last executing test programs: 29.444195563s ago: executing program 0 (id=359): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) 29.311816211s ago: executing program 0 (id=362): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x4000400, 0x9, 0x81, 0x9, "ff0700000000000000000000000000008000", 0x2, 0x7}) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) tkill(r1, 0xb) 28.068739732s ago: executing program 0 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0xc0104d08, 0x200000000005) 27.892431262s ago: executing program 0 (id=371): memfd_create(0x0, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x2, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 25.649266263s ago: executing program 0 (id=379): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 24.327878139s ago: executing program 0 (id=383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r5, 0x0, 0x2, 0x4}}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0x1, 0x4000}, 0xc) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 17.25395492s ago: executing program 1 (id=412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$qrtr(0x2a, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048815}, 0x40440c1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008332101f89e4f0481000200030000006a0001007379"], 0x94}}, 0x0) socket$netlink(0x10, 0x3, 0x5) socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106009039"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 16.126144835s ago: executing program 1 (id=413): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 12.42815229s ago: executing program 1 (id=423): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000400)={0x0, 0x100, 0x0, 0x0, 0x5}) 12.314760846s ago: executing program 1 (id=424): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x1d, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4000000) sendmsg(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000002080)=""/102400, 0x19000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 9.13718941s ago: executing program 32 (id=383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r5, 0x0, 0x2, 0x4}}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0x1, 0x4000}, 0xc) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 9.095928853s ago: executing program 1 (id=427): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x10068, 0x0) 7.07488674s ago: executing program 3 (id=430): socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x1, 0x0, 0x3}, 0x1c) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$rxrpc(0x21, 0x2, 0xa) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.603952497s ago: executing program 4 (id=431): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r1, 0x800) r2 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xf0\x8ag\xae\x7f/\xf4\x80KH\xf7VI\x0f\xeeL\xfc\x99`\xce\v\'\x9c\xdab\xe3\x9e\x80\xae\x8eptB\xc4\xa1\xab\xdf\xa7%\x825E\xe1\x8b\x97J\xb3\xa2S\x9c\x8au(\x86\x14\xa8\xf1EP_\x11\xbbi\xc8\x915>\xa9I\xfe\x12\xd9\xa5Z_\x15\xbdp\xda\xd5\x8bP\x10yai\xe0\x97\xbd\xa4\x011\x18\xf4l\xae\x9d\xa1j\x0f\xab\xe4|\xd5\xce\xfce{_BV\xf9\r', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) sendfile(r0, r4, 0x0, 0xffbc) r5 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT=r4, @ANYRES16=r3], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0x0, 0x0}, 0x10) syz_usb_control_io$printer(r5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0x2000) 6.070088988s ago: executing program 3 (id=432): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) pipe2(0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x53, 0x2, 0xfadf, 0x40005, 0x1, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r4) r6 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x48042, 0x101) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, 0x0, 0x0, 0x48000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) 5.944245295s ago: executing program 4 (id=433): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) waitid(0x1, 0x0, 0x0, 0x8, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000080)={0xe000003, 0x0, 0x0, 0x9, 0xb}) 5.712098019s ago: executing program 4 (id=434): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) 5.583389576s ago: executing program 4 (id=435): r0 = dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4, 0x4000}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0xffffffffffffffff, 0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c) socket$inet6(0xa, 0x1, 0xe6d7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) listen(0xffffffffffffffff, 0x401) write$UHID_INPUT(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) 5.52410017s ago: executing program 3 (id=436): socket(0x0, 0x6, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x10000, 0xd, 0x40, "13c6ff000000c1ff8180000000000000000000beb20000148b05000000000001", 0x31364d4e}) 4.737497786s ago: executing program 4 (id=438): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.648141741s ago: executing program 3 (id=440): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000400)={0x1, 0x103, 0xffdf8000, 0x1, 0x8}) 4.501194589s ago: executing program 3 (id=441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 4.426218874s ago: executing program 3 (id=442): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r4 = syz_open_dev$I2C(0x0, 0x0, 0x22000) ioctl$I2C_TIMEOUT(r4, 0x702, 0xfffffff7) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffc, [0xffffffff, 0x8001]}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) 3.643907439s ago: executing program 4 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 1.73637018s ago: executing program 1 (id=446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95) 1.73048709s ago: executing program 2 (id=447): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$qrtr(0x2a, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048815}, 0x40440c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 878.44475ms ago: executing program 2 (id=448): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010826bd7000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2800508005000200020000000800030002ac0f00090001000fd693f9590000000500090001"], 0x50}}, 0x40000) 711.604209ms ago: executing program 2 (id=449): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efb3e6f", 0x6}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x13c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0xa, 0x6, 0x0, 0x4cb, 0x7, 0x4002004cb, 0x1004, 0x8000000000000004, 0x2, 0x0, 0x7b, 0xffffffffffffffff, 0x2000000000000000, 0x1, 0x7], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 539.215249ms ago: executing program 2 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf207a03590308000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 378.247369ms ago: executing program 2 (id=451): r0 = creat(0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b01ff3ce801000033030000040000000800000002000000000000000000000055a8668d068486e41bc543086090d2227bc977d7b4a2a28678bbbc9d963c6be20ae1c5175464d81c9e4a8da84993c388748432fb5fe994b4f3baa57de3cdcd1726b9a4d648c53a44febe470e0924d006b9f5ecfd701bda8d95e0aa19035375f6c047df486620ac5f75be9545d292335ef69c748821392d99a8dd9609852de4fdeab1f3879e2caf4771ff1ac56c339cc96e2e9bf89dfbbd48055d333e071f1b271b6c4956a4e2307d3d5e95b0473fa8c4844fe31248af6b0b3eff35a1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebdc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff00"/1401], 0x5dd) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, &(0x7f0000000040)=0xfffffffffffffebd) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 0s ago: executing program 2 (id=452): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 54.572941][ T4172] cgroup: Unknown subsys name 'net' [ 54.715990][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.124536][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.461501][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.554845][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 57.577799][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.589169][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.643475][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.688622][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.696062][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.704589][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.716604][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.723885][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.732245][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.812240][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.819323][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.827676][ T4196] device bridge_slave_0 entered promiscuous mode [ 57.835244][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.842460][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.850458][ T4190] device bridge_slave_0 entered promiscuous mode [ 57.859644][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.868966][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.876924][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.884935][ T4194] device bridge_slave_0 entered promiscuous mode [ 57.893478][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.900740][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.908563][ T4194] device bridge_slave_1 entered promiscuous mode [ 57.919250][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.926628][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.934936][ T4196] device bridge_slave_1 entered promiscuous mode [ 57.942188][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.949253][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.957575][ T4190] device bridge_slave_1 entered promiscuous mode [ 57.966084][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.027083][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.034444][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.042623][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.056463][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.063813][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.072014][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.080789][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.098089][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.109704][ T4185] team0: Port device team_slave_0 added [ 58.117612][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.135069][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.145435][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.155595][ T4185] team0: Port device team_slave_1 added [ 58.163022][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.174352][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.207375][ T4194] team0: Port device team_slave_0 added [ 58.214830][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.242276][ T4194] team0: Port device team_slave_1 added [ 58.267639][ T4190] team0: Port device team_slave_0 added [ 58.274435][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.281580][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.307635][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.326792][ T4196] team0: Port device team_slave_0 added [ 58.334358][ T4196] team0: Port device team_slave_1 added [ 58.342154][ T4189] team0: Port device team_slave_0 added [ 58.354645][ T4190] team0: Port device team_slave_1 added [ 58.361569][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.368527][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.394523][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.423159][ T4189] team0: Port device team_slave_1 added [ 