 1.908036514s ago: executing program 2 (id=648): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 1.341171965s ago: executing program 2 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0xc01001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, 0x0, 0x4) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) 964.898642ms ago: executing program 4 (id=650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="000000c6d222406b096cc34801000000647418aaf9784416ed438eb9a332f44a1ec989b2d2e513f57632c54d863ecd9b0df090728300e43d59f817b99310b6b600968f3d2f02bbdfbbcb5c4f13e25d19bfdffe6f178f3580ea2b14da36c6095d68284c04c724611344d68d651aa37d305b61d2ffec13ebbbdaa51c2dac42788676771ee9f9a1cd34fbb8c576bfddf2a15d55dcb910f9eb6f9e57", 0x9a, r4) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd23, 0x0}, 0x40) 954.807232ms ago: executing program 0 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x80, 0x10, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x80000001, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 806.784115ms ago: executing program 0 (id=651): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x4000000000000200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 698.799607ms ago: executing program 3 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) 555.77947ms ago: executing program 0 (id=653): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r2}, 0x68) r5 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r9 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r9, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000000c0)) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r11, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 505.185831ms ago: executing program 3 (id=654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r2, 0x4c03, r1) 383.173944ms ago: executing program 3 (id=655): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 3 (id=656): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 54.946741][ T4172] cgroup: Unknown subsys name 'net' [ 55.051739][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.502010][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.373341][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 58.399874][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 58.427944][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.487508][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.551966][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.604396][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.611754][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.621120][ T4193] device bridge_slave_0 entered promiscuous mode [ 58.645084][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.652245][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.660619][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.668286][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.675358][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.683159][ T4193] device bridge_slave_1 entered promiscuous mode [ 58.691460][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.698733][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.707729][ T4182] device bridge_slave_0 entered promiscuous mode [ 58.727636][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.734716][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.742701][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.758381][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.765485][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.773599][ T4182] device bridge_slave_1 entered promiscuous mode [ 58.814577][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.821782][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.830029][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.847206][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.868390][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.878168][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.885240][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.893304][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.901990][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.913522][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.924316][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.943555][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.003890][ T4182] team0: Port device team_slave_0 added [ 59.023992][ T4193] team0: Port device team_slave_0 added [ 59.032174][ T4193] team0: Port device team_slave_1 added [ 59.038192][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.045283][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.053867][ T4194] device bridge_slave_0 entered promiscuous mode [ 59.062202][ T4182] team0: Port device team_slave_1 added [ 59.069566][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.081064][ T4189] team0: Port device team_slave_0 added [ 59.093701][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.101766][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.109730][ T4194] device bridge_slave_1 entered promiscuous mode [ 59.132340][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.143121][ T4189] team0: Port device team_slave_1 added [ 59.183718][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.190875][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.217216][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.230502][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.240342][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.247420][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.273415][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.301560][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.308744][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.334865][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.347744][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.364379][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.371492][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.397860][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.411672][ T4186] team0: Port device team_slave_0 added [ 59.418145][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.425107][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.451678][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.480142][ T4186] team0: Port device team_slave_1 added [ 59.486545][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.493495][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.520883][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.582012][ T4194] team0: Port device team_slave_0 added [ 59.614517][ T4193] device hsr_slave_0 entered promiscuous mode [ 59.621267][ T4193] device hsr_slave_1 entered promiscuous mode [ 59.629995][ T4194] team0: Port device team_slave_1 added [ 59.645101][ T4182] device hsr_slave_0 entered promiscuous mode [ 59.651836][ T4182] device hsr_slave_1 entered promiscuous mode [ 59.658748][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.667000][ T4182] Cannot create hsr debugfs directory [ 59.672943][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.680196][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.706336][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.720391][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.727546][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.734117][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.741737][ T4189] Cannot create hsr debugfs directory [ 59.757405][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.764383][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.790654][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.827244][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.834301][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.860584][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.902392][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.909762][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.935901][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.962947][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.969886][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.977169][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.984720][ T4186] Cannot create hsr debugfs directory [ 60.001743][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 60.005880][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 60.013893][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 60.075933][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 60.081376][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 60.144711][ T4194] device hsr_slave_0 entered promiscuous mode [ 60.151759][ T4194] device hsr_slave_1 entered promiscuous mode [ 60.158528][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.166374][ T4194] Cannot create hsr debugfs directory [ 