last executing test programs: 6.416317872s ago: executing program 2 (id=109): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}, 0x0) 6.343186026s ago: executing program 2 (id=110): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 6.342925317s ago: executing program 2 (id=111): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x123081) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) close_range(r0, 0xffffffffffffffff, 0x0) 6.248292022s ago: executing program 2 (id=112): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) syz_open_dev$I2C(0x0, 0x2, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x20080) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xd0044, 0x2]) 5.062111552s ago: executing program 4 (id=116): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 5.001777635s ago: executing program 3 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f22184d0fc76be367260f001d3235013d420f35420f0119b9060200000f32c4a2e9bae3362e410f308ed066470f2a541a0b0f20d835080000000f22d8", 0x3d}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.803191567s ago: executing program 4 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x40040) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.763630359s ago: executing program 3 (id=119): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.56774285s ago: executing program 4 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 3.475491875s ago: executing program 1 (id=124): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES32], 0x104}, 0x1, 0x0, 0x0, 0x8fda50294441b6e0}, 0x841) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.368170841s ago: executing program 4 (id=125): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/104, 0x68) close_range(r0, 0xffffffffffffffff, 0x0) 3.159204804s ago: executing program 2 (id=126): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x8}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.067212169s ago: executing program 1 (id=127): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.978524994s ago: executing program 1 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0x0, {0x3555, 0x12, 0xc, 0x5}}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2.898436039s ago: executing program 2 (id=129): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x8, 0x64, 0x10, 0xbda, 0xf179, 0xcfdf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.813602964s ago: executing program 1 (id=130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0xa}, @fda={0x66646185, 0x8, 0x2, 0x2b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x8}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 2.745587328s ago: executing program 1 (id=131): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x7, 0x5) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_disconn_req={{0x6, 0x19, 0x4}, {0x0, 0x5}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0xe, 0x2700, 0x3, 0xd4c}}, @l2cap_disconn_rsp={{0x7, 0xfc, 0x4}, {0x153, 0x100}}]}}, 0x25) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) fadvise64(0xffffffffffffffff, 0x6, 0x2, 0x5) 2.681912712s ago: executing program 1 (id=132): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x3, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x7fff, 0x1840, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) 1.537024309s ago: executing program 0 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.474335853s ago: executing program 0 (id=134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.457886044s ago: executing program 3 (id=135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7d7230e04008e03b50e991ab8"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.339306551s ago: executing program 3 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000a98000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000dc0)={"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"}) 1.278663744s ago: executing program 0 (id=137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1103, 0x3}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000380)={0x1}) 1.233887557s ago: executing program 0 (id=138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18300000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000040)=""/59, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1.123166623s ago: executing program 3 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4c040) 1.110913634s ago: executing program 3 (id=140): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x5, 0x2200, 0x5, &(0x7f0000000280)="18e063a80b"}, {0x27cc, 0x4000, 0x0, 0x0}], 0x2}) 903.517406ms ago: executing program 4 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 767.334664ms ago: executing program 4 (id=142): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 154.33297ms ago: executing program 0 (id=143): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) close_range(r0, r0, 0x0) 0s ago: executing program 0 (id=144): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000000000/0x4000)=nil, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x1fffffe, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040844}, 0x20004800) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. syzkaller login: [ 56.507162][ T4171] cgroup: Unknown subsys name 'net' [ 56.648103][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.045519][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.478607][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.583810][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.605987][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.615653][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 59.633547][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.688731][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.696103][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.704557][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.738286][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.745434][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.753894][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.833199][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.849948][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.864826][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.872017][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.879729][ T4197] device bridge_slave_0 entered promiscuous mode [ 59.887369][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.894641][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.902598][ T4191] device bridge_slave_0 entered promiscuous mode [ 59.922261][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.929443][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.937741][ T4184] device bridge_slave_0 entered promiscuous mode [ 59.951553][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.958811][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.966908][ T4197] device bridge_slave_1 entered promiscuous mode [ 59.974410][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.981557][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.989381][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.002130][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.009193][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.018228][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.025687][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.032838][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.040791][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.062237][ T4195] team0: Port device team_slave_0 added [ 60.080916][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.090328][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.098924][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.107278][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.128222][ T4195] team0: Port device team_slave_1 added [ 60.136619][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.153329][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.170939][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.194002][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.205166][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.222764][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.245173][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.268411][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.275557][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.301713][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.316180][ T4191] team0: Port device team_slave_0 added [ 60.330673][ T4197] team0: Port device team_slave_0 added [ 60.343375][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.350336][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.376601][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.389268][ T4191] team0: Port device team_slave_1 added [ 60.408682][ T4197] team0: Port device team_slave_1 added [ 60.417929][ T4185] team0: Port device team_slave_0 added [ 60.425830][ T4185] team0: Port device team_slave_1 added [ 60.438555][ T4184] team0: Port device team_slave_0 added [ 60.451767][ T4184] team0: Port device team_slave_1 added [ 60.489120][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.496210][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.522606][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.534794][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.541764][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.568066][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.604665][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.611629][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.637597][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.650132][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.657294][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.683871][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.695489][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.702754][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.729070][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.740780][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.747951][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.774195][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.792078][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.799135][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.825410][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.843603][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.850554][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.876554][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.891799][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.899197][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.959049][ T4197] device hsr_slave_0 entered promiscuous mode [ 60.966032][ T4197] device hsr_slave_1 entered promiscuous mode [ 60.973658][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.981369][ T4197] Cannot create hsr debugfs directory [ 60.989921][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.996990][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.003922][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.011578][ T4191] Cannot create hsr debugfs directory [ 61.057046][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.064106][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.070806][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.078860][ T4184] Cannot create hsr debugfs directory [ 61.092159][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.098893][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.106604][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.114951][ T4185] Cannot create hsr debugfs directory [ 61.212712][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 61.219648][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 61.222140][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 61.226711][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 61.239202][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 61.433905][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.445910][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.456365][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.466423][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.523014][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.547261][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.560555][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.583402][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.620777][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.643247][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.661784][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.671044][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.684289][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.706521][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.725903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.735421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.743583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.752627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.761593][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.768836][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.795048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.806355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.817236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.825797][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.832894][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.844424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.869172][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.890901][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.900215][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.909513][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.918601][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.929546][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.939263][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.951564][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.962961][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.980250][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.003343][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.011724][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.022464][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.030736][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.047819][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.066874][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.097935][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.113048][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.121681][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.138727][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.156074][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.169923][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.189901][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.202683][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.213442][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.222021][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.229088][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.237143][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.246091][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.255336][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.267037][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.302898][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.318871][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.329081][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.336198][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.347824][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.356535][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.365381][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.372484][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.381456][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.390667][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.399399][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.409080][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.417920][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.427498][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.437989][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.446235][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.454840][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.464660][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.473829][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.480900][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.488803][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.535368][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.544695][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.555352][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.565218][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.573740][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.594731][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.605765][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.623504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.632916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.641196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.685837][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.695439][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.705340][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.717575][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.727803][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.737289][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.746428][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.789343][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.800912][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.809616][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.818721][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.830413][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.839998][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.848888][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.859697][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.877324][ T4195] device veth0_vlan entered promiscuous mode [ 62.886376][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.895355][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.919904][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.938713][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.951777][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.960589][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.974886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.989815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.001925][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.009093][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.029121][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.054046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.072189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.080210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.088373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.097997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.106836][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.113951][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.122434][ T4195] device veth1_vlan entered promiscuous mode [ 63.160663][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.171339][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.186764][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.199705][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.208887][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.218567][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.225689][ T777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.237177][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.249182][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.260208][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.269725][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.278035][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.287083][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.295409][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 63.301486][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 63.301796][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.308888][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 63.314612][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.328078][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 63.333853][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.335712][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 63.350706][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.360346][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.369114][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.400399][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.424430][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.435278][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.443708][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.453716][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.462651][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.471526][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.480488][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.490035][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.498933][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.507082][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.516724][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.524983][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.533882][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.552996][ T4195] device veth0_macvtap entered promiscuous mode [ 63.573626][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.584632][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.598195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.608582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.617741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.626715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.635916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.644460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.653500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.661632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.685205][ T4195] device veth1_macvtap entered promiscuous mode [ 63.696919][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.714810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.727063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.736077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.746034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.754987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.763458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.785535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.794464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.803166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.817877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.839419][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.854028][ T4197] device veth0_vlan entered promiscuous mode [ 63.866863][ T4191] device veth0_vlan entered promiscuous mode [ 63.883284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.891526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.906141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.916928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.930105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.940266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.956718][ T4197] device veth1_vlan entered promiscuous mode [ 63.973060][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.980828][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.995737][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.009092][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.031513][ T4191] device veth1_vlan entered promiscuous mode [ 64.057925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.072488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.094322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.108417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.117437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.143876][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.153548][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.168782][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.179288][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.219610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.228342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.239269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.247451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.259774][ T4197] device veth0_macvtap entered promiscuous mode [ 64.273053][ T4197] device veth1_macvtap entered promiscuous mode [ 64.285245][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.300321][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.313883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.328470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.338519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.353109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.382814][ T4191] device veth0_macvtap entered promiscuous mode [ 64.410009][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.427486][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.439287][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.451756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.462296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.470955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.479819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.490349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.505320][ T4191] device veth1_macvtap entered promiscuous mode [ 64.551610][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.567162][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.590084][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.604411][ T4185] device veth0_vlan entered promiscuous