58.430181][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.437159][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.463331][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.480439][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.487491][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.513936][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.539592][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.546754][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.573030][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.591889][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.598862][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.625540][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.657838][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.665077][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.691493][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.703853][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.711178][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.737500][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.763624][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.770995][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.797207][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.817703][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.825206][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.851216][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.866763][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.873871][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.896716][ T4196] device hsr_slave_0 entered promiscuous mode [ 58.904127][ T4196] device hsr_slave_1 entered promiscuous mode [ 58.911195][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.918927][ T4196] Cannot create hsr debugfs directory [ 58.932569][ T4194] device hsr_slave_0 entered promiscuous mode [ 58.939164][ T4194] device hsr_slave_1 entered promiscuous mode [ 58.945789][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.953439][ T4194] Cannot create hsr debugfs directory [ 59.017925][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.024948][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.031877][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.039438][ T4190] Cannot create hsr debugfs directory [ 59.064643][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.071529][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.078019][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.086701][ T4189] Cannot create hsr debugfs directory [ 59.170616][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 59.177631][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 59.250401][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 59.256544][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 59.263685][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 59.378116][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.392260][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.403215][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.413792][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.461182][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.472483][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.488744][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.503329][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.566328][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.577446][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.602947][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.613630][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.684485][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.701458][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.718259][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.737994][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.753382][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.764124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.773928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.785502][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.808267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.816246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.826496][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.848715][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.861444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.875201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.885101][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.892354][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.906341][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.916460][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.937717][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.947235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.955996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.966066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.975423][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.982518][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.992551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.002774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.012379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.022187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.029479][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.039654][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.065731][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.078600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.086891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.096012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.106425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.115153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.124091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.133496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.142196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.150684][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.157733][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.166612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.188584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.198211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.226912][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.238662][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.255652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.264852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.274106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.283590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.293002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.301344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.312263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.321277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.332349][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.350641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.370677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.379633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.390913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.398063][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.419266][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.430510][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.462321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.471857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.481335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.493384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.502659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.513354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.524837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.537288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.547845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.556883][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.563999][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.572799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.582844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.592096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.602092][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.631756][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.638806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.650967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.685006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.711953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.720552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.740635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.749394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.763486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.773594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.787534][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.801109][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.814732][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.823443][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.830579][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.848855][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.867976][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.880539][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.910907][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.920414][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.928747][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.937983][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.948032][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.955147][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.964505][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.973368][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.982259][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.992076][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.000958][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.009655][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.018592][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.026679][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.035333][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.051192][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.062990][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.074235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.090651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.108492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.130945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.143422][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.157595][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.188207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.197771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.208145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.219608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.227373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.236862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.245875][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.252980][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.261148][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 61.267230][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 61.273390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.282530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.291335][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.298385][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.306031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.315084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.330460][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 