60.341875][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.352641][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.368300][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.378375][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.434256][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.449068][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.470016][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.485633][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.535683][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.545633][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.578655][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.591237][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.632815][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.654954][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.687200][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.700481][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.722480][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.731662][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.741551][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.749421][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.758324][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.768003][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.775376][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.783889][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.793269][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.803933][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.811027][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.819290][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.845452][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.855334][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.868245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.878738][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.890558][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.901480][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.913616][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.924487][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.940728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.949960][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.960096][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.971908][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.018087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.029721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.038560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.047093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.066960][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.098276][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.128093][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.175158][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.186704][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.201455][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.216000][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.223895][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.237936][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.252994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.262250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.270894][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.278005][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.294257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.335715][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.343308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.354057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.362987][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.370109][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.381493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.390259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.400109][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.407230][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.414916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.423908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.432994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.441746][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.448871][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.456875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.465411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.474640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.483555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.493529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.502056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.513294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.535674][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.560113][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.571521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.579997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.588131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.596586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.604626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.613300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.622096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.631129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.640119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.657629][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.664529][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.675581][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.702796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.711660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.723551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.732395][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.741258][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.748381][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.757503][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.765961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.774157][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.782932][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.791572][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.800841][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.810375][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.818549][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.840561][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.853009][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.868844][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.880198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.890082][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.899277][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.906416][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.914873][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.926594][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.934479][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.943362][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.953464][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.963265][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.985502][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.994719][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.004135][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011250][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.019550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.030758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.039710][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.046832][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.055154][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.075184][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.083188][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 62.089695][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 62.096961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.126471][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 62.156432][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 62.172134][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.172148][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 62.193979][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.204407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.214099][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.230500][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.240363][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.249251][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.258119][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.270053][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.278779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.287902][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.296870][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.305176][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.313833][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.322551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.331405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.341027][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.350486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.359653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.368545][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.378318][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.386789][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.395358][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.403666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.414298][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.424481][ T4193] device veth0_vlan entered promiscuous mode [ 62.433428][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.452752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.463425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.501748][ T4193] device veth1_vlan entered promiscuous mode [ 62.516179][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.539075][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.597553][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.617342][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.655380][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.674080][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.689660][ T4193] device veth0_macvtap entered promiscuous mode [ 62.710016][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.719969][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.728276][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.741866][ T4189] device veth0_vlan entered promiscuous mode [ 62.764584][ T4193] device veth1_macvtap entered promiscuous mode [ 62.778955][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.792901][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.801736][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.813478][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.832566][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.846775][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.855088][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.863185][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.873232][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.882150][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.891674][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.900743][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.912322][ T4189] device veth1_vlan entered promiscuous mode [ 62.926148][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.934170][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.943081][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.952601][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.962661][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971927][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.980901][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.995006][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.002958][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.017790][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.050900][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.066934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.075078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.084304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.114388][ T4189] device veth0_macvtap entered promiscuous mode [ 63.139883][ T4182] device veth0_vlan entered promiscuous mode [ 63.149242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.158592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.167477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.177684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.186203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.194560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.202896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.222383][ T4189] device veth1_macvtap entered promiscuous mode [ 63.255598][ T4182] device veth1_vlan entered promiscuous mode [ 63.284905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.293276][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.302449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.313937][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.325263][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.343591][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.358567][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.370476][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.400957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.411013][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.428660][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.455862][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.473530][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.496578][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.505185][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.514859][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.524465][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.537014][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.545197][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.554142][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.562210][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.572636][ T4194] device veth0_vlan entered promiscuous mode [ 63.584002][ T4182] device veth0_macvtap entered promiscuous mode [ 63.587512][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.596716][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.608477][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.619234][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.620348][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.628338][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.675454][ T4186] device veth0_vlan entered promiscuous mode [ 63.689558][ T4186] device veth1_vlan entered promiscuous mode [ 63.697778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.705648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.715469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.724581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.733486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.742073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.750187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.758831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.780150][ T4182] device veth1_macvtap entered promiscuous mode [ 63.810812][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.821943][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.839480][ T4194] device veth1_vlan entered promiscuous mode [ 63.865128][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.880218][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.901683][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.912893][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.923398][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.934095][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.946799][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.962998][ T4186] device veth0_macvtap entered promiscuous mode [ 63.999141][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.021625][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.031278][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.040229][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.050481][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.062161][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.074281][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.085711][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.097184][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.108615][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.132188][ T4186] device veth1_macvtap entered promiscuous mode [ 64.138929][ T4296] Zero length message leads to an empty skb [ 64.160498][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.168577][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 64.175133][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 64.176753][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.182633][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 64.196751][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.215216][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.224133][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.233255][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.243065][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.252795][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 64.262012][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 64.269662][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.281013][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.299365][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.311404][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.322278][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.333014][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.343413][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.354083][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.365438][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.384692][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.395646][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.412922][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.421536][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.431116][ T4194] device veth0_macvtap entered promiscuous mode [ 64.447770][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.458472][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.468737][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.481096][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.491385][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.502262][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.514112][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.525112][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.534113][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.545324][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.554077][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.584603][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.593350][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.596007][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.602758][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.617539][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.630373][ T4194] device veth1_macvtap entered promiscuous mode [ 64.669490][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.675088][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.688285][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.693582][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.705866][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.716993][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.727884][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.738464][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.748539][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.759098][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.770540][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.801742][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.814512][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.823808][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.847496][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.858218][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 