mode [ 64.611239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.626553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.635172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.643633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.653400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.665872][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.677549][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.687679][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.698501][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.711406][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.722470][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.731190][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750129][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759066][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.774560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.786511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.796909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.809101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.830044][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.848485][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.862881][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.872982][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.885315][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.899266][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.911734][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.922956][ T4185] device veth1_vlan entered promiscuous mode [ 64.940403][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.950522][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.959190][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.975788][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985097][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.994270][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.003230][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.059767][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.069549][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.081682][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.095627][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.104613][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.137541][ T4185] device veth0_macvtap entered promiscuous mode [ 65.156357][ T4185] device veth1_macvtap entered promiscuous mode [ 65.168491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.180367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.194889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.207708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.220294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.232792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.240808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.248860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.265475][ T4184] device veth0_vlan entered promiscuous mode [ 65.301727][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.319154][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.330578][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.348945][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.359368][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.372149][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 65.378449][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 65.383277][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.403301][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.415767][ T4184] device veth1_vlan entered promiscuous mode [ 65.422038][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 65.436793][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 65.443215][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 65.450965][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.454125][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.466256][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.470976][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.492516][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.501624][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.510657][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.527999][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.540448][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.556546][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.568693][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578966][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.590579][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.603555][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.621416][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631246][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.640283][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.649045][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.664639][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.674282][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.684058][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.719991][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.730991][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.754441][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.771579][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.790398][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.801542][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.810491][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.819577][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.852886][ T4184] device veth0_macvtap entered promiscuous mode [ 65.868271][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.879644][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.899131][ T4184] device veth1_macvtap entered promiscuous mode [ 65.911459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.928091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.939675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.970201][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.987443][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.000020][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.017120][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.035833][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.047860][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.063351][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.079530][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.091205][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.114844][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.125886][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.149509][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.201804][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.223986][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.243295][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.255536][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.269497][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.271321][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.299795][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.313358][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.323534][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.333309][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.347291][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.369542][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.380941][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.389974][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.416146][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429264][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440214][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.463443][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.531623][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.551628][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.590165][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.689557][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.712967][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.731246][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.797541][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.830055][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.842421][ T4306] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 66.851575][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.897506][ T4306] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 67.050593][ T4317] loop8: detected capacity change from 0 to 7 [ 67.079364][ T4317] Dev loop8: unable to read RDB block 7 [ 67.112467][ T4317] loop8: unable to read partition table [ 67.124680][ T4313] kvm [4312]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x2000 [ 67.140481][ T4317] loop8: partition table beyond EOD, truncated [ 67.147416][ T4317] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 67.175257][ T4313] kvm [4312]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 67.225400][ T4313] kvm [4312]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 67.459825][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 67.468497][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 67.478279][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.487342][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.499448][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 67.693687][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.947109][ T4338] device syzkaller0 entered promiscuous mode [ 68.112098][ T7] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 68.124505][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.222574][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 68.235293][ T7] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 68.246325][ T7] usb 4-1: Manufacturer: syz [ 68.279989][ T7] usb 4-1: config 0 descriptor?? [ 68.324650][ T4342] block device autoloading is deprecated and will be removed. [ 68.333355][ T4200] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 68.472065][ T7] rc_core: IR keymap rc-hauppauge not found [ 68.494009][ T7] Registered IR keymap rc-empty [ 68.537851][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 68.569875][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 68.657866][ T7] usb 4-1: USB disconnect, device number 2 [ 68.671607][ T4348] binder: 4346:4348 ioctl c0306201 200000000380 returned -14 [ 68.725923][ T4349] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 68.737143][ T4349] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.853807][ T4356] lo speed is unknown, defaulting to 1000 [ 68.863962][ T4356] lo speed is unknown, defaulting to 1000 [ 68.879338][ T4356] lo speed is unknown, defaulting to 1000 [ 69.087792][ T4173] lo speed is unknown, defaulting to 1000 [ 69.086939][ T4356] infiniband syz0: set active [ 69.098815][ T4356] infiniband syz0: added lo [ 69.150431][ T4356] RDS/IB: syz0: added [ 69.157854][ T4356] smc: adding ib device syz0 with port count 1 [ 69.165094][ T4356] smc: ib device syz0 port 1 has pnetid [ 69.172379][ T7] lo speed is unknown, defaulting to 1000 [ 69.195662][ T4356] lo speed is unknown, defaulting to 1000 [ 69.332842][ T4356] lo speed is unknown, defaulting to 1000 [ 69.355865][ T4291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.405390][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 69.412467][ T4200] Bluetooth: hci6: sending frame failed (-49) [ 69.514546][ T4356] lo speed is unknown, defaulting to 1000 [ 69.572211][ T4332] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.606734][ T4356] lo speed is unknown, defaulting to 1000 [ 69.642102][ T4291] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 69.701709][ T4356] lo speed is unknown, defaulting to 1000 [ 69.732149][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.744847][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.757256][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.842911][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.855057][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.866502][ T4173] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.874375][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.952990][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.962311][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.973582][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.012228][ T4332] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.024005][ T4332] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.034262][ T4332] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.043563][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.052160][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.062844][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.074409][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.082362][ T4371] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 70.145966][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.154038][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.169549][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.196134][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.242157][ T4173] usb 1-1: config 0 has no interfaces? [ 70.247716][ T4173] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 70.259043][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.274246][ T4173] usb 1-1: config 0 descriptor?? [ 70.292116][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.301067][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.331916][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.412478][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.421525][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.432767][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.512143][ T4291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.521129][ T4291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.532498][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 70.540966][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.550829][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.583498][ T4373] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.620774][ T4373] kvm: pic: level sensitive irq not supported [ 70.621040][ T4373] kvm: pic: non byte read [ 70.632635][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 70.642339][ T4373] kvm: pic: level sensitive irq not supported [ 70.642437][ T4373] kvm: pic: non byte read [ 70.653966][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 70.662277][ T23] usb 2-1: Manufacturer: syz [ 70.673371][ T4373] kvm: pic: level sensitive irq not supported [ 70.673458][ T4373] kvm: pic: non byte read [ 70.686052][ T23] usb 2-1: config 0 descriptor?? [ 70.691382][ T4373] kvm: pic: level sensitive irq not supported [ 70.691484][ T4373] kvm: pic: non byte read [ 70.712313][ T4291] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.721743][ T4291] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.743370][ T4291] usb 3-1: Product: syz [ 70.747666][ T4291] usb 3-1: Manufacturer: syz [ 70.756612][ T4291] usb 3-1: SerialNumber: syz [ 70.766085][ T4251] usb 1-1: USB disconnect, device number 2 [ 70.808243][ T4291] usb 3-1: config 0 descriptor?? [ 70.832330][ T23] rc_core: IR keymap rc-hauppauge not found [ 70.838929][ T23] Registered IR keymap rc-empty [ 70.847582][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 70.866544][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 70.883152][ T4291] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 70.959397][ T7] usb 2-1: USB disconnect, device number 2 [ 71.079791][ T23] usb 3-1: USB disconnect, device number 2 [ 71.098563][ T23] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 71.145423][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.152163][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.363757][ T4386] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.371959][ T4386] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.452188][ T23] Bluetooth: hci6: command 0x1001 tx timeout [ 71.458323][ T4200] Bluetooth: hci6: sending frame failed (-49) [ 71.914555][ T7] usb 4-1: USB disconnect, device number 3 [ 72.061445][ T4403] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 72.311837][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e8c00: rx timeout, send abort [ 72.821092][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e8c00: abort rx timeout. Force session deactivation [ 72.941928][ T4291] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.078352][ T4418] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.086568][ T4418] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.098079][ T4415] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.115609][ T4415] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.209492][ T4422] 9pnet_virtio: no channels available for device syz [ 73.312093][ T4291] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.320534][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.412169][ T4291] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.421269][ T4291] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.429682][ T4291] usb 1-1: Manufacturer: syz [ 73.438614][ T4291] usb 1-1: config 0 descriptor?? [ 73.491971][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.532853][ T4243] Bluetooth: hci6: command 0x1009 tx timeout [ 73.542405][ T4291] rc_core: IR keymap rc-hauppauge not found [ 73.548361][ T4291] Registered IR keymap rc-empty [ 73.556639][ T4291] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 