61.340128][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 61.345741][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.357044][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 61.369810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.385156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.396494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.412085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.448270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.457731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.468004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.482740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.493828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.506000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.529471][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.552504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.566221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.584505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.594752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.619299][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.639138][ T4185] device veth0_vlan entered promiscuous mode [ 61.655476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.667833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.697809][ T4185] device veth1_vlan entered promiscuous mode [ 61.710057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.718474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.750342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.759271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.781502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.796529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.832774][ T4196] device veth0_vlan entered promiscuous mode [ 61.846447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.856616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.866550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.875236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.883980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.892566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.900614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.908372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.927578][ T4185] device veth0_macvtap entered promiscuous mode [ 61.942496][ T4194] device veth0_vlan entered promiscuous mode [ 61.948956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.958585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.979765][ T4196] device veth1_vlan entered promiscuous mode [ 61.989429][ T4185] device veth1_macvtap entered promiscuous mode [ 62.002243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.010939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.019094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.029818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.038004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.051334][ T4194] device veth1_vlan entered promiscuous mode [ 62.065757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.074125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.082828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.091092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.106852][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.126602][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.141041][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.148320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.157214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.166764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.175735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.186380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.199495][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.208905][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.218683][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.227823][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.249737][ T4194] device veth0_macvtap entered promiscuous mode [ 62.260385][ T4194] device veth1_macvtap entered promiscuous mode [ 62.288565][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.298500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.307650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.316221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.325068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.334194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.343088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.354057][ T4196] device veth0_macvtap entered promiscuous mode [ 62.384053][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.395517][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.409337][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.419733][ T4196] device veth1_macvtap entered promiscuous mode [ 62.439261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.454135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.463465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.472708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.483360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.492282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.504649][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.515832][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.527330][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.575529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.584887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.594707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.603537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.618476][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.629321][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.639378][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.650318][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.663000][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.671655][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.680742][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.689452][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699342][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.727544][ T4189] device veth0_vlan entered promiscuous mode [ 62.735661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.744836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.754895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.763330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.778147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.786953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.796882][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.807378][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.817342][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.829098][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.840053][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.851558][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.859540][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.868117][ T4190] device veth0_vlan entered promiscuous mode [ 62.882285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.891116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.898773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.907496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.915416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.924189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.934920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.952980][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.962224][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971068][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.979779][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.017893][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.028168][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.029848][ T4189] device veth1_vlan entered promiscuous mode [ 63.057942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.083356][ T4190] device veth1_vlan entered promiscuous mode [ 63.139361][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.148561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.164179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.177612][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.193831][ T4189] device veth0_macvtap entered promiscuous mode [ 63.214820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.224178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.239053][ T4189] device veth1_macvtap entered promiscuous mode [ 63.307757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.318745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.329683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.340720][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 63.347050][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 63.364699][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.382324][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.395277][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.406021][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.417270][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 63.418987][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.424991][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 63.440580][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 63.446649][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.471203][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.480159][ T4190] device veth0_macvtap entered promiscuous mode [ 63.490591][ T4190] device veth1_macvtap entered promiscuous mode [ 63.506574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.517496][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.526685][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.536645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.550485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.567246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.577217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.598969][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.630310][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.661093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.680348][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.691363][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.702520][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.721577][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.743467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.762841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.779411][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.809981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.840503][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.868271][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.880054][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.900042][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.918765][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.939740][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.955389][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.979752][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.986773][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.986815][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.993018][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.993066][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.993088][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.993109][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.027044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.027687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