last executing test programs: 6.536831114s ago: executing program 1 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x25dfdbfe, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x4005}, 0x20004000) 6.455716903s ago: executing program 1 (id=307): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_GET_DUMPABLE(0x26) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000001a2bc560119d7004f19dfb7f393d7359031033f817f0000000000", 0x36}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x300c}) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa1b090000000000000000070000ffffffac141d1400"/38], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r6 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 5.009409412s ago: executing program 0 (id=311): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @broadcast, 'syz_tun\x00'}}) 4.893583534s ago: executing program 0 (id=313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000680)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 4.716388386s ago: executing program 1 (id=315): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x9) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x6, 0xf098, 0x4, 0x5, 0x8, 0x8, {0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7255e9e7, 0x5, 0x6, 0x80000001, 0x6}}, &(0x7f00000002c0)=0xb0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x200000c5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 4.635912207s ago: executing program 0 (id=316): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 4.45159651s ago: executing program 0 (id=318): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0xad54, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 3.455262253s ago: executing program 2 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x8010) 3.133363197s ago: executing program 2 (id=320): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.002987949s ago: executing program 2 (id=321): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/profiling', 0x2, 0x100) 2.993387379s ago: executing program 1 (id=322): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000016c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000002c00048013000100"], 0x40}}, 0x0) 2.681410223s ago: executing program 1 (id=323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c02000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b54000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e47000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[r5], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.361304567s ago: executing program 3 (id=324): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x7ffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r1}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) 2.245536969s ago: executing program 3 (id=325): r0 = syz_io_uring_setup(0x3be9, &(0x7f00000000c0)={0x0, 0x79ab, 0x1, 0x0, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.104919731s ago: executing program 3 (id=327): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}, {0x0}], 0x5) syz_open_pts(0xffffffffffffffff, 0x10002) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r3 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) syz_usb_disconnect(r0) 1.939103633s ago: executing program 4 (id=328): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x8007fff, 0x0) 1.911160154s ago: executing program 2 (id=329): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40008041) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') statfs(&(0x7f00000009c0)='./file0/file0\x00', 0x0) 1.593345758s ago: executing program 2 (id=330): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f32356e030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff34}}, 0x1006) 1.374537351s ago: executing program 0 (id=331): r0 = epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1.336049811s ago: executing program 2 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac056902000000000001090224"], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.234155263s ago: executing program 0 (id=333): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r1, 0x4, 0x2c00) 1.033310576s ago: executing program 1 (id=334): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x69, 0xdd, 0x34, 0x40, 0xccd, 0x93, 0x235a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6c, 0xe0, 0x8d, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) 1.028125276s ago: executing program 4 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 989.764106ms ago: executing program 4 (id=336): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) syz_emit_ethernet(0xee9, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 391.897634ms ago: executing program 3 (id=337): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x40, 0x0) 391.614465ms ago: executing program 3 (id=338): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4bfa, &(0x7f0000000340)=""/164) 320.286615ms ago: executing program 3 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 253.751016ms ago: executing program 4 (id=340): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x1, &(0x7f0000001c80)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 105.312109ms ago: executing program 4 (id=341): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6a6b2aa6470440cf5fbb80cf0ed8b009f0ee0d2f9bcbd"], 0x5c8}, 0xf7e5) 0s ago: executing program 4 (id=342): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, &(0x7f0000001280)) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="08000600c0"], 0x24}}, 0x0) fallocate(r0, 0x40, 0x0, 0xaf) r5 = open(0x0, 0x1, 0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60dd690b00442f01fc000000000000000000000000000000ff020000000000000000000000000001092088ca0000000000000800000086dd08"], 0x0) fanotify_mark(0xffffffffffffffff, 0xd, 0x8000029, r5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2004, @fd_index=0x5, 0x3, 0x8, 0x3, 0x8, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x988, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r6, 0x52de, 0xf62e, 0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10000}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0xf2, @mcast1, 0x68}]}, &(0x7f0000000140)=0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r8, 0x1, 0x4, 0x3}, &(0x7f0000000280)=0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_open_dev$dmmidi(&(0x7f00000002c0), 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e21, 0xffffff80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x2, 0x4, 0x7, 0x4d, 0x2, 0x3}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 57.176845][ T4156] cgroup: Unknown subsys name 'net' [ 57.315498][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.780955][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.691239][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 60.703415][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 60.755888][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 60.789265][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 60.871166][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 60.895214][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.902447][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.910969][ T4167] device bridge_slave_0 entered promiscuous mode [ 60.953512][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.960757][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.968978][ T4167] device bridge_slave_1 entered promiscuous mode [ 60.986086][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.993440][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.001932][ T4180] device bridge_slave_0 entered promiscuous mode [ 61.009499][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.016549][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.025342][ T4178] device bridge_slave_0 entered promiscuous mode [ 61.051471][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.059108][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.067006][ T4180] device bridge_slave_1 entered promiscuous mode [ 61.074389][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.081566][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.089802][ T4178] device bridge_slave_1 entered promiscuous mode [ 61.133333][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.145243][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.161204][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.168291][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.176714][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.216370][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.223708][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.232973][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.242175][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.253108][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.265324][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.298152][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.318326][ T4167] team0: Port device team_slave_0 added [ 61.325047][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.333146][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.341133][ T4169] device bridge_slave_0 entered promiscuous mode [ 61.373911][ T4167] team0: Port device team_slave_1 added [ 61.380000][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.387100][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.395467][ T4169] device bridge_slave_1 entered promiscuous mode [ 61.405714][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.425405][ T4178] team0: Port device team_slave_0 added [ 61.455206][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.467168][ T4180] team0: Port device team_slave_0 added [ 61.474755][ T4178] team0: Port device team_slave_1 added [ 61.481566][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.489215][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.515586][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.547167][ T4180] team0: Port device team_slave_1 added [ 61.561226][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.568196][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.594639][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.607606][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.646973][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.654148][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.680452][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.693255][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.705013][ T4168] team0: Port device team_slave_0 added [ 61.736482][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.743837][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.770005][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.783268][ T4168] team0: Port device team_slave_1 added [ 