73.569441][ T4291] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 73.711171][ T4332] usb 1-1: USB disconnect, device number 3 [ 73.882131][ T23] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.890687][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.932103][ T7] Bluetooth: hci5: command 0xfc11 tx timeout [ 73.938266][ T4200] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 73.982278][ T23] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 74.002714][ T23] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 74.010765][ T23] usb 4-1: Manufacturer: syz [ 74.045005][ T23] usb 4-1: config 0 descriptor?? [ 74.173631][ T23] rc_core: IR keymap rc-hauppauge not found [ 74.179754][ T23] Registered IR keymap rc-empty [ 74.208401][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 74.234616][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 74.388739][ T23] usb 4-1: USB disconnect, device number 4 [ 74.943992][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdb2000: rx timeout, send abort [ 74.991860][ T4453] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.348110][ T4460] ======================================================= [ 75.348110][ T4460] WARNING: The mand mount option has been deprecated and [ 75.348110][ T4460] and is ignored by this kernel. Remove the mand [ 75.348110][ T4460] option from the mount to silence this warning. [ 75.348110][ T4460] ======================================================= [ 75.383028][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.452302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdb2000: abort rx timeout. Force session deactivation [ 76.021940][ T4332] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.382092][ T4332] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 76.396082][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.471817][ T4497] 9pnet_virtio: no channels available for device syz [ 76.492258][ T4332] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 76.504852][ T4332] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 76.524926][ T4332] usb 3-1: Manufacturer: syz [ 76.542932][ T4332] usb 3-1: config 0 descriptor?? [ 76.671907][ T4332] rc_core: IR keymap rc-hauppauge not found [ 76.677876][ T4332] Registered IR keymap rc-empty [ 76.698766][ T4332] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 76.724845][ T4332] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 76.854136][ T4251] usb 3-1: USB disconnect, device number 3 [ 77.175615][ T4516] 9pnet_virtio: no channels available for device syz [ 77.371925][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 77.444075][ T4525] 9pnet_virtio: no channels available for device syz [ 77.553706][ T4523] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.606263][ T4523] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.683810][ T4530] pit: kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 77.708490][ T4530] pit: kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 77.748636][ T4530] pit: kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 77.775007][ T4530] pit: kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 77.793475][ T4544] tmpfs: Unknown parameter 'usrquota' [ 77.816729][ T4530] pit: kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 77.880294][ T4530] pit: kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 77.959773][ T4530] pit: kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 77.989233][ T4530] pit: kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 78.025707][ T4530] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 78.087289][ T4530] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 78.501965][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.747045][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.779838][ T4594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.871991][ T13] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.883112][ T13] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.892996][ T13] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.902128][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.932417][ T4563] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.071982][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.162089][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.176420][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.188283][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.205477][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.214584][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.224804][ T23] usb 4-1: config 0 descriptor?? [ 79.311932][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 79.434997][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26037, setting to 1024 [ 79.453957][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 79.463103][ T4603] block nbd2: NBD_DISCONNECT [ 79.474470][ T4603] block nbd2: Disconnected due to user request. [ 79.485351][ T4603] block nbd2: shutting down sockets [ 79.602069][ T4251] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 79.611191][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.619729][ T4251] usb 5-1: Product: syz [ 79.626662][ T4251] usb 5-1: Manufacturer: syz [ 79.631305][ T4251] usb 5-1: SerialNumber: syz [ 79.638787][ T4251] usb 5-1: config 0 descriptor?? [ 79.683514][ T4251] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.689517][ T4251] hub: probe of 5-1:0.0 failed with error -5 [ 79.698714][ T4251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 79.712251][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.720345][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.727798][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.735762][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.743394][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.750842][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.758377][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.765908][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.773392][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.780812][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.790204][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.797711][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.805170][ T4243] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.812764][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.820155][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.827687][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 79.836273][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 79.852213][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.004751][ T4186] usb 4-1: USB disconnect, device number 5 [ 80.094528][ T23] usb 5-1: USB disconnect, device number 2 [ 80.402038][ T4243] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 80.411345][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.419814][ T4243] usb 3-1: Product: syz [ 80.424889][ T4243] usb 3-1: Manufacturer: syz [ 80.429504][ T4243] usb 3-1: SerialNumber: syz [ 80.436477][ T4243] usb 3-1: config 0 descriptor?? [ 80.473474][ T4243] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 80.486906][ T4243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.503424][ T4291] usb 1-1: USB disconnect, device number 4 [ 80.512382][ T4243] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 80.541574][ T4243] usb 3-1: media controller created [ 80.584401][ T4243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.621264][ T4608] netlink: 'syz.3.113': attribute type 3 has an invalid length. [ 80.679692][ T4243] DVB: Unable to find symbol mt352_attach() [ 80.729734][ T4243] DVB: Unable to find symbol nxt6000_attach() [ 80.740505][ T4243] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 80.803432][ T4243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 80.828763][ T4243] dvb-usb: schedule remote query interval to 1000 msecs. [ 80.839898][ T4243] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 80.851385][ T4243] dvb-usb: bulk message failed: -22 (7/0) [ 80.863401][ T4243] dvb-usb: bulk message failed: -22 (7/0) [ 80.876951][ T4621] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.889223][ T4621] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.375058][ T1111] cfg80211: failed to load regulatory.db [ 81.853403][ T4291] dvb-usb: bulk message failed: -22 (7/0) [ 81.861016][ T4291] dvb-usb: error while querying for an remote control event. [ 82.088777][ T4638] binder: BINDER_SET_CONTEXT_MGR already set [ 82.119330][ T4638] binder: 4637:4638 ioctl 4018620d 200000004a80 returned -16 [ 82.173401][ T4638] binder: 4637:4638 ioctl c018620c 200000000140 returned -1 [ 82.261685][ T4641] overlayfs: failed to set xattr on upper [ 82.274770][ T4641] overlayfs: ...falling back to index=off,metacopy=off. [ 82.321972][ T4332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.559430][ T4251] usb 3-1: USB disconnect, device number 4 [ 82.621999][ T4332] usb 1-1: Using ep0 maxpacket: 8 [ 82.672247][ T4251] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 82.772028][ T4332] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 82.800554][ T4332] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.834971][ T4332] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.853787][ T4332] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.889446][ T4332] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.895325][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.904352][ T4332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.921807][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.995431][ T4660] binder: 4659:4660 ioctl c0306201 2000000003c0 returned -14 [ 83.202720][ T4332] usb 1-1: usb_control_msg returned -32 [ 83.208349][ T4332] usbtmc 1-1:16.0: can't read capabilities [ 83.246211][ T4251] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.311773][ T4628] ODEBUG: Out of memory. ODEBUG disabled [ 83.352001][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.369776][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.391931][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.402994][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.511916][ T4251] usb 3-1: Using ep0 maxpacket: 8 [ 83.603766][ T4665] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 83.613944][ T4332] usb 1-1: USB disconnect, device number 5 [ 83.621915][ T23] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 83.631070][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.642390][ T4251] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 83.657211][ T4251] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 83.667065][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 83.672385][ T23] usb 5-1: Product: syz [ 83.678231][ T23] usb 5-1: Manufacturer: syz [ 83.682939][ T23] usb 5-1: SerialNumber: syz [ 83.689313][ T23] usb 5-1: config 0 descriptor?? [ 83.694486][ T4251] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 83.710049][ T4251] usb 3-1: config 250 has no interface number 0 [ 83.716774][ T4251] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 83.729096][ T4251] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 83.740175][ T4251] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.751238][ T4251] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.762745][ T4251] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 83.776987][ T4251] usb 3-1: config 250 interface 228 has no altsetting 0 [ 83.832065][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.912591][ T4251] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 83.925069][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 83.936260][ T4251] usb 3-1: Product: syz [ 83.940552][ T4251] usb 3-1: SerialNumber: syz [ 83.993214][ T23] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 84.001570][ T4251] hub 3-1:250.228: bad descriptor, ignoring hub [ 84.012069][ T1111] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.017850][ T4251] hub: probe of 3-1:250.228 failed with error -5 [ 84.021143][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.021165][ T1111] usb 2-1: Product: syz [ 84.021179][ T1111] usb 2-1: Manufacturer: syz [ 84.021193][ T1111] usb 2-1: SerialNumber: syz [ 84.049407][ T1111] usb 2-1: config 0 descriptor?? [ 84.104115][ T1111] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.121317][ T1111] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 84.131456][ T4628] Set syz1 is full, maxelem 65536 reached [ 84.213797][ T4251] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 84.230597][ T4667] binder: BINDER_SET_CONTEXT_MGR already set [ 84.254436][ T4667] binder: 4666:4667 ioctl 4018620d 200000000040 returned -16 [ 84.332260][ T23] usb 5-1: USB disconnect, device number 3 [ 84.341200][ T4670] syz.0.134 uses obsolete (PF_INET,SOCK_PACKET) [ 84.548491][ T4243] usb 3-1: USB disconnect, device number 5 [ 84.568135][ T4243] usblp1: removed [ 84.761997][ T1111] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 84.892132][ T4243] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.952046][ T4251] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.132070][ T4243] usb 3-1: Using ep0 maxpacket: 8 [ 85.272149][ T4243] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 85.280535][ T1111] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 85.289249][ T4243] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 85.298424][ T1111] em28xx 2-1:0.0: board has no eeprom [ 85.331735][ T4243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 85.342190][ T4251] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 85.360450][ T4243] usb 3-1: config 250 has no interface number 0 [ 85.367110][ T4243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 85.391168][ T4243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.462189][ T4243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.514589][ T4251] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 85.526423][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.526428][ T4243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.526457][ T4243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 85.579024][ T4251] usb 4-1: Product: syz [ 85.591460][ T4251] usb 4-1: Manufacturer: syz [ 85.630782][ T4251] usb 4-1: SerialNumber: syz [ 85.661707][ T4251] usb 4-1: config 0 descriptor?? [ 85.713481][ T4251] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 85.731710][ T4243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 85.782023][ T4251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.830644][ T4700] [ 85.832877][ T4251] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 85.840842][ T4700] ============================= [ 85.848166][ T4700] WARNING: suspicious RCU usage [ 85.866786][ T4700] syzkaller #0 Not tainted [ 85.885086][ T4700] ----------------------------- [ 85.912003][ T4243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 85.920609][ T4251] usb 4-1: media controller created [ 85.939915][ T4700] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 85.949253][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 85.966520][ T4243] usb 3-1: Product: syz [ 85.970945][ T4700] [ 85.970945][ T4700] other info that might help us debug this: [ 85.970945][ T4700] [ 86.010256][ T4251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.012995][ T4243] usb 3-1: can't set config #250, error -71 [ 86.065921][ T4243] usb 3-1: USB disconnect, device number 6 [ 86.072074][ T4700] [ 86.072074][ T4700] rcu_scheduler_active = 2, debug_locks = 1 [ 86.095171][ T4700] 1 lock held by syz.0.144/4700: [ 86.100355][ T4700] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 86.172206][ T4700] [ 86.172206][ T4700] stack backtrace: [ 86.178578][ T4700] CPU: 0 PID: 4700 Comm: syz.0.144 Not tainted syzkaller #0 [ 86.185895][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.195987][ T4700] Call Trace: [ 86.199281][ T4700] [ 86.202214][ T4700] dump_stack_lvl+0x188/0x250 [ 86.206895][ T4700] ? load_image+0x400/0x400 [ 86.211414][ T4700] ? show_regs_print_info+0x20/0x20 [ 86.212082][ T1111] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.216635][ T4700] ? lockdep_rcu_suspicious+0x110/0x180 [ 86.229966][ T4700] ? local_bh_enable+0x20/0x20 [ 86.234741][ T4700] rhltable_lookup+0x7a9/0x7c0 [ 86.239533][ T4700] ? local_bh_enable+0x20/0x20 [ 86.244311][ T4700] ? mr_mfc_find_parent+0x190/0x190 [ 86.249508][ T4700] ? mark_lock+0x94/0x320 [ 86.253835][ T4700] ? local_bh_enable+0x20/0x20 [ 86.258606][ T4700] ? mark_lock+0x94/0x320 [ 86.262937][ T4700] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 86.268922][ T4700] ? lock_chain_count+0x20/0x20 [ 86.273773][ T4700] mr_mfc_find_any_parent+0xb6/0x1e0 [ 86.279064][ T4700] ? local_bh_enable+0x20/0x20 [ 86.283836][ T4700] ip_mr_forward+0x24c/0xf90 [ 86.288435][ T4700] ipmr_mfc_add+0x23cc/0x2d40 [ 86.293163][ T4700] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 86.298101][ T4700] ? __lock_acquire+0x7d10/0x7d10 [ 86.303139][ T4700] ip_mroute_setsockopt+0xeaf/0x1250 [ 86.308446][ T4700] ? ipmr_rule_default+0x70/0x70 [ 86.313396][ T4700] ? __might_sleep+0xf0/0xf0 [ 86.318007][ T4700] ip_setsockopt+0x568/0x3130 [ 86.322714][ T4700] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 86.328088][ T4700] ? aa_sk_perm+0x7dc/0x910 [ 86.332597][ T4700] ? aa_af_perm+0x340/0x340 [ 86.337112][ T4700] ? __fget_files+0x40f/0x480 [ 86.341814][ T4700] ? aa_sock_opt_perm+0x74/0x100 [ 86.346785][ T4700] ? sock_common_setsockopt+0x32/0xb0 [ 86.352171][ T4700] ? raw_setsockopt+0xc5/0x180 [ 86.356964][ T4700] ? sock_common_recvmsg+0x1c0/0x1c0 [ 86.362333][ T4700] __sys_setsockopt+0x2bf/0x3d0 [ 86.367183][ T4700] __x64_sys_setsockopt+0xb1/0xc0 [ 86.372210][ T4700] do_syscall_64+0x4c/0xa0 [ 86.376641][ T4700] ? clear_bhb_loop+0x30/0x80 [ 86.381320][ T4700] ? clear_bhb_loop+0x30/0x80 [ 86.386002][ T4700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.391914][ T4700] RIP: 0033:0x7ff54ea9cf79 [ 86.396350][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.415953][ T4700] RSP: 002b:00007ff54ccf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.424369][ T4700] RAX: ffffffffffffffda RBX: 00007ff54ed16fa0 RCX: 00007ff54ea9cf79 [ 86.432339][ T4700] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 86.440309][ T4700] RBP: 00007ff54eb337e0 R08: 000000000000003c R09: 0000000000000000 [ 86.448272][ T4700] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 86.456255][ T4700] R13: 00007ff54ed17038 R14: 00007ff54ed16fa0 R15: 00007fff3bced0f8 [ 86.464229][ T4700] [ 86.472054][ T4689] em28xx 2-1:0.0: writing to i2c device at 0xa failed (error=-5) [ 86.498577][ T1111] em28xx 2-1:0.0: dvb set to bulk mode. [ 86.523503][ T4251] DVB: Unable to find symbol mt352_attach() [ 86.549898][ T1111] usb 2-1: USB disconnect, device number 3 [ 86.556091][ T4700] [ 86.558506][ T4700] ============================= [ 86.565902][ T4700] WARNING: suspicious RCU usage [ 86.573596][ T1111] em28xx 2-1:0.0: Disconnecting em28xx [ 86.581483][ T4700] syzkaller #0 Not tainted [ 86.586144][ T4700] ----------------------------- [ 86.595160][ T4243] em28xx 2-1:0.0: Binding DVB extension [ 86.605637][ T4700] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 86.623537][ T4700] [ 86.623537][ T4700] other info that might help us debug this: [ 86.623537][ T4700] [ 86.656634][ T4243] em28xx 2-1:0.0: Registering input extension [ 86.669585][ T1111] em28xx 2-1:0.0: Closing input extension [ 86.678280][ T4700] [ 86.678280][ T4700] rcu_scheduler_active = 2, debug_locks = 1 [ 86.694967][ T4251] DVB: Unable to find symbol nxt6000_attach() [ 86.702475][ T4251] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 86.721401][ T4700] 1 lock held by syz.0.144/4700: [ 86.739848][ T1111] em28xx 2-1:0.0: Freeing device [ 86.770868][ T4700] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 86.788407][ T4251] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 86.800774][ T4700] [ 86.800774][ T4700] stack backtrace: [ 86.811529][ T4700] CPU: 1 PID: 4700 Comm: syz.0.144 Not tainted syzkaller #0 [ 86.818850][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.828923][ T4700] Call Trace: [ 86.832201][ T4700] [ 86.835127][ T4700] dump_stack_lvl+0x188/0x250 [ 86.839802][ T4700] ? load_image+0x400/0x400 [ 86.844299][ T4700] ? show_regs_print_info+0x20/0x20 [ 86.849504][ T4700] ? lockdep_rcu_suspicious+0x110/0x180 [ 86.855050][ T4700] ? local_bh_enable+0x20/0x20 [ 86.859925][ T4700] rhltable_lookup+0x52a/0x7c0 [ 86.864827][ T4700] ? local_bh_enable+0x20/0x20 [ 86.869602][ T4700] ? mr_mfc_find_parent+0x190/0x190 [ 86.874811][ T4700] ? mark_lock+0x94/0x320 [ 86.879139][ T4700] ? local_bh_enable+0x20/0x20 [ 86.883895][ T4700] ? mark_lock+0x94/0x320 [ 86.888223][ T4700] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 86.894224][ T4700] ? lock_chain_count+0x20/0x20 [ 86.899079][ T4700] mr_mfc_find_any_parent+0xb6/0x1e0 [ 86.904366][ T4700] ? local_bh_enable+0x20/0x20 [ 86.909127][ T4700] ip_mr_forward+0x24c/0xf90 [ 86.913728][ T4700] ipmr_mfc_add+0x23cc/0x2d40 [ 86.918443][ T4700] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 86.923387][ T4700] ? __lock_acquire+0x7d10/0x7d10 [ 86.928422][ T4700] ip_mroute_setsockopt+0xeaf/0x1250 [ 86.933706][ T4700] ? ipmr_rule_default+0x70/0x70 [ 86.938664][ T4700] ? __might_sleep+0xf0/0xf0 [ 86.943266][ T4700] ip_setsockopt+0x568/0x3130 [ 86.947950][ T4700] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 86.953321][ T4700] ? aa_sk_perm+0x7dc/0x910 [ 86.957827][ T4700] ? aa_af_perm+0x340/0x340 [ 86.962329][ T4700] ? __fget_files+0x40f/0x480 [ 86.967009][ T4700] ? aa_sock_opt_perm+0x74/0x100 [ 86.971947][ T4700] ? sock_common_setsockopt+0x32/0xb0 [ 86.977397][ T4700] ? raw_setsockopt+0xc5/0x180 [ 86.982166][ T4700] ? sock_common_recvmsg+0x1c0/0x1c0 [ 86.987473][ T4700] __sys_setsockopt+0x2bf/0x3d0 [ 86.992326][ T4700] __x64_sys_setsockopt+0xb1/0xc0 [ 86.997343][ T4700] do_syscall_64+0x4c/0xa0 [ 87.001748][ T4700] ? clear_bhb_loop+0x30/0x80 [ 87.006414][ T4700] ? clear_bhb_loop+0x30/0x80 [ 87.011084][ T4700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.016970][ T4700] RIP: 0033:0x7ff54ea9cf79 [ 87.021384][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.040988][ T4700] RSP: 002b:00007ff54ccf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.049394][ T4700] RAX: ffffffffffffffda RBX: 00007ff54ed16fa0 RCX: 00007ff54ea9cf79 [ 87.057374][ T4700] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 87.065339][ T4700] RBP: 00007ff54eb337e0 R08: 000000000000003c R09: 0000000000000000 [ 87.073311][ T4700] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 87.081278][ T4700] R13: 00007ff54ed17038 R14: 00007ff54ed16fa0 R15: 00007fff3bced0f8 [ 87.089253][ T4700] [ 87.118600][ T4251] dvb-usb: schedule remote query interval to 1000 msecs. [ 87.153529][ T4251] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 87.153724][ T4700] [ 87.168576][ T4700] ============================= [ 87.173703][ T4700] WARNING: suspicious RCU usage [ 87.179181][ T4700] syzkaller #0 Not tainted [ 87.191565][ T4700] ----------------------------- [ 87.191561][ T4251] dvb-usb: bulk message failed: -22 (7/0) [ 87.220495][ T4700] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 87.237353][ T4251] dvb-usb: bulk message failed: -22 (7/0) [ 87.252854][ T4700] [ 87.252854][ T4700] other info that might help us debug this: [ 87.252854][ T4700] [ 87.273174][ T4251] usb 4-1: USB disconnect, device number 6 [ 87.305178][ T4700] [ 87.305178][ T4700] rcu_scheduler_active = 2, debug_locks = 1 [ 87.335459][ T4251] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 87.349399][ T4700] 1 lock held by syz.0.144/4700: [ 87.369016][ T4700] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 87.401975][ T4700] [ 87.401975][ T4700] stack backtrace: [ 87.407978][ T4700] CPU: 1 PID: 4700 Comm: syz.0.144 Not tainted syzkaller #0 [ 87.415272][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.425337][ T4700] Call Trace: [ 87.428630][ T4700] [ 87.431586][ T4700] dump_stack_lvl+0x188/0x250 [ 87.436294][ T4700] ? load_image+0x400/0x400 [ 87.440823][ T4700] ? show_regs_print_info+0x20/0x20 [ 87.446055][ T4700] ? lockdep_rcu_suspicious+0x110/0x180 [ 87.451626][ T4700] ? local_bh_enable+0x20/0x20 [ 87.456412][ T4700] rhltable_lookup+0x61e/0x7c0 [ 87.461210][ T4700] ? local_bh_enable+0x20/0x20 [ 87.466006][ T4700] ? mr_mfc_find_parent+0x190/0x190 [ 87.471236][ T4700] ? mark_lock+0x94/0x320 [ 87.475589][ T4700] ? local_bh_enable+0x20/0x20 [ 87.480384][ T4700] ? mark_lock+0x94/0x320 [ 87.484741][ T4700] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.490829][ T4700] ? lock_chain_count+0x20/0x20 [ 87.495704][ T4700] mr_mfc_find_any_parent+0xb6/0x1e0 [ 87.500996][ T4700] ? local_bh_enable+0x20/0x20 [ 87.505761][ T4700] ip_mr_forward+0x24c/0xf90 [ 87.510355][ T4700] ipmr_mfc_add+0x23cc/0x2d40 [ 87.515070][ T4700] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 87.520032][ T4700] ? __lock_acquire+0x7d10/0x7d10 [ 87.525099][ T4700] ip_mroute_setsockopt+0xeaf/0x1250 [ 87.530411][ T4700] ? ipmr_rule_default+0x70/0x70 [ 87.535363][ T4700] ? __might_sleep+0xf0/0xf0 [ 87.539970][ T4700] ip_setsockopt+0x568/0x3130 [ 87.544661][ T4700] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 87.550037][ T4700] ? aa_sk_perm+0x7dc/0x910 [ 87.554550][ T4700] ? aa_af_perm+0x340/0x340 [ 87.559049][ T4700] ? __fget_files+0x40f/0x480 [ 87.563736][ T4700] ? aa_sock_opt_perm+0x74/0x100 [ 87.563763][ T4700] ? sock_common_setsockopt+0x32/0xb0 [ 87.563785][ T4700] ? raw_setsockopt+0xc5/0x180 [ 87.563803][ T4700] ? sock_common_recvmsg+0x1c0/0x1c0 [ 87.563824][ T4700] __sys_setsockopt+0x2bf/0x3d0 [ 87.589137][ T4700] __x64_sys_setsockopt+0xb1/0xc0 [ 87.594164][ T4700] do_syscall_64+0x4c/0xa0 [ 87.598575][ T4700] ? clear_bhb_loop+0x30/0x80 [ 87.603249][ T4700] ? clear_bhb_loop+0x30/0x80 [ 87.607932][ T4700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.613845][ T4700] RIP: 0033:0x7ff54ea9cf79 [ 87.618285][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.637931][ T4700] RSP: 002b:00007ff54ccf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.646338][ T4700] RAX: ffffffffffffffda RBX: 00007ff54ed16fa0 RCX: 00007ff54ea9cf79 [ 87.654303][ T4700] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 87.662274][ T4700] RBP: 00007ff54eb337e0 R08: 000000000000003c R09: 0000000000000000 [ 87.670255][ T4700] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 87.678235][ T4700] R13: 00007ff54ed17038 R14: 00007ff54ed16fa0 R15: 00007fff3bced0f8 [ 87.686234][ T4700]