.028140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.052955][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.052971][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.052980][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.052991][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.052999][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.053009][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.053018][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.053029][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.054142][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.057303][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057332][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057354][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057377][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.090944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.092331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.188106][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.188165][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.208742][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.483751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.484014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.745053][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.745108][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.746402][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.747047][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.747091][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.748199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.995876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.170499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.170537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.303062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.712636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.815063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.130274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.367984][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 66.368062][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 66.368122][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 66.368173][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 66.368222][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 66.606491][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.606572][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.608018][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.647984][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.648029][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.649127][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.982928][ T4320] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 68.199930][ C1] sched: RT throttling activated [ 68.871733][ T4324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.047417][ T4332] loop2: detected capacity change from 0 to 512 [ 69.076742][ T4332] ======================================================= [ 69.076742][ T4332] WARNING: The mand mount option has been deprecated and [ 69.076742][ T4332] and is ignored by this kernel. Remove the mand [ 69.076742][ T4332] option from the mount to silence this warning. [ 69.076742][ T4332] ======================================================= [ 69.235594][ T4335] overlayfs: failed to resolve './file0': -2 [ 69.297859][ T4332] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.389422][ T4332] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.10: invalid block [ 69.412663][ T4332] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.10: invalid indirect mapped block 4294967295 (level 1) [ 69.431122][ T4332] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.10: invalid indirect mapped block 4294967295 (level 1) [ 69.461082][ T4332] EXT4-fs (loop2): 2 truncates cleaned up [ 69.468171][ T4332] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 69.650858][ T4332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.10: bg 0: block 5: invalid block bitmap [ 70.091435][ T4352] netlink: 'syz.2.13': attribute type 21 has an invalid length. [ 70.100283][ T4352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13'. [ 70.675110][ T4345] loop3: detected capacity change from 0 to 32768 [ 70.750481][ T4345] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.12 (4345) [ 70.885444][ T4345] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 70.935926][ T4345] BTRFS info (device loop3): using free space tree [ 70.977178][ T4345] BTRFS info (device loop3): has skinny extents [ 71.183450][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190216][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294862][ T4348] loop1: detected capacity change from 0 to 32768 [ 71.355267][ T4345] BTRFS info (device loop3): enabling ssd optimizations [ 71.374147][ T4356] loop2: detected capacity change from 0 to 32768 [ 71.462423][ T4356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.14 (4356) [ 71.548957][ T4348] XFS (loop1): Mounting V5 Filesystem [ 71.628066][ T4356] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 71.695558][ T4356] BTRFS info (device loop2): allowing degraded mounts [ 71.744056][ T4356] BTRFS info (device loop2): disabling tree log [ 71.746004][ T4358] loop0: detected capacity change from 0 to 32768 [ 71.750432][ T4356] BTRFS info (device loop2): use no compression [ 71.767089][ T4356] BTRFS info (device loop2): using free space tree [ 71.792078][ T4356] BTRFS info (device loop2): has skinny extents [ 71.944047][ T4348] XFS (loop1): Ending clean mount [ 71.951894][ T4358] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 72.008734][ T4358] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 72.192463][ T4358] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 72.298485][ T4416] netlink: 'syz.3.16': attribute type 21 has an invalid length. [ 72.307004][ T4416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16'. [ 73.065536][ T4342] capability: warning: `syz.1.11' uses 32-bit capabilities (legacy support in use) [ 73.128163][ T1325] cfg80211: failed to load regulatory.db [ 73.137619][ T4358] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 73.158808][ T4342] program syz.1.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.754529][ T4431] syz.3.19 (4431) used greatest stack depth: 17336 bytes left [ 74.014794][ T4189] XFS (loop1): Unmounting Filesystem [ 74.101331][ T4435] loop2: detected capacity change from 0 to 164 [ 75.302346][ T4435] rock: directory entry would overflow storage [ 75.308832][ T4435] rock: sig=0x66, size=4, remaining=3 [ 75.352561][ T4434] rock: directory entry would overflow storage [ 75.359045][ T4434] rock: sig=0x66, size=4, remaining=3 [ 76.014708][ T4446] loop6: detected capacity change from 0 to 7 [ 76.038913][ T4446] Dev loop6: unable to read RDB block 7 [ 76.044961][ T4446] loop6: unable to read partition table [ 76.051184][ T4446] loop6: partition table beyond EOD, truncated [ 76.057557][ T4446] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 77.280013][ T4449] Zero length message leads to an empty skb [ 79.916929][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 80.032960][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 80.270183][ T4400] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 80.650035][ T4428] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 81.150158][ T4428] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.210064][ T4428] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 81.238216][ T4428] usb 1-1: can't read configurations, error -71 [ 81.711660][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.825529][ T4477] loop6: detected capacity change from 0 to 7 [ 81.833563][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.862140][ T4175] Dev loop6: unable to read RDB block 7 [ 81.869109][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.880336][ T4175] loop6: unable to read partition table [ 81.886134][ T4175] loop6: partition table beyond EOD, truncated [ 81.964397][ T4477] Dev loop6: unable to read RDB block 7 [ 81.974128][ T4477] loop6: unable to read partition table [ 82.016625][ T4477] loop6: partition table beyond EOD, truncated [ 82.045583][ T4477] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 82.949834][ T4493] input: syz0 as /devices/virtual/input/input5 [ 83.501123][ T4504] loop5: detected capacity change from 0 to 4096 [ 83.556923][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 83.602348][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.613894][ C0] Buffer I/O error on dev loop5, logical block 496, async page read [ 83.690741][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 83.702365][ C0] blk_update_request: I/O error, dev loop5, sector 1032 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 83.714244][ C0] blk_update_request: I/O error, dev loop5, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 63 prio class 0 [ 83.721068][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.736719][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.959619][ T4510] tipc: Can't bind to reserved service type 0 [ 84.032775][ T4511] input: syz1 as /devices/virtual/input/input6 [ 84.445058][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.164313][ T4532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 85.171298][ T4532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.271893][ T4532] vhci_hcd vhci_hcd.0: Device attached [ 85.500092][ T4307] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 85.610980][ T4400] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.630046][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.680106][ T4400] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 85.695083][ T4400] usb 3-1: chopping to 0 config(s) [ 85.718335][ T4400] usb 3-1: can't read configurations, error -32 [ 85.805837][ T4541] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 85.899996][ T4400] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 86.020256][ T1108] usb 4-1: config 0 has no interfaces? [ 86.080307][ T4400] usb 3-1: device descriptor read/64, error -32 [ 86.100551][ T1108] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 86.119867][ T1108] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 86.170005][ T1108] usb 4-1: Manufacturer: syz [ 86.184011][ T1108] usb 4-1: config 0 descriptor?? [ 86.211653][ T4400] usb usb3-port1: attempt power cycle [ 86.426603][ T1108] usb 4-1: USB disconnect, device number 2 [ 86.434588][ T4533] vhci_hcd: connection closed [ 86.447723][ T4420] vhci_hcd: stop threads [ 86.468227][ T4420] vhci_hcd: release socket [ 86.503732][ T4420] vhci_hcd: disconnect device [ 86.650021][ T4400] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 86.730102][ T4400] usb 3-1: device descriptor read/8, error -32 [ 87.009982][ T4400] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 87.100140][ T4400] usb 3-1: device descriptor read/8, error -32 [ 87.220175][ T4400] usb usb3-port1: unable to enumerate USB device [ 87.275461][ T4556] overlayfs: conflicting lowerdir path [ 87.404310][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.149628][ T4571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.59'. [ 88.189359][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805aa91400: rx timeout, send abort [ 88.248969][ T4572] tipc: Failed to remove unknown binding: 66,1,1/0:255346395/255346397 [ 88.295604][ T4572] tipc: Failed to remove unknown binding: 66,1,1/0:255346395/255346397 [ 88.346773][ T4572] tipc: Failed to remove unknown binding: 66,1,1/0:255346395/255346397 [ 88.700055][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805aa91400: abort rx