64.858263][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.874162][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.885744][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.897764][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.908503][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.918642][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.929515][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.942199][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.976132][ T7] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 64.984464][ T7] usb 2-1: config 0 has no interface number 0 [ 64.994107][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.003424][ T7] usb 2-1: config 0 interface 81 has no altsetting 0 [ 65.009166][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.021801][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.030625][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.042190][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.051326][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.097023][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.132266][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.138497][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.150646][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.170470][ T7] usb 2-1: New USB device found, idVendor=305a, idProduct=1406, bcdDevice= 9.9a [ 65.172480][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.180762][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.196283][ T7] usb 2-1: Product: syz [ 65.200470][ T7] usb 2-1: Manufacturer: syz [ 65.206847][ T7] usb 2-1: SerialNumber: syz [ 65.214741][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.234507][ T7] usb 2-1: config 0 descriptor?? [ 65.253697][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270988][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.295541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.327600][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.346325][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.364882][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.382852][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.401775][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.410307][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.443342][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.472509][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.502497][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.537873][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.558276][ T7] option 2-1:0.81: GSM modem (1-port) converter detected [ 65.598791][ T7] usb 2-1: USB disconnect, device number 2 [ 65.622575][ T7] option 2-1:0.81: device disconnected [ 66.096078][ T1111] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 66.247436][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 66.265149][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 66.289981][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 66.355296][ T4241] Bluetooth: hci4: command 0x0419 tx timeout [ 66.366955][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 66.486153][ T1111] usb 3-1: config 0 has no interfaces? [ 66.491934][ T1111] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 66.525745][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.553136][ T1111] usb 3-1: config 0 descriptor?? [ 66.832949][ T4298] usb 3-1: USB disconnect, device number 2 [ 66.956788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.152096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 67.175857][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.516297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.576052][ T21] usb 2-1: config 0 has no interfaces? [ 67.735974][ T21] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 67.795160][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.834230][ T21] usb 2-1: Product: syz [ 67.876053][ T21] usb 2-1: Manufacturer: syz [ 67.939490][ T21] usb 2-1: SerialNumber: syz [ 67.980375][ T21] usb 2-1: config 0 descriptor?? [ 68.076412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.931793][ T4373] capability: warning: `syz.4.27' uses 32-bit capabilities (legacy support in use) [ 70.482727][ T7] usb 2-1: USB disconnect, device number 3 [ 71.036338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.046504][ T4413] input: syz0 as /devices/virtual/input/input5 [ 71.360562][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.367205][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.880006][ T26] audit: type=1326 audit(1757806654.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 72.975895][ T26] audit: type=1326 audit(1757806654.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.015591][ T4436] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.104286][ T26] audit: type=1326 audit(1757806654.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.249144][ T26] audit: type=1326 audit(1757806654.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.393715][ T26] audit: type=1326 audit(1757806654.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.485904][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.514003][ T26] audit: type=1326 audit(1757806654.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.640025][ T26] audit: type=1326 audit(1757806654.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.794149][ T26] audit: type=1326 audit(1757806654.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.881923][ T26] audit: type=1326 audit(1757806654.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 73.918320][ T4338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.942619][ T4338] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.973226][ T4338] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.004132][ T26] audit: type=1326 audit(1757806654.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 74.037085][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.113180][ T4338] usb 5-1: config 0 descriptor?? [ 75.393411][ T4475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'. [ 75.856852][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.866463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 76.425389][ T4338] usb 5-1: USB disconnect, device number 2 [ 76.505925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 76.762573][ T4489] delete_channel: no stack [ 78.152682][ T4528] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 79.735866][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.945851][ T4565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.92'. [ 80.146094][ T21] usb 2-1: config 4 has an invalid interface number: 39 but max is 1 [ 80.172776][ T21] usb 2-1: config 4 has an invalid interface number: 49 but max is 1 [ 80.301608][ T21] usb 2-1: config 4 has no interface number 0 [ 80.367766][ T21] usb 2-1: config 4 has no interface number 1 [ 80.413090][ T21] usb 2-1: config 4 interface 39 has no altsetting 0 [ 80.475516][ T21] usb 2-1: config 4 interface 49 has no altsetting 0 [ 80.696031][ T21] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 80.725455][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.794550][ T21] usb 2-1: Product: syz [ 80.835270][ T21] usb 2-1: Manufacturer: syz [ 80.884109][ T21] usb 2-1: SerialNumber: syz [ 81.155123][ T4588] kvm: pic: non byte write [ 81.248524][ T21] usb 2-1: USB disconnect, device number 4 [ 81.258869][ T4590] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 81.607827][ T1336] cfg80211: failed to load regulatory.db [ 82.170859][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 82.707812][ T4618] input: syz1 as /devices/virtual/input/input6 [ 83.046175][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 83.578540][ T4636] netlink: 542 bytes leftover after parsing attributes in process `syz.3.114'. [ 86.635982][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.165990][ T1108] usb 2-1: config 0 has no interfaces? [ 87.221928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 87.345997][ T1108] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 87.366703][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.386006][ T1108] usb 2-1: Product: syz [ 87.405934][ T1108] usb 2-1: Manufacturer: syz [ 87.441938][ T1108] usb 2-1: SerialNumber: syz [ 87.484040][ T4718] kvm [4715]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x2ff [ 87.505344][ T1108] usb 2-1: config 0 descriptor?? [ 87.586875][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 87.586892][ T26] audit: type=1800 audit(1757806669.570:19): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.135" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 87.713628][ T4724] mmap: syz.0.137 (4724) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.972643][ T4237] usb 2-1: USB disconnect, device number 5 [ 89.475114][ T4769] netlink: 136 bytes leftover after parsing attributes in process `syz.1.153'. [ 89.521769][ T4769] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 89.805990][ T4298] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.206042][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.237261][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.267681][ T4298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.306642][ T4298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.345593][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.372118][ T4298] usb 5-1: config 0 descriptor?? [ 