61.797220][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.811157][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.837193][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.874846][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.882099][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.909219][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.923158][ T4167] device hsr_slave_0 entered promiscuous mode [ 61.930297][ T4167] device hsr_slave_1 entered promiscuous mode [ 61.948593][ T4169] team0: Port device team_slave_0 added [ 61.967949][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.975223][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.001281][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.014546][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.021652][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.048070][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.060669][ T4169] team0: Port device team_slave_1 added [ 62.125502][ T4178] device hsr_slave_0 entered promiscuous mode [ 62.132548][ T4178] device hsr_slave_1 entered promiscuous mode [ 62.140041][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.147858][ T4178] Cannot create hsr debugfs directory [ 62.169916][ T4180] device hsr_slave_0 entered promiscuous mode [ 62.176788][ T4180] device hsr_slave_1 entered promiscuous mode [ 62.183603][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.191354][ T4180] Cannot create hsr debugfs directory [ 62.219413][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.226389][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.252577][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.279646][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 62.279646][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 62.280278][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 62.309508][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.316487][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.343463][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.357665][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.364210][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 62.368952][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.376538][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.383770][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.391750][ T4168] Cannot create hsr debugfs directory [ 62.462366][ T4169] device hsr_slave_0 entered promiscuous mode [ 62.469569][ T4169] device hsr_slave_1 entered promiscuous mode [ 62.476116][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.483807][ T4169] Cannot create hsr debugfs directory [ 62.729622][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.742140][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.752344][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.763673][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.846494][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.856283][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.867943][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.877496][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.939559][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.958449][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.969290][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.994117][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.014781][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.057540][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.087397][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.096962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.107457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.116065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.124481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.139388][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.148447][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.157085][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.168216][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.198821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.209987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.219215][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.226452][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.236175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.246077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.255363][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.262474][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.271303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.280523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.289259][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.296319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.304697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.313160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.321518][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.357173][ T4180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.376176][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.386709][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.396075][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.405649][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.412789][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.422001][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.431552][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.440426][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.457124][ T4180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.466226][ T4180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.485099][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.494624][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.504448][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.513435][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.523380][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.532195][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.541334][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.549596][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.563537][ T4180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.582652][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.593311][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.611782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.621135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.631228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.640706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.650266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.658734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.667056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.675914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.684302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.705009][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.718201][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.728409][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.740781][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.830021][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.880166][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.900091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.910580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.946614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.974878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.984136][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.991292][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.999692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.008364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.017177][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.024297][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.032160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.071509][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.081184][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.107698][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.118339][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.130423][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.137898][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.147869][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.156506][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.176350][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.194210][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.205829][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.213824][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.221749][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.231692][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.241466][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.250326][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.258834][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.266598][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.276985][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.293730][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.305371][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.314133][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.322293][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.332902][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.343124][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.364558][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.371962][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 64.372028][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 64.385101][ T1109] Bluetooth: hci2: command 0x041b tx timeout [ 64.403708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.422198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.432688][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.439828][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.455108][ T4221] Bluetooth: hci3: command 0x041b tx timeout [ 64.460806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.461508][ T4221] Bluetooth: hci4: command 0x041b tx timeout [ 