timeout. Force session deactivation [ 91.065865][ T4596] 9pnet_virtio: no channels available for device syz [ 91.338819][ T4603] blktrace: Concurrent blktraces are not allowed on sg0 [ 91.557567][ T4606] netlink: 'syz.4.73': attribute type 12 has an invalid length. [ 94.246232][ T4629] netlink: 'syz.4.78': attribute type 3 has an invalid length. [ 94.259999][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.291088][ T4629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.346042][ T4631] ODEBUG: Out of memory. ODEBUG disabled [ 94.640480][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 94.760134][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.785040][ T1108] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.846530][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.915770][ T1108] usb 2-1: config 0 descriptor?? [ 95.235597][ T1108] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.287262][ T4656] 9pnet_virtio: no channels available for device syz [ 95.397572][ T4386] usb 2-1: USB disconnect, device number 2 [ 102.187430][ T4716] device syzkaller0 entered promiscuous mode [ 102.394106][ T4712] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.505038][ T4740] loop7: detected capacity change from 0 to 16384 [ 103.903707][ T4748] tipc: Started in network mode [ 103.926049][ T4748] tipc: Node identity 4e0e8726b5b2, cluster identity 4711 [ 103.990361][ T4748] tipc: Enabled bearer , priority 0 [ 105.644916][ T4755] 9pnet_virtio: no channels available for device syz [ 105.926676][ T4748] device syzkaller0 entered promiscuous mode [ 106.013495][ T4386] tipc: Node number set to 4223436582 [ 106.076491][ T4748] tipc: Resetting bearer [ 106.144781][ T4747] tipc: Resetting bearer [ 106.191037][ T4747] tipc: Disabling bearer [ 106.523188][ T4775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.584658][ T4774] lo speed is unknown, defaulting to 1000 [ 106.591232][ T4774] lo speed is unknown, defaulting to 1000 [ 106.599159][ T4774] lo speed is unknown, defaulting to 1000 [ 106.622237][ T4774] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.721610][ T4774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.946983][ T4774] lo speed is unknown, defaulting to 1000 [ 106.961195][ T4774] lo speed is unknown, defaulting to 1000 [ 106.967917][ T4774] lo speed is unknown, defaulting to 1000 [ 106.975009][ T4774] lo speed is unknown, defaulting to 1000 [ 106.982750][ T4774] lo speed is unknown, defaulting to 1000 [ 110.730080][ T4386] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.033246][ T4386] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 111.130210][ T4386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.151333][ T4820] binder_alloc: 4819: binder_alloc_buf size 16448 failed, no address space [ 111.160901][ T4386] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.190274][ T4820] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 111.204790][ T4386] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.300103][ T4386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.330275][ T4386] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.390028][ T4386] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.560153][ T4386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.583690][ T4386] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.623866][ T4386] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.000351][ T4386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.259501][ T4386] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.322204][ T4386] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.473326][ T4831] 9pnet_virtio: no channels available for device syz [ 113.520246][ T4386] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 113.527992][ T4386] usb 2-1: can't read configurations, error -71 [ 113.742756][ T4835] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.984316][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 115.170132][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.420091][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 115.540082][ T1108] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.561854][ T1108] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.613296][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.637551][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.658567][ T4871] nftables ruleset with unbound set [ 115.667746][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.688551][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.725238][ T1108] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.755609][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.796743][ T1108] usb 2-1: config 0 descriptor?? [ 116.096333][ T1108] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.139522][ T1108] usb 2-1: USB disconnect, device number 5 [ 116.187799][ T1108] usblp0: removed [ 116.192012][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.580198][ T21] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 116.588469][ T21] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.605930][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.689979][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.770527][ T26] audit: type=1326 audit(1770267890.116:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.800459][ T26] audit: type=1326 audit(1770267890.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.828501][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.837947][ T26] audit: type=1326 audit(1770267890.176:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.850100][ T21] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.868292][ T21] usb 5-1: Product: syz [ 116.875786][ T21] usb 5-1: Manufacturer: syz [ 116.880813][ T21] usb 5-1: SerialNumber: syz [ 116.885833][ T26] audit: type=1326 audit(1770267890.176:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.915502][ T26] audit: type=1326 audit(1770267890.176:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.937827][ T21] usb 5-1: config 0 descriptor?? [ 116.958600][ T26] audit: type=1326 audit(1770267890.216:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 116.981199][ T21] hub 5-1:0.0: bad descriptor, ignoring hub [ 116.987142][ T21] hub: probe of 5-1:0.0 failed with error -5 [ 116.996648][ T26] audit: type=1326 audit(1770267890.216:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 117.000375][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 117.037657][ T21] usb 5-1: selecting invalid altsetting 0 [ 117.068962][ T4885] device geneve2 entered promiscuous mode [ 117.074928][ T26] audit: type=1326 audit(1770267890.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 117.149293][ T26] audit: type=1326 audit(1770267890.236:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 117.180052][ T1108] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.221779][ T1108] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.240885][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.250829][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.260828][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.272225][ T21] usb 5-1: USB disconnect, device number 2 [ 117.279599][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.303082][ T1108] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.330093][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.472104][ T1108] usb 2-1: config 0 descriptor?? [ 117.478702][ T26] audit: type=1326 audit(1770267890.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f47386eb9 code=0x7ffc0000 [ 117.741966][ T1108] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.770011][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.805323][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 117.814636][ T4888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.914212][ T4888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.962760][ T1108] usb 2-1: USB disconnect, device number 6 [ 118.090392][ T1108] usblp0: removed [ 118.240019][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.334039][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 118.342986][ T21] usb 5-1: can't read configurations, error -71 [ 119.200597][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.396540][ T4906] syz.4.168 uses obsolete (PF_INET,SOCK_PACKET) [ 119.966515][ T4868] Set syz1 is full, maxelem 65536 reached [ 120.680684][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 120.812392][ T4913] netlink: 'syz.2.171': attribute type 27 has an invalid length. [ 121.082095][ T4934] 9pnet_virtio: no channels available for device syz [ 122.486728][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.494189][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.020858][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.104726][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.439818][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'. [ 126.449317][ T4981] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 127.002172][ T4913] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.011305][ T4913] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.020216][ T4913] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.029062][ T4913] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.045374][ T4913] device geneve2 left promiscuous mode [ 127.087655][ T4996] 9pnet_virtio: no channels available for device syz [ 127.182096][ T4979] bridge0: port 3(syz_tun) entered blocking state [ 127.191462][ T4969] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.198992][ T4979] bridge0: port 3(syz_tun) entered disabled state [ 127.235467][ T4979] device syz_tun entered promiscuous mode [ 127.496944][ T4979] bridge0: port 3(syz_tun) entered blocking state [ 127.503650][ T4979] bridge0: port 3(syz_tun) entered forwarding state [ 128.397062][ T5016] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.616501][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.622949][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.521090][ T5063] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 135.696680][ T5110] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.978100][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 135.978142][ T26] audit: type=1326 audit(1770267909.326:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e20934eb9 code=0x7fc00000 [ 136.600243][ T26] audit: type=1326 audit(1770267909.956:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 136.749978][ T26] audit: type=1326 audit(1770267909.986:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 136.956367][ T26] audit: type=1326 audit(1770267909.986:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.056717][ T5139] UBIFS error (pid: 5139): cannot open "ubifs", error -22 [ 137.083730][ T26] audit: type=1326 audit(1770267909.986:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.195397][ T5142] netlink: 59 bytes leftover after parsing attributes in process `syz.1.239'. [ 137.309042][ T26] audit: type=1326 audit(1770267909.986:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70adb9d78e code=0x7ffc0000 [ 137.370044][ T4428] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.418311][ T26] audit: type=1326 audit(1770267909.986:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.500128][ T26] audit: type=1326 audit(1770267909.986:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.602514][ T26] audit: type=1326 audit(1770267909.986:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.684528][ T26] audit: type=1326 audit(1770267909.986:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70adbdceb9 code=0x7ffc0000 [ 137.800100][ T4428] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.824217][ T4428] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.848686][ T4428] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.874539][ T4428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.910645][ T5140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.142178][ T4428] usb 1-1: USB disconnect, device number 4 [ 138.508091][ T5160] capability: warning: `syz.4.243' uses deprecated v2 capabilities in a way that may be insecure [ 138.779539][ T5157] mkiss: ax0: crc mode is auto. [ 138.822228][ T5164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 138.874907][ T5164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 138.900145][ T5164] netlink: 'syz.3.244': attribute type 6 has an invalid length. [ 139.140119][ T5175] netlink: 64 bytes leftover after parsing attributes in process `syz.1.247'. [ 140.995501][ T26] kauditd_printk_skb: 505 callbacks suppressed [ 140.995514][ T26] audit: type=1326 audit(1770267914.346:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.187047][ T26] audit: type=1326 audit(1770267914.406:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.267317][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 142.304741][ T26] audit: type=1326 audit(1770267914.406:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.368868][ T26] audit: type=1326 audit(1770267914.406:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.428492][ T26] audit: type=1326 audit(1770267914.406:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.482195][ T26] audit: type=1326 audit(1770267914.406:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.534712][ T26] audit: type=1326 audit(1770267914.406:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.585979][ T26] audit: type=1326 audit(1770267914.406:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.630139][ T26] audit: type=1326 audit(1770267914.406:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 142.695665][ T26] audit: type=1326 audit(1770267914.406:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f70adb7e2d9 code=0x7ffc0000 [ 143.863674][ T5245] bridge0: port 3(syz_tun) entered blocking state [ 143.939210][ T5245] bridge0: port 3(syz_tun) entered disabled state [ 143.995758][ T5245] device syz_tun entered promiscuous mode [ 144.051294][ T5245] bridge0: port 3(syz_tun) entered blocking state [ 144.057802][ T5245] bridge0: port 3(syz_tun) entered forwarding state [ 144.250060][ T4386] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 144.643801][ T5039] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.710126][ T4386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.733988][ T4386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.772639][ T4386] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 144.838332][ T4386] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.866849][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.890003][ T5039] usb 2-1: Using ep0 maxpacket: 32 [ 144.934245][ T5249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.971291][ T4386] hub 3-1:1.0: bad descriptor, ignoring hub [ 144.990264][ T4386] hub: probe of 3-1:1.0 failed with error -5 [ 145.011777][ T5039] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.143530][ T4386] cdc_wdm 3-1:1.0: skipping garbage [ 145.148970][ T4386] cdc_wdm 3-1:1.0: skipping garbage [ 145.158860][ T4386] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 145.169274][ T4386] cdc_wdm 3-1:1.0: Unknown control protocol [ 145.190099][ T5039] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 145.216480][ T5039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.236265][ T4386] usb 3-1: USB disconnect, device number 6 [ 145.250026][ T5039] usb 2-1: Product: syz [ 145.282900][ T5039] usb 2-1: Manufacturer: syz [ 145.297832][ T5039] usb 2-1: SerialNumber: syz [ 145.319200][ T5039] usb 2-1: config 0 descriptor?? [ 145.785833][ T5269] raw_sendmsg: syz.4.281 forgot to set AF_INET. Fix it! [ 145.800138][ T4386] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.069972][ T4386] usb 3-1: Using ep0 maxpacket: 8 [ 146.215797][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 146.215811][ T26] audit: type=1804 audit(1770267919.566:603): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.287" name="file0" dev="hugetlbfs" ino=36549 res=1 errno=0 [ 146.243604][ T4386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.266825][ T4386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.277703][ T4386] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 146.320533][ T4386] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 146.344159][ T26] audit: type=1804 audit(1770267919.696:604): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.287" name="file0" dev="hugetlbfs" ino=36549 res=1 errno=0 [ 146.391262][ T4386] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 146.408871][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.455612][ T5285] process 'syz.3.287' launched '/dev/fd/9' with NULL argv: empty string added [ 146.465570][ T4386] hub 3-1:1.0: bad descriptor, ignoring hub [ 146.476287][ T4386] hub: probe of 3-1:1.0 failed with error -5 [ 146.503605][ T4386] cdc_wdm 3-1:1.0: skipping garbage [ 146.520966][ T4386] cdc_wdm 3-1:1.0: skipping garbage [ 146.545653][ T4386] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 146.566535][ T4386] cdc_wdm 3-1:1.0: Unknown control protocol [ 146.783019][ T4428] usb 3-1: USB disconnect, device number 7 [ 147.628055][ T4386] usb 2-1: USB disconnect, device number 7 [ 147.729975][ T4428] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.170097][ T4428] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 148.201211][ T4428] usb 3-1: config 4 has no interface number 0 [ 148.360126][ T4428] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 148.413515][ T4428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 148.434470][ T4428] usb 3-1: Product: syz [ 148.438670][ T4428] usb 3-1: Manufacturer: syz [ 148.483766][ T4428] usb 3-1: SerialNumber: syz [ 148.562504][ T4428] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input9 [ 148.850147][ T3547] bcm5974 3-1:4.28: could not read from device [ 148.934595][ T4428] usb 3-1: USB disconnect, device number 8 [ 149.363826][ T4179] udevd[4179]: Error opening device "/dev/input/event4": No such file or directory [ 149.397738][ T4179] udevd[4179]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.447472][ T4179] udevd[4179]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.527333][ T4179] udevd[4179]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.556527][ T4179] udevd[4179]: Unable to EVIOCGABS device "/dev/input/event4" [ 152.510301][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 152.520394][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 152.527878][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.537956][ T146] Workqueue: hci2 hci_rx_work [ 152.542678][ T146] Call Trace: [ 152.545975][ T146] [ 152.548935][ T146] dump_stack_lvl+0x188/0x250 [ 152.553633][ T146] ? show_regs_print_info+0x20/0x20 [ 152.558848][ T146] ? load_image+0x400/0x400 [ 152.563390][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 152.568522][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 152.573212][ T146] ? process_one_work+0x85f/0x1010 [ 152.578338][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 152.583559][ T146] kobject_add_internal+0x6e0/0xd90 [ 152.588788][ T146] kobject_add+0x160/0x230 [ 152.593243][ T146] ? kobject_init+0x1d0/0x1d0 [ 152.597946][ T146] ? klist_children_get+0x50/0x50 [ 152.603011][ T146] ? get_device_parent+0x121/0x3f0 [ 152.608154][ T146] device_add+0x483/0xfb0 [ 152.612505][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 152.617464][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 152.622779][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 152.627916][ T146] ? __mutex_trylock_common+0x155/0x260 [ 152.633502][ T146] hci_le_meta_evt+0x285/0x3c90 [ 152.638390][ T146] ? hci_event_packet+0x37b/0x1370 [ 152.643530][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 152.648602][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 152.654689][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 152.660346][ T146] ? mark_lock+0x94/0x320 [ 152.664695][ T146] ? mutex_unlock+0x10/0x10 [ 152.669219][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 152.675224][ T146] ? lock_chain_count+0x20/0x20 [ 152.680099][ T146] ? __rwlock_init+0x140/0x140 [ 152.684884][ T146] hci_event_packet+0xe48/0x1370 [ 152.689844][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 152.695101][ T146] ? rcu_lock_release+0x20/0x20 [ 152.699995][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 152.705234][ T146] hci_rx_work+0x255/0xa10 [ 152.709702][ T146] process_one_work+0x85f/0x1010 [ 152.714681][ T146] ? worker_detach_from_pool+0x240/0x240 [ 152.720349][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 152.725690][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 152.730736][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 152.736307][ T146] ? wq_worker_running+0x97/0x170 [ 152.741362][ T146] worker_thread+0xaa6/0x1290 [ 152.746089][ T146] kthread+0x436/0x520 [ 152.750178][ T146] ? rcu_lock_release+0x20/0x20 [ 152.755043][ T146] ? kthread_blkcg+0xd0/0xd0 [ 152.759652][ T146] ret_from_fork+0x1f/0x30 [ 152.764115][ T146] [ 152.772584][ T146] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 152.787057][ T146] Bluetooth: hci2: failed to register connection device [ 153.130791][ T26] audit: type=1326 audit(1770267926.486:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.199000][ T26] audit: type=1326 audit(1770267926.516:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.347013][ T26] audit: type=1326 audit(1770267926.516:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.525681][ T26] audit: type=1326 audit(1770267926.516:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.562011][ T26] audit: type=1326 audit(1770267926.516:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.586768][ T26] audit: type=1326 audit(1770267926.516:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.740075][ T26] audit: type=1326 audit(1770267926.516:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.853330][ T26] audit: type=1326 audit(1770267926.516:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.879440][ T26] audit: type=1326 audit(1770267926.516:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 153.910855][ T26] audit: type=1326 audit(1770267926.516:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f231fedceb9 code=0x7ffc0000 [ 154.020095][ T4307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.269952][ T4307] usb 3-1: Using ep0 maxpacket: 8 [ 154.400126][ T4307] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.429967][ T4307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.492702][ T4307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.543902][ T4307] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.606342][ T4307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.666459][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.980097][ T4307] usb 3-1: GET_CAPABILITIES returned 0 [ 154.985790][ T4307] usbtmc 3-1:16.0: can't read capabilities [ 155.199982][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.213032][ T4307] usb 3-1: USB disconnect, device number 9 [ 155.968331][ T5403] : renamed from hsr0 [ 157.068378][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 157.411876][ T4386] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 157.429283][ T4386] Bluetooth: hci3: Injecting HCI hardware error event [ 158.242226][ T146] Bluetooth: hci3: hardware error 0x00 [ 159.363678][ T5433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.329'. [ 161.080300][ T4427] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.389984][ T4427] usb 1-1: Using ep0 maxpacket: 8 [ 161.402628][ T5039] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.534051][ T4427] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.554159][ T4427] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.764677][ T4427] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.785016][ T4427] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.820103][ T5039] usb 3-1: config 0 has no interfaces? [ 161.829981][ T4427] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.866807][ T4427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.990135][ T5039] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.999314][ T5039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.049971][ T5039] usb 3-1: Product: syz [ 162.054509][ T5039] usb 3-1: Manufacturer: syz [ 162.059183][ T5039] usb 3-1: SerialNumber: syz [ 162.087113][ T5039] usb 3-1: config 0 descriptor?? [ 162.160132][ T4427] usb 1-1: GET_CAPABILITIES returned 0 [ 162.165650][ T4427] usbtmc 1-1:16.0: can't read capabilities [ 162.379958][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.398734][ T4427] usb 1-1: USB disconnect, device number 5 [ 162.435815][ T21] usb 3-1: USB disconnect, device number 10 [ 168.388890][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 168.388903][ T26] audit: type=1804 audit(1770267941.736:625): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.357" name="/newroot/47/file1" dev="fuse" ino=1 res=1 errno=0 [ 168.491630][ T146] Bluetooth: Wrong link type (-22) [ 168.658195][ T7] libceph: mon0 (1)[c::]:6789 socket error on write [ 168.951732][ T7] libceph: mon0 (1)[c::]:6789 socket error on write [ 168.995167][ T5544] ceph: No mds server is up or the cluster is laggy [ 169.150373][ T5563] 9pnet_virtio: no channels available for device syz [ 169.914181][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 170.624302][ T5588] binder: 5587:5588 unknown command 0 [ 170.644310][ T5588] binder: 5587:5588 ioctl c0306201 200000000080 returned -22 [ 170.896118][ T5593] loop6: detected capacity change from 0 to 7 [ 170.909316][ T5593] Dev loop6: unable to read RDB block 7 [ 170.915111][ T5593] loop6: unable to read partition table [ 170.921543][ T5593] loop6: partition table beyond EOD, truncated [ 170.927813][ T5593] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 172.299961][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.386982][ T4386] kernel read not supported for file /dsp1 (pid: 4386 comm: kworker/0:10) [ 172.670322][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.751762][ T5606] loop5: detected capacity change from 0 to 4096 [ 172.803598][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.873703][ C0] blk_update_request: I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.884976][ C0] Buffer I/O error on dev loop5, logical block 496, async page read [ 172.893080][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 172.904521][ C0] blk_update_request: I/O error, dev loop5, sector 1064 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 172.916387][ C0] blk_update_request: I/O error, dev loop5, sector 2408 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 173.485118][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.495082][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.508039][ T4231] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.517148][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.539141][ T4231] usb 4-1: config 0 descriptor?? [ 173.547010][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.558115][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 174.104400][ T4231] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 174.137622][ T4231] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 174.251080][ T4231] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 174.396732][ T7] usb 4-1: USB disconnect, device number 3 [ 175.320784][ T5627] fido_id[5627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 176.672837][ T5650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.397'. [ 179.319187][ T5667] 9pnet_virtio: no channels available for device syz [ 179.633950][ T5677] vxcan1: MTU too low for tipc bearer [ 179.730038][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.734806][ T5677] tipc: Enabling of bearer rejected, failed to enable media [ 180.130135][ T1108] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.173865][ T1108] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.200011][ T1108] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.219400][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.280343][ T5670] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.511937][ T1108] usb 5-1: USB disconnect, device number 5 [ 180.576899][ T5695] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 180.870169][ T4301] Bluetooth: hci0: command 0x0406 tx timeout [ 180.880857][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 181.698930][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 181.792453][ T4301] Bluetooth: hci2: command 0x0406 tx timeout [ 184.303126][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.362201][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.369680][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.379090][ T5707] device bridge_slave_0 left promiscuous mode [ 184.410107][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.530426][ T5707] device bridge_slave_1 left promiscuous mode [ 184.558109][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.628593][ T5707] bond0: (slave bond_slave_0): Releasing backup interface [ 184.707671][ T5707] bond0: (slave bond_slave_1): Releasing backup interface [ 184.826292][ T5707] team0: Port device team_slave_0 removed [ 184.879359][ T5707] team0: Port device team_slave_1 removed [ 184.912091][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.946904][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.992453][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.039380][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.573929][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.020208][ T21] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.029924][ T21] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 186.041204][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.050714][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.220498][ T21] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.240566][ T21] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.260116][ T21] usb 3-1: Product: syz [ 186.264801][ T21] usb 3-1: Manufacturer: syz [ 186.320923][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 186.334426][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 186.346002][ T21] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 190.281776][ T1108] usb 3-1: USB disconnect, device number 11 [ 190.460965][ T5752] 9pnet_virtio: no channels available for device syz [ 190.868204][ T4185] bridge0: port 3(syz_tun) entered disabled state [ 190.916966][ T4185] device syz_tun left promiscuous mode [ 190.925910][ T4185] bridge0: port 3(syz_tun) entered disabled state [ 191.319135][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.419083][ T5753] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 191.425654][ T5753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.457881][ T5753] vhci_hcd vhci_hcd.0: Device attached [ 191.476007][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.513136][ T5753] binder: Binderfs stats mode cannot be changed during a remount [ 191.556905][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.631453][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 191.649147][ T5766] vhci_hcd: connection closed [ 191.654133][ T4415] vhci_hcd: stop threads [ 191.669991][ T4307] vhci_hcd: vhci_device speed not set [ 191.691139][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.705246][ T4415] vhci_hcd: release socket [ 191.713895][ T4415] vhci_hcd: disconnect device [ 191.740004][ T4307] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 191.750938][ T4307] usb 37-1: enqueue for inactive port 0 [ 191.840132][ T4307] vhci_hcd: vhci_device speed not set [ 191.866394][ T5774] tipc: Failed to remove unknown binding: 66,1,1/0:1023679330/1023679332 [ 191.877203][ T5774] tipc: Failed to remove unknown binding: 66,1,1/0:1023679330/1023679332 [ 191.886039][ T5774] tipc: Failed to remove unknown binding: 66,1,1/0:1023679330/1023679332 [ 191.913096][ T5774] loop2: detected capacity change from 0 to 7 [ 191.958990][ T5774] Dev loop2: unable to read RDB block 7 [ 191.969995][ T5774] loop2: unable to read partition table [ 191.976218][ T5774] loop2: partition table beyond EOD, truncated [ 191.990348][ T5774] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 192.011564][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.019028][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.049162][ T5756] device bridge_slave_0 entered promiscuous mode [ 192.100127][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.109548][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.123623][ T5756] device bridge_slave_1 entered promiscuous mode [ 192.223375][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.298509][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.595829][ T5788] 9pnet_virtio: no channels available for device syz [ 192.971033][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 193.044034][ T5756] team0: Port device team_slave_0 added [ 193.159710][ T5756] team0: Port device team_slave_1 added [ 193.207690][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.256763][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.301844][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 193.360021][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.430705][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.469834][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.549973][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.593876][ T5806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 193.734117][ T5756] device hsr_slave_0 entered promiscuous mode [ 193.742667][ T3093] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.749505][ T3093] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.758793][ T5756] device hsr_slave_1 entered promiscuous mode [ 193.789067][ T5756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.837008][ T5756] Cannot create hsr debugfs directory [ 194.064016][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.073038][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.433656][ T5756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.478821][ T5823] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 194.506211][ T5756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.548052][ T5756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.579117][ T144] device hsr_slave_0 left promiscuous mode [ 194.603419][ T144] device hsr_slave_1 left promiscuous mode [ 194.616242][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.627093][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.642894][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.655875][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.665869][ T144] device bridge_slave_1 left promiscuous mode [ 194.687816][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.727945][ T144] device bridge_slave_0 left promiscuous mode [ 194.755109][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.869641][ T144] device veth1_macvtap left promiscuous mode [ 194.890645][ T144] device veth0_macvtap left promiscuous mode [ 194.911343][ T144] device veth1_vlan left promiscuous mode [ 194.928784][ T144] device veth0_vlan left promiscuous mode [ 195.010071][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 195.588293][ T144] team0 (unregistering): Port device team_slave_1 