90.868479][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.892152][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.931220][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.948222][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.980471][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.989239][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.996730][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.004333][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.013059][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.020758][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.033027][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.044289][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.063369][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.095843][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.132722][ T4298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 91.171934][ T4298] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 91.253637][ T4298] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 91.288155][ T4298] usb 5-1: USB disconnect, device number 3 [ 91.455899][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.580525][ T4812] fido_id[4812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 91.856011][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.887742][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.906746][ T4237] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.919270][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.937311][ T4237] usb 1-1: config 0 descriptor?? [ 91.946044][ T4830] program syz.3.172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.978459][ T4237] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 92.071308][ T4833] netlink: 'syz.3.173': attribute type 46 has an invalid length. [ 92.090682][ T4833] netlink: 'syz.3.173': attribute type 19 has an invalid length. [ 92.150247][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 92.855144][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 93.938037][ T21] usb 1-1: USB disconnect, device number 2 [ 94.100068][ T4871] netlink: 566 bytes leftover after parsing attributes in process `syz.4.189'. [ 94.166194][ T4298] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.365552][ T26] audit: type=1326 audit(1757806676.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.465888][ T4298] usb 2-1: Using ep0 maxpacket: 32 [ 94.502802][ T26] audit: type=1326 audit(1757806676.340:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.596202][ T26] audit: type=1326 audit(1757806676.340:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.618818][ T26] audit: type=1326 audit(1757806676.340:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.641594][ T4298] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.662533][ T4298] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.685870][ T26] audit: type=1326 audit(1757806676.340:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.718124][ T4298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.736099][ T26] audit: type=1326 audit(1757806676.340:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 94.765507][ T26] audit: type=1326 audit(1757806676.440:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.0.195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f628ff6eba9 code=0x0 [ 94.765536][ T4298] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 94.955913][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.971280][ T4298] usb 2-1: config 0 descriptor?? [ 95.217329][ T4867] udc-core: couldn't find an available UDC or it's busy [ 95.225947][ T4867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.506062][ T4298] usbhid 2-1:0.0: can't add hid device: -71 [ 95.512156][ T4298] usbhid: probe of 2-1:0.0 failed with error -71 [ 95.556071][ T4298] usb 2-1: USB disconnect, device number 6 [ 96.179035][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 96.633719][ T4937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 97.075900][ T4955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 98.069799][ T4976] program syz.1.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.757451][ T4997] loop5: detected capacity change from 0 to 7 [ 98.791160][ T4174] Dev loop5: unable to read RDB block 7 [ 98.803523][ T4174] loop5: unable to read partition table [ 98.824044][ T4174] loop5: partition table beyond EOD, truncated [ 98.857259][ T4997] Dev loop5: unable to read RDB block 7 [ 98.870783][ T4997] loop5: unable to read partition table [ 98.903470][ T4997] loop5: partition table beyond EOD, truncated [ 98.932020][ T4997] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 99.660308][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 99.809203][ T5014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.816748][ T5014] IPv6: NLM_F_CREATE should be set when creating new route [ 99.853350][ T5016] netlink: 'syz.4.238': attribute type 2 has an invalid length. [ 100.218839][ T5029] tmpfs: Unknown parameter 'r%Ҵ\wӠR(46&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn746;O훌u [ 100.218839][ T5029] ~^>Ƥr&Dq.;쀯<2AU' [ 100.242451][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.302428][ T5032] futex_wake_op: syz.3.244 tries to shift op by -1; fix this program [ 101.115883][ T4237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.485950][ T4237] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.495411][ T4237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.606119][ T4237] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.635397][ T4237] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.665954][ T4237] usb 3-1: Manufacturer: syz [ 101.712976][ T4237] usb 3-1: config 0 descriptor?? [ 101.885828][ T4237] rc_core: IR keymap rc-hauppauge not found [ 101.891960][ T4237] Registered IR keymap rc-empty [ 101.943868][ T4237] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 102.004014][ T4237] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 102.125807][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 102.125908][ T4338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.696043][ T4338] usb 4-1: config 0 has no interfaces? [ 102.780731][ T4237] usb 3-1: USB disconnect, device number 3 [ 102.905985][ T4338] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.940684][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.997886][ T4338] usb 4-1: Product: syz [ 103.014032][ T4338] usb 4-1: Manufacturer: syz [ 103.075954][ T4338] usb 4-1: SerialNumber: syz [ 103.104810][ T4338] usb 4-1: config 0 descriptor?? [ 104.434804][ T26] audit: type=1800 audit(1757806686.412:27): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="bus" dev="ramfs" ino=36387 res=0 errno=0 [ 104.498500][ T5094] device bridge1 entered promiscuous mode [ 104.895347][ T4338] usb 4-1: USB disconnect, device number 2 [ 106.046046][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.606053][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.670954][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.702976][ T21] usb 3-1: Product: syz [ 106.774521][ T21] usb 3-1: Manufacturer: syz [ 106.793725][ T21] usb 3-1: SerialNumber: syz [ 106.917379][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.645950][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.053422][ T5117] udc-core: couldn't find an available UDC or it's busy [ 108.085954][ T5117] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.438164][ T4338] usb 3-1: USB disconnect, device number 4 [ 108.695890][ T1336] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 108.726782][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 108.735058][ T21] ath9k_htc: Failed to initialize the device [ 108.764691][ T4338] usb 3-1: ath9k_htc: USB layer deinitialized [ 108.806244][ T5184] crypto_alloc_aead failed rc=-2 [ 109.120136][ T1336] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.150333][ T1336] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2080, setting to 64 [ 109.205882][ T1336] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.261569][ T1336] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.295938][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.398000][ T5210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 109.436368][ T5210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 109.645997][ T1336] usb 4-1: usb_control_msg returned -32 [ 109.652732][ T1336] usbtmc 4-1:16.0: can't read capabilities [ 110.114697][ T5182] netlink: 104 bytes leftover after parsing attributes in process `syz.3.287'. [ 110.598465][ T1336] usb 4-1: USB disconnect, device number 3 [ 110.698228][ T5245] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.735092][ T5245] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 110.965858][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.276107][ T1336] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.308695][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 111.415133][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 111.426313][ T5269] device veth0_macvtap left promiscuous mode [ 111.436471][ T1111] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.472071][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.666050][ T1336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.675921][ T1111] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.705913][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.725988][ T1336] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 111.746132][ T1111] usb 3-1: Product: syz [ 111.750345][ T1111] usb 3-1: Manufacturer: syz [ 111.762420][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.772267][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 111.798604][ T1111] usb 3-1: SerialNumber: syz [ 111.837421][ T1336] usb 4-1: config 0 descriptor?? [ 111.852719][ T1111] usb 3-1: config 0 descriptor?? [ 111.911483][ T1111] usb 3-1: selecting invalid altsetting 0 [ 112.114553][ T4338] usb 3-1: USB disconnect, device number 5 [ 112.298784][ T5256] delete_channel: no stack [ 112.376885][ T1336] usbhid 4-1:0.0: can't add hid device: -71 [ 112.391537][ T1336] usbhid: probe of 4-1:0.0 failed with error -71 [ 112.424014][ T1336] usb 4-1: USB disconnect, device number 4 [ 112.541932][ T5288] udevd[5288]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.320458][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 113.411430][ T5321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.669988][ T5331] fuse: Unknown parameter 'mGN8oad' [ 114.051884][ T5341] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 114.421119][ T26] audit: type=1326 audit(1757806696.402:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 114.546615][ T26] audit: type=1326 audit(1757806696.442:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f677d296da9 code=0x7ffc0000 [ 114.685897][ T26] audit: type=1326 audit(1757806696.442:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f677d296da9 code=0x7ffc0000 [ 114.825979][ T26] audit: type=1326 audit(1757806696.442:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 115.002768][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 115.034356][ T26] audit: type=1326 audit(1757806696.452:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 115.127649][ T26] audit: type=1326 audit(1757806696.452:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f677d296da9 code=0x7ffc0000 [ 115.265217][ T26] audit: type=1326 audit(1757806696.452:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f677d296da9 code=0x7ffc0000 [ 115.395824][ T26] audit: type=1326 audit(1757806696.452:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f677d296da9 code=0x7ffc0000 [ 115.535846][ T26] audit: type=1326 audit(1757806696.452:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 115.619025][ T26] audit: type=1326 audit(1757806696.452:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 116.058609][ T5387] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 116.202175][ T5389] netlink: 'syz.4.360': attribute type 3 has an invalid length. [ 116.224126][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 116.394340][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 116.414992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 116.453351][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 117.002210][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.245962][ T4338] usb 4-1: Using ep0 maxpacket: 16 [ 117.365924][ T4338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.376180][ T1336] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.512463][ T4338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.523051][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.535552][ T4338] usb 4-1: SerialNumber: syz [ 117.556050][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.671916][ T1336] usb 1-1: Using ep0 maxpacket: 8 [ 117.841583][ T1336] usb 1-1: config 0 has no interfaces? [ 117.968843][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 117.980537][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.993448][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 118.046784][ T1336] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 118.064576][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 118.074054][ T1336] usb 1-1: Product: syz [ 118.079297][ T1336] usb 1-1: Manufacturer: syz [ 118.083928][ T1336] usb 1-1: SerialNumber: syz [ 118.104222][ T1336] usb 1-1: config 0 descriptor?? [ 118.176204][ T21] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 118.186319][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.205045][ T21] usb 3-1: Product: syz [ 118.210079][ T21] usb 3-1: Manufacturer: syz [ 118.215222][ T21] usb 3-1: SerialNumber: syz [ 118.229684][ T21] usb 3-1: config 0 descriptor?? [ 118.363603][ T4238] usb 1-1: USB disconnect, device number 3 [ 118.838657][ T21] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 119.061739][ T5415] udc-core: couldn't find an available UDC or it's busy [ 119.071876][ T5415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.142416][ T21] usb 3-1: USB disconnect, device number 6 [ 119.872478][ T4338] usb 4-1: USB disconnect, device number 5 [ 119.897441][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 119.936114][ T5477] device dummy0 entered promiscuous mode [ 119.955026][ T5477] device dummy0 left promiscuous mode [ 120.303500][ T5487] ptrace attach of "./syz-executor exec"[5491] was attempted by "./syz-executor exec"[5487] [ 121.421746][ T26] kauditd_printk_skb: 106 callbacks suppressed [ 121.421762][ T26] audit: type=1326 audit(1757806703.402:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 121.635917][ T26] audit: type=1326 audit(1757806703.442:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 121.735899][ T26] audit: type=1326 audit(1757806703.442:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 121.868849][ T26] audit: type=1326 audit(1757806703.462:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.043017][ T5529] loop2: detected capacity change from 0 to 7 [ 122.049389][ T26] audit: type=1326 audit(1757806703.482:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.085974][ T4174] Dev loop2: unable to read RDB block 7 [ 122.091565][ T4174] loop2: unable to read partition table [ 122.098362][ T4174] loop2: partition table beyond EOD, truncated [ 122.106581][ T5529] Dev loop2: unable to read RDB block 7 [ 122.115931][ T5529] loop2: unable to read partition table [ 122.137218][ T26] audit: type=1326 audit(1757806703.492:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.159227][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.167898][ T5529] loop2: partition table beyond EOD, truncated [ 122.185904][ T5529] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 122.196026][ T26] audit: type=1326 audit(1757806703.502:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.226210][ T26] audit: type=1326 audit(1757806703.502:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.335892][ T26] audit: type=1326 audit(1757806703.502:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.405408][ T26] audit: type=1326 audit(1757806703.502:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f397d3eeba9 code=0x7ffc0000 [ 122.427572][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.765847][ T4338] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 123.166119][ T4338] usb 5-1: config 0 has no interfaces? [ 123.368289][ T4338] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 123.382765][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.418981][ T4338] usb 5-1: Product: syz [ 123.423201][ T4338] usb 5-1: Manufacturer: syz [ 123.438729][ T4338] usb 5-1: SerialNumber: syz [ 123.448523][ T5562] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 123.469600][ T4338] usb 5-1: config 0 descriptor?? [ 123.842369][ T1111] usb 5-1: USB disconnect, device number 4 [ 124.289588][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 125.436146][ T1111] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.695800][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 125.818394][ T1111] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 125.841069][ T1111] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.886656][ T1111] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.915482][ T1111] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.944598][ T1111] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.017067][ T1111] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.055865][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.426083][ T1111] usb 3-1: usb_control_msg returned -32 [ 126.431703][ T1111] usbtmc 3-1:16.0: can't read capabilities [ 126.675427][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.444'. [ 126.763606][ T5631] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 126.775608][ T1111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.036587][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 127.155993][ T1111] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 127.185367][ T1111] usb 4-1: config 0 has no interface number 0 [ 127.336070][ T1111] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 127.440965][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 127.503653][ T1111] usb 4-1: Product: syz [ 127.533207][ T1111] usb 4-1: Manufacturer: syz [ 127.563395][ T1111] usb 4-1: config 0 descriptor?? [ 127.604614][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.648911][ T5639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.813608][ T5624] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 128.081373][ T5654] netlink: set zone limit has 8 unknown bytes [ 128.201241][ T1336] usb 3-1: USB disconnect, device number 7 [ 128.364369][ T5662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 128.675832][ T4298] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.695944][ T1336] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.945825][ T4298] usb 2-1: Using ep0 maxpacket: 16 [ 129.076957][ T1336] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.091533][ T1336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.105928][ T4298] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.129901][ T4298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.169198][ T4298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.216201][ T1336] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.233815][ T1336] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.251396][ T1336] usb 3-1: Manufacturer: syz [ 129.270766][ T1336] usb 3-1: config 0 descriptor?? [ 129.295863][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.376054][ T4298] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.392501][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.414891][ T4298] usb 2-1: Product: syz [ 129.425023][ T4298] usb 2-1: Manufacturer: syz [ 129.439950][ T4298] usb 2-1: SerialNumber: syz [ 129.517859][ T1336] rc_core: IR keymap rc-hauppauge not found [ 129.523929][ T1336] Registered IR keymap rc-empty [ 129.546152][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 129.557619][ T1336] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 129.605339][ T1336] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 129.642368][ T4237] usb 4-1: USB disconnect, device number 6 [ 129.676160][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.705849][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 129.733052][ T1111] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 129.789244][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.838442][ T1111] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 129.910195][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.960910][ T1111] usb 1-1: config 0 descriptor?? [ 130.009367][ T1111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 130.285855][ T4237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.319778][ T5680] udc-core: couldn't find an available UDC or it's busy [ 130.336667][ T21] usb 3-1: USB disconnect, device number 8 [ 130.364780][ T5680] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.545869][ T4237] usb 4-1: Using ep0 maxpacket: 16 [ 130.676017][ T4237] usb 4-1: config 0 has no interfaces? [ 130.835978][ T4237] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 130.899957][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.926944][ T4237] usb 4-1: Product: syz [ 130.941380][ T4237] usb 4-1: Manufacturer: syz [ 130.965859][ T4237] usb 4-1: SerialNumber: syz [ 130.999590][ T4237] usb 4-1: config 0 descriptor?? [ 131.316008][ T4298] usb 2-1: 0:2 : does not exist [ 131.363854][ T4298] usb 2-1: USB disconnect, device number 7 [ 131.763859][ T4298] usb 1-1: USB disconnect, device number 4 [ 131.947787][ T5706] program syz.0.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.097717][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 132.797679][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.804096][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.940200][ T4237] usb 4-1: USB disconnect, device number 7 [ 132.946218][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.375967][ T1108] usb 2-1: config 0 has no interfaces? [ 133.381664][ T1108] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.430475][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.496520][ T1108] usb 2-1: config 0 descriptor?? [ 133.535152][ T5741] tipc: Started in network mode [ 133.575111][ T5741] tipc: Node identity 0a94ab80db5f, cluster identity 4711 [ 133.604125][ T5741] tipc: Enabled bearer , priority 0 [ 133.645606][ T5742] device syzkaller0 entered promiscuous mode [ 133.685210][ T5741] tipc: Resetting bearer [ 133.720962][ T5740] tipc: Resetting bearer [ 133.741616][ T5740] tipc: Disabling bearer [ 134.173142][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 134.173159][ T26] audit: type=1326 audit(1757806716.152:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 134.263441][ T26] audit: type=1326 audit(1757806716.192:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 134.383465][ T26] audit: type=1326 audit(1757806716.192:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 134.488783][ T26] audit: type=1326 audit(1757806716.202:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 134.584217][ T26] audit: type=1326 audit(1757806716.202:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d2faba9 code=0x7ffc0000 [ 134.966931][ T1108] usb 2-1: USB disconnect, device number 8 [ 136.157384][ T5794] program syz.4.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.365832][ T4237] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.429099][ T5801] program syz.4.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.636049][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 136.786655][ T4237] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.976024][ T4237] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 136.997447][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.024733][ T4237] usb 4-1: Product: syz [ 137.031539][ T4237] usb 4-1: Manufacturer: syz [ 137.041440][ T4237] usb 4-1: SerialNumber: syz [ 137.051977][ T4237] usb 4-1: config 0 descriptor?? [ 137.099952][ T4237] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 137.378072][ T4237] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 137.418390][ T4237] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 138.482691][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 138.880568][ T5856] netlink: 'syz.4.522': attribute type 2 has an invalid length. [ 139.103743][ T5856] netlink: 'syz.4.522': attribute type 2 has an invalid length. [ 139.856660][ T1336] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.125979][ T1336] usb 3-1: Using ep0 maxpacket: 8 [ 140.278940][ T1336] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.325036][ T1336] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.355638][ T1336] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.409075][ T1336] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.461305][ T1336] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.519350][ T1336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.729763][ T5887] KVM: debugfs: duplicate directory 5887-5 [ 140.796049][ T1336] usb 3-1: GET_CAPABILITIES returned 0 [ 140.801678][ T1336] usbtmc 3-1:16.0: can't read capabilities [ 141.015833][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.028469][ T1111] usb 3-1: USB disconnect, device number 9 [ 141.094222][ T26] audit: type=1326 audit(1757806723.072:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.3.543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b8346ba9 code=0x0 [ 143.772267][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 144.145388][ C0] sd 0:0:1:0: tag#6306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 144.155291][ C0] sd 0:0:1:0: tag#6306 CDB: Receive Diagnostic [ 144.161480][ C0] sd 0:0:1:0: tag#6306 CDB[00]: 1c 35 d9 7c e8 34 3f 9f ad 49 92 be bb 89 56 61 [ 144.170653][ C0] sd 0:0:1:0: tag#6306 CDB[10]: e9 f3 c0 07 37 ce d9 84 5e 69 ad 14 91 07 cf 6f [ 144.179706][ C0] sd 0:0:1:0: tag#6306 CDB[20]: a2 4e 98 7e ff 62 fd 71 b9 38 3e c0 c2 7b 65 4d [ 144.188786][ C0] sd 0:0:1:0: tag#6306 CDB[30]: cd 4d 22 c7 6a 4c 01 fc ff ff 91 9e 28 d6 24 ea [ 144.197845][ C0] sd 0:0:1:0: tag#6306 CDB[40]: d0 a9 8b b4 18 64 da 8f db 98 41 bc 2b f7 92 a6 [ 144.206934][ C0] sd 0:0:1:0: tag#6306 CDB[50]: 0d f9 00 10 69 78 18 eb 45 53 a9 a9 87 a3 bd a9 [ 144.215992][ C0] sd 0:0:1:0: tag#6306 CDB[60]: 2e 49 c1 c4 4f 92 65 35 c2 40 62 a2 95 82 95 20 [ 144.225006][ C0] sd 0:0:1:0: tag#6306 CDB[70]: 4a [ 145.954045][ T5973] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 145.964634][ T5973] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 146.473798][ T5997] input: syz0 as /devices/virtual/input/input10 [ 146.646022][ T4298] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.956124][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.016020][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.047910][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.076441][ T4298] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 147.099321][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.136048][ T4298] usb 2-1: config 0 descriptor?? [ 147.205534][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 147.221868][ T6017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.476078][ T4298] usbhid 2-1:0.0: can't add hid device: -71 [ 147.483041][ T4298] usbhid: probe of 2-1:0.0 failed with error -71 [ 147.496087][ T1108] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 147.505168][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.607010][ T4298] usb 2-1: USB disconnect, device number 9 [ 147.629315][ T1108] usb 3-1: Product: syz [ 147.665311][ T1108] usb 3-1: Manufacturer: syz [ 147.706693][ T1108] usb 3-1: SerialNumber: syz [ 147.791261][ T1108] usb 3-1: config 0 descriptor?? [ 147.896026][ T13] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 147.906127][ T1108] gspca_main: se401-2.14.0 probing 047d:5003 [ 148.306024][ T13] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.322969][ T13] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.366275][ T13] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.495955][ T13] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.503434][ T13] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.584108][ T13] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.703441][ T6061] udc-core: couldn't find an available UDC or it's busy [ 148.711420][ T13] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 148.729030][ T13] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.756029][ T6061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 148.903521][ T13] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.975665][ T6065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 149.025904][ T1108] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 149.043468][ T1108] se401: probe of 3-1:0.0 failed with error -71 [ 149.090815][ T1108] usb 3-1: USB disconnect, device number 10 [ 149.297867][ T13] usb 5-1: string descriptor 0 read error: -22 [ 149.314358][ T13] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.328093][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.427329][ T13] adutux 5-1:168.0: interrupt endpoints not found [ 151.342877][ T1336] usb 5-1: USB disconnect, device number 5 [ 152.716973][ T6120] i2c i2c-0: Invalid block write size 255 [ 154.295306][ T6158] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.818357][ T26] audit: type=1326 audit(1757806736.