removed [ 195.619392][ T144] team0 (unregistering): Port device team_slave_0 removed [ 195.656814][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.704700][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.809937][ T7] Bluetooth: hci0: command 0x1003 tx timeout [ 195.816120][ T4191] Bluetooth: hci0: sending frame failed (-49) [ 195.912908][ T144] bond0 (unregistering): Released all slaves [ 196.026777][ T5756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.280591][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.359577][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.384653][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.662891][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.698762][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.731871][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.770723][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.777927][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.815086][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.835058][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.858718][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.866028][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.903516][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.933866][ T4428] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.037141][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.051853][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 197.067350][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.100097][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 197.121222][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.132438][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.141915][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.151136][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.159819][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.169266][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.205160][ T5756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.219929][ T4428] usb 2-1: Using ep0 maxpacket: 16 [ 197.228602][ T5756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.243596][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.255978][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.273354][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.360105][ T4428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.383745][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 197.393006][ T4428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.410405][ T4428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.459933][ T4428] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.517143][ T4428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.562710][ T4428] usb 2-1: config 0 descriptor?? [ 197.642893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.662339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.695050][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.900130][ T4301] Bluetooth: hci0: command 0x1001 tx timeout [ 197.906255][ T4191] Bluetooth: hci0: sending frame failed (-49) [ 198.045050][ T4428] HID 045e:07da: Invalid code 65791 type 1 [ 198.097768][ T4428] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input11 [ 198.214211][ T5901] INFO: trying to register non-static key. [ 198.220153][ T5901] The code is fine but needs lockdep annotation, or maybe [ 198.227273][ T5901] you didn't initialize this object before use? [ 198.233512][ T5901] turning off the locking correctness validator. [ 198.239880][ T5901] CPU: 1 PID: 5901 Comm: iou-wrk-5900 Not tainted syzkaller #0 [ 198.247432][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.257503][ T5901] Call Trace: [ 198.260796][ T5901] [ 198.263743][ T5901] dump_stack_lvl+0x188/0x250 [ 198.268470][ T5901] ? show_regs_print_info+0x20/0x20 [ 198.273689][ T5901] ? load_image+0x400/0x400 [ 198.278210][ T5901] ? cpumask_next+0xb3/0xd0 [ 198.282728][ T5901] ? __is_module_percpu_address+0x2a7/0x410 [ 198.288633][ T5901] ? is_kernel_percpu_address+0x143/0x160 [ 198.294369][ T5901] assign_lock_key+0x1ec/0x200 [ 198.299142][ T5901] ? SOFTIRQ_verbose+0x10/0x10 [ 198.303915][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.309132][ T5901] register_lock_class+0x21d/0x890 [ 198.314261][ T5901] ? __lock_acquire+0x13bc/0x7d10 [ 198.319314][ T5901] ? is_dynamic_key+0x1f0/0x1f0 [ 198.324213][ T5901] __lock_acquire+0x16f/0x7d10 [ 198.329003][ T5901] ? finish_lock_switch+0x12f/0x280 [ 198.334245][ T5901] ? lockdep_hardirqs_on+0x94/0x140 [ 198.339471][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.344697][ T5901] ? finish_lock_switch+0x12f/0x280 [ 198.349927][ T5901] ? finish_task_switch+0x12f/0x640 [ 198.355146][ T5901] ? __switch_to_asm+0x34/0x60 [ 198.360043][ T5901] ? __schedule+0x11f7/0x43c0 [ 198.364757][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.370008][ T5901] ? __might_sleep+0xf0/0xf0 [ 198.374620][ T5901] lock_acquire+0x19e/0x400 [ 198.379141][ T5901] ? gsmld_write+0x57/0x120 [ 198.383665][ T5901] ? read_lock_is_recursive+0x10/0x10 [ 198.389059][ T5901] ? _copy_from_iter+0x6db/0x1170 [ 198.394101][ T5901] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 198.399571][ T5901] ? lockdep_hardirqs_off+0x70/0x100 [ 198.404919][ T5901] _raw_spin_lock_irqsave+0xb0/0x100 [ 198.410235][ T5901] ? gsmld_write+0x57/0x120 [ 198.414753][ T5901] ? _raw_spin_lock+0x40/0x40 [ 198.419457][ T5901] gsmld_write+0x57/0x120 [ 198.423804][ T5901] file_tty_write+0x557/0x910 [ 198.428508][ T5901] ? gsmld_read+0x10/0x10 [ 198.432851][ T5901] ? file_tty_write+0x910/0x910 [ 198.437723][ T5901] io_issue_sqe+0x32b7/0xb290 [ 198.442438][ T5901] ? __io_queue_sqe+0x360/0x360 [ 198.447314][ T5901] ? mark_lock+0x94/0x320 [ 198.451667][ T5901] ? __lock_acquire+0x13bc/0x7d10 [ 198.456721][ T5901] ? mark_lock+0x94/0x320 [ 198.461071][ T5901] ? mark_lock+0x94/0x320 [ 198.465421][ T5901] ? __lock_acquire+0x12e8/0x7d10 [ 198.470497][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.475729][ T5901] ? mark_lock+0x94/0x320 [ 198.480068][ T5901] ? __lock_acquire+0x13bc/0x7d10 [ 198.485123][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.490333][ T5901] ? verify_lock_unused+0x140/0x140 [ 198.495551][ T5901] ? look_up_lock_class+0x71/0x110 [ 198.500677][ T5901] ? register_lock_class+0xc0/0x890 [ 198.505888][ T5901] ? is_dynamic_key+0x1f0/0x1f0 [ 198.510758][ T5901] ? mark_lock+0x94/0x320 [ 198.515112][ T5901] ? __lock_acquire+0x13bc/0x7d10 [ 198.520169][ T5901] ? __lock_acquire+0x13bc/0x7d10 [ 198.525228][ T5901] ? lock_chain_count+0x20/0x20 [ 198.530100][ T5901] ? io_worker_handle_work+0x6c2/0xd10 [ 198.535579][ T5901] ? __lock_acquire+0x7d10/0x7d10 [ 198.540769][ T5901] ? do_raw_spin_lock+0x128/0x2f0 [ 198.545837][ T5901] ? __rwlock_init+0x140/0x140 [ 198.550638][ T5901] io_wq_submit_work+0x1a2/0x4a0 [ 198.555601][ T5901] io_worker_handle_work+0x783/0xd10 [ 198.561094][ T5901] io_wqe_worker+0x3b6/0xe40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.565725][ T5901] ? create_worker_cont+0x5e0/0x5e0 [ 198.570943][ T5901] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 198.576956][ T5901] ? lock_chain_count+0x20/0x20 [ 198.581842][ T5901] ? _raw_spin_unlock_irq+0x1f/0x40 [ 198.587061][ T5901] ? lockdep_hardirqs_on+0x94/0x140 [ 198.592280][ T5901] ? create_worker_cont+0x5e0/0x5e0 [ 198.597496][ T5901] ret_from_fork+0x1f/0x30 [ 198.601948][ T5901] [ 198.670853][ T4428] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 198.703515][ T4428] usb 2-1: USB disconnect, device number 8 [ 198.873043][ T5903] fido_id[5903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 199.979738][ T7] Bluetooth: hci0: command 0x1009 tx timeout [ 199.990732][ T5820] bridge0: port 3(syz_tun) entered disabled state [ 199.999164][ T5820] device syz_tun left promiscuous mode [ 200.006780][ T5820] bridge0: port 3(syz_tun) entered disabled state [ 200.025986][ T144] tipc: Left network mode [ 200.657027][ T144] device hsr_slave_0 left promiscuous mode [ 200.667545][ T144] device hsr_slave_1 left promiscuous mode [ 200.674534][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.684864][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.694682][ T144] device bridge_slave_1 left promiscuous mode [ 200.702759][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.711451][ T144] device bridge_slave_0 left promiscuous mode [ 200.717677][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.805712][ T144] team0 (unregistering): Port device team_slave_1 removed [ 200.817581][ T144] team0 (unregistering): Port device team_slave_0 removed [ 200.828624][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.840886][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.882776][ T144] bond0 (unregistering): Released all slaves [ 201.943848][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.003757][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.053697][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.103433][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.177019][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.204148][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.254796][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.313472][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.270006][ T144] device hsr_slave_0 left promiscuous mode [ 203.276275][ T144] device hsr_slave_1 left promiscuous mode [ 203.284982][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.292830][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.302998][ T144] device bridge_slave_1 left promiscuous mode [ 203.309207][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.317706][ T144] device bridge_slave_0 left promiscuous mode [ 203.325770][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.337008][ T144] device hsr_slave_0 left promiscuous mode [ 203.345175][ T144] device hsr_slave_1 left promiscuous mode [ 203.352242][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.359653][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.368783][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.376458][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.384032][ T144] device bridge_slave_1 left promiscuous mode [ 203.390251][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.398106][ T144] device bridge_slave_0 left promiscuous mode [ 203.404847][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.415095][ T144] device hsr_slave_0 left promiscuous mode [ 203.421436][ T144] device hsr_slave_1 left promiscuous mode [ 203.431189][ T144] device veth1_macvtap left promiscuous mode [ 203.437271][ T144] device veth0_macvtap left promiscuous mode [ 203.443775][ T144] device veth1_vlan left promiscuous mode [ 203.449537][ T144] device veth0_vlan left promiscuous mode [ 203.455838][ T144] device veth1_macvtap left promiscuous mode [ 203.462404][ T144] device veth0_macvtap left promiscuous mode [ 203.468429][ T144] device veth1_vlan left promiscuous mode [ 203.474290][ T144] device veth0_vlan left promiscuous mode [ 203.617926][ T144] team0 (unregistering): Port device team_slave_1 removed [ 203.628248][ T144] team0 (unregistering): Port device team_slave_0 removed [ 203.639575][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.653345][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.695049][ T144] bond0 (unregistering): Released all slaves [ 203.802190][ T144] team0 (unregistering): Port device team_slave_1 removed [ 203.814297][ T144] team0 (unregistering): Port device team_slave_0 removed [ 203.825895][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.837333][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.878584][ T144] bond0 (unregistering): Released all slaves [ 203.985887][ T144] bond0 (unregistering): Released all slaves