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 154.964885][ T26] audit: type=1326 audit(1757806736.802:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 155.052864][ T6177] tipc: Started in network mode [ 155.058016][ T6177] tipc: Node identity 8a1784b1c5b3, cluster identity 4711 [ 155.078028][ T6181] process 'syz.0.640' launched './file1' with NULL argv: empty string added [ 155.118042][ T6177] tipc: Enabled bearer , priority 10 [ 155.155800][ T26] audit: type=1326 audit(1757806736.802:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 155.292578][ T26] audit: type=1326 audit(1757806736.832:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 155.298097][ T6187] device veth0 entered promiscuous mode [ 155.402755][ T26] audit: type=1326 audit(1757806736.832:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f628ff6eba9 code=0x7ffc0000 [ 155.505033][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 155.556900][ T6200] sch_tbf: burst 8 is lower than device bridge1 mtu (1514) ! [ 155.601327][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 155.974295][ T1336] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.237362][ T4298] tipc: Node number set to 1336181937 [ 156.415983][ T1336] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 156.434326][ T1336] usb 2-1: config 1 has no interface number 0 [ 156.487636][ T1336] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 156.538258][ T1336] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.795996][ T1336] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 156.825995][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.850872][ T1336] usb 2-1: Product: syz [ 156.875975][ T1336] usb 2-1: Manufacturer: syz [ 156.884861][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 156.914787][ T1336] usb 2-1: SerialNumber: syz [ 156.986088][ T6201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.007450][ T1336] usb 2-1: Expected 3 endpoints, found: 2 [ 157.472160][ T4238] usb 2-1: USB disconnect, device number 10 [ 157.724665][ T6241] loop2: detected capacity change from 0 to 7 [ 157.780523][ T4174] loop2: [ 157.783608][ T4174] loop2: partition table partially beyond EOD, truncated [ 157.843904][ T6241] loop2: [ 157.847428][ T6241] loop2: partition table partially beyond EOD, truncated [ 157.970052][ T6234] [ 157.972431][ T6234] ====================================================== [ 157.979458][ T6234] WARNING: possible circular locking dependency detected [ 157.986488][ T6234] syzkaller #0 Not tainted [ 157.990894][ T6234] ------------------------------------------------------ [ 157.997900][ T6234] syz.0.653/6234 is trying to acquire lock: [ 158.003784][ T6234] ffff88801a9d8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 158.014211][ T6234] [ 158.014211][ T6234] but task is already holding lock: [ 158.021563][ T6234] ffff88801a9d8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 158.030868][ T6234] [ 158.030868][ T6234] which lock already depends on the new lock. [ 158.030868][ T6234] [ 158.041314][ T6234] [ 158.041314][ T6234] the existing dependency chain (in reverse order) is: [ 158.050329][ T6234] [ 158.050329][ T6234] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 158.058253][ T6234] __mutex_lock_common+0x1eb/0x2390 [ 158.064133][ T6234] mutex_lock_nested+0x17/0x20 [ 158.069423][ T6234] hci_dev_do_close+0x5f/0x1030 [ 158.074797][ T6234] hci_rfkill_set_block+0x10a/0x190 [ 158.080508][ T6234] rfkill_set_block+0x1c6/0x420 [ 158.085874][ T6234] rfkill_fop_write+0x458/0x560 [ 158.091239][ T6234] vfs_write+0x300/0xd00 [ 158.096023][ T6234] ksys_write+0x14d/0x250 [ 158.100882][ T6234] do_syscall_64+0x4c/0xa0 [ 158.105812][ T6234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.112217][ T6234] [ 158.112217][ T6234] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 158.120208][ T6234] __mutex_lock_common+0x1eb/0x2390 [ 158.125921][ T6234] mutex_lock_nested+0x17/0x20 [ 158.131194][ T6234] rfkill_register+0x33/0x8a0 [ 158.136394][ T6234] hci_register_dev+0x452/0x970 [ 158.141753][ T6234] vhci_create_device+0x32c/0x5c0 [ 158.147292][ T6234] vhci_write+0x391/0x450 [ 158.152228][ T6234] vfs_write+0x712/0xd00 [ 158.156982][ T6234] ksys_write+0x14d/0x250 [ 158.161839][ T6234] do_syscall_64+0x4c/0xa0 [ 158.166795][ T6234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.173221][ T6234] [ 158.173221][ T6234] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 158.181192][ T6234] __mutex_lock_common+0x1eb/0x2390 [ 158.186912][ T6234] mutex_lock_nested+0x17/0x20 [ 158.192190][ T6234] vhci_send_frame+0x88/0x100 [ 158.197378][ T6234] hci_send_frame+0x1a9/0x2e0 [ 158.202573][ T6234] hci_tx_work+0x9f9/0x1710 [ 158.207766][ T6234] process_one_work+0x863/0x1000 [ 158.213221][ T6234] worker_thread+0xaa8/0x12a0 [ 158.218418][ T6234] kthread+0x436/0x520 [ 158.223025][ T6234] ret_from_fork+0x1f/0x30 [ 158.227977][ T6234] [ 158.227977][ T6234] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 158.237175][ T6234] __lock_acquire+0x2c33/0x7c60 [ 158.242544][ T6234] lock_acquire+0x197/0x3f0 [ 158.247717][ T6234] __flush_work+0xdd/0x1b0 [ 158.252666][ T6234] hci_dev_do_close+0x1e7/0x1030 [ 158.258122][ T6234] hci_rfkill_set_block+0x10a/0x190 [ 158.263866][ T6234] rfkill_set_block+0x1c6/0x420 [ 158.269284][ T6234] rfkill_fop_write+0x458/0x560 [ 158.274729][ T6234] vfs_write+0x300/0xd00 [ 158.279483][ T6234] ksys_write+0x14d/0x250 [ 158.284320][ T6234] do_syscall_64+0x4c/0xa0 [ 158.289247][ T6234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.295650][ T6234] [ 158.295650][ T6234] other info that might help us debug this: [ 158.295650][ T6234] [ 158.305886][ T6234] Chain exists of: [ 158.305886][ T6234] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 158.305886][ T6234] [ 158.320810][ T6234] Possible unsafe locking scenario: [ 158.320810][ T6234] [ 158.328263][ T6234] CPU0 CPU1 [ 158.333618][ T6234] ---- ---- [ 158.338977][ T6234] lock(&hdev->req_lock); [ 158.343391][ T6234] lock(rfkill_global_mutex); [ 158.350676][ T6234] lock(&hdev->req_lock); [ 158.357612][ T6234] lock((work_completion)(&hdev->tx_work)); [ 158.363584][ T6234] [ 158.363584][ T6234] *** DEADLOCK *** [ 158.363584][ T6234] [ 158.371721][ T6234] 2 locks held by syz.0.653/6234: [ 158.376729][ T6234] #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 158.386832][ T6234] #1: ffff88801a9d8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 158.396573][ T6234] [ 158.396573][ T6234] stack backtrace: [ 158.402465][ T6234] CPU: 0 PID: 6234 Comm: syz.0.653 Not tainted syzkaller #0 [ 158.409735][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.419791][ T6234] Call Trace: [ 158.423067][ T6234] [ 158.425999][ T6234] dump_stack_lvl+0x168/0x230 [ 158.430665][ T6234] ? load_image+0x3b0/0x3b0 [ 158.435151][ T6234] ? show_regs_print_info+0x20/0x20 [ 158.440337][ T6234] ? print_circular_bug+0x12b/0x1a0 [ 158.445533][ T6234] check_noncircular+0x274/0x310 [ 158.450472][ T6234] ? add_chain_block+0x940/0x940 [ 158.455391][ T6234] ? lockdep_lock+0xdc/0x1e0 [ 158.459965][ T6234] ? mark_lock+0x94/0x320 [ 158.464370][ T6234] __lock_acquire+0x2c33/0x7c60 [ 158.469219][ T6234] ? lockdep_unlock+0x134/0x2d0 [ 158.474068][ T6234] ? lockdep_lock+0x1e0/0x1e0 [ 158.478733][ T6234] ? mark_lock+0x94/0x320 [ 158.483062][ T6234] ? verify_lock_unused+0x140/0x140 [ 158.488245][ T6234] ? __lock_acquire+0x12d9/0x7c60 [ 158.493261][ T6234] lock_acquire+0x197/0x3f0 [ 158.497765][ T6234] ? __flush_work+0xc1/0x1b0 [ 158.502342][ T6234] ? __mutex_trylock_common+0x14f/0x250 [ 158.507872][ T6234] ? read_lock_is_recursive+0x10/0x10 [ 158.513227][ T6234] ? lock_chain_count+0x20/0x20 [ 158.518058][ T6234] ? mark_lock+0x94/0x320 [ 158.522372][ T6234] __flush_work+0xdd/0x1b0 [ 158.526772][ T6234] ? __flush_work+0xc1/0x1b0 [ 158.531612][ T6234] ? flush_work+0x20/0x20 [ 158.535927][ T6234] ? hci_leds_update_powered+0x148/0x160 [ 158.541546][ T6234] ? rcu_lock_release+0x5/0x20 [ 158.546296][ T6234] ? __lock_acquire+0x7c60/0x7c60 [ 158.551321][ T6234] hci_dev_do_close+0x1e7/0x1030 [ 158.556249][ T6234] ? _raw_spin_unlock+0x40/0x40 [ 158.561091][ T6234] hci_rfkill_set_block+0x10a/0x190 [ 158.566272][ T6234] ? rcu_lock_release+0x20/0x20 [ 158.571110][ T6234] rfkill_set_block+0x1c6/0x420 [ 158.575960][ T6234] rfkill_fop_write+0x458/0x560 [ 158.580810][ T6234] ? rfkill_fop_read+0x4b0/0x4b0 [ 158.585733][ T6234] ? common_file_perm+0xc0/0x1c0 [ 158.590660][ T6234] ? fsnotify_perm+0x5d/0x560 [ 158.595322][ T6234] ? security_file_permission+0x75/0xa0 [ 158.600872][ T6234] ? rfkill_fop_read+0x4b0/0x4b0 [ 158.605808][ T6234] vfs_write+0x300/0xd00 [ 158.610067][ T6234] ? file_end_write+0x250/0x250 [ 158.614929][ T6234] ? __fget_files+0x40f/0x480 [ 158.619617][ T6234] ? __fdget_pos+0x1e2/0x370 [ 158.624215][ T6234] ? ksys_write+0x71/0x250 [ 158.628628][ T6234] ksys_write+0x14d/0x250 [ 158.632967][ T6234] ? __ia32_sys_read+0x80/0x80 [ 158.637734][ T6234] ? lockdep_hardirqs_on+0x94/0x140 [ 158.643314][ T6234] do_syscall_64+0x4c/0xa0 [ 158.647740][ T6234] ? clear_bhb_loop+0x30/0x80 [ 158.652409][ T6234] ? clear_bhb_loop+0x30/0x80 [ 158.657189][ T6234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.663079][ T6234] RIP: 0033:0x7f628ff6eba9 [ 158.667483][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.687078][ T6234] RSP: 002b:00007f628e194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.695479][ T6234] RAX: ffffffffffffffda RBX: 00007f62901b6180 RCX: 00007f628ff6eba9 [ 158.703437][ T6234] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 158.711396][ T6234] RBP: 00007f628fff1e19 R08: 0000000000000000 R09: 0000000000000000 [ 158.719368][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.727413][ T6234] R13: 00007f62901b6218 R14: 00007f62901b6180 R15: 00007ffd56afebf8 [ 158.735380][ T6234]