64.471322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.484170][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.491292][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.500355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.509368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.518247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.527458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.538380][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.545501][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.553867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.562698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.571448][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.578494][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.587181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.595542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.605772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.651750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.672787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.684932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.694838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.703961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.713062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.722316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.731785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.740600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.748395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.756612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.766355][ T4167] device veth0_vlan entered promiscuous mode [ 64.804541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.814041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.823514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.832668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.842699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.851516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.861242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.871117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.879006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.886454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.895277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.906723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.919927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.935645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.946956][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.964078][ T4167] device veth1_vlan entered promiscuous mode [ 64.974271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.984654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.999876][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.022084][ T4178] device veth0_vlan entered promiscuous mode [ 65.033665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.042140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.050789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.059983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.068504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.084282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.094947][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.129182][ T4178] device veth1_vlan entered promiscuous mode [ 65.148341][ T4167] device veth0_macvtap entered promiscuous mode [ 65.172801][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.188287][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.197641][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.208245][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.223848][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.234887][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.248504][ T4167] device veth1_macvtap entered promiscuous mode [ 65.285746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.301827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.316227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.326069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.340724][ T4169] device veth0_vlan entered promiscuous mode [ 65.356982][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.367648][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.375570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.384342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.392909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.402068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.411167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.419267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.433696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.442511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.457759][ T4169] device veth1_vlan entered promiscuous mode [ 65.467267][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.483250][ T4178] device veth0_macvtap entered promiscuous mode [ 65.495022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.503926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.513615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.522753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.534871][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.544519][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.553886][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.563030][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.609396][ T4178] device veth1_macvtap entered promiscuous mode [ 65.616466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.624950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.634087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.644118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.659410][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.722270][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.745798][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.757937][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.769726][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.781017][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.792047][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.803665][ T4169] device veth0_macvtap entered promiscuous mode [ 65.816465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.825075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.834576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.844051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.853043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.862479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.871719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.882427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.891721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.932887][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944119][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.953413][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.972501][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.985685][ T4169] device veth1_macvtap entered promiscuous mode [ 66.026720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.041156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.067101][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.080274][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.090918][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.101666][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.113326][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.124631][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.138019][ T4168] device veth0_vlan entered promiscuous mode [ 66.140424][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.158450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.166489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.174619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.183350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.192803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.207568][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.220154][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.230576][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.241173][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.253327][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.268569][ T4168] device veth1_vlan entered promiscuous mode [ 66.285940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.300335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.309650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.335387][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.344684][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.354757][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.363942][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.419399][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.424904][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.429581][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.447945][ T4221] Bluetooth: hci2: command 0x040f tx timeout [ 66.454769][ T4221] Bluetooth: hci0: command 0x040f tx timeout [ 66.457679][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.463737][ T4221] Bluetooth: hci1: command 0x040f tx timeout [ 66.476008][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.485959][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.495352][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.504248][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.513891][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.540049][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 66.546578][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 66.580163][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.603567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.616368][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.628287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.664287][ T4180] device veth0_vlan entered promiscuous mode [ 66.672859][ T4168] device veth0_macvtap entered promiscuous mode [ 66.691688][ T4168] device veth1_macvtap entered promiscuous mode [ 66.699104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.707037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.715498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.723620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.732883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.743352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.751622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.777096][ T4180] device veth1_vlan entered promiscuous mode [ 66.794671][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.841758][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.856785][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.872950][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.882052][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.906951][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.917301][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.946920][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.962880][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.979309][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.994410][ T4248] loop1: detected capacity change from 0 to 64 [ 67.016704][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.026778][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.031112][ T4249] input: syz1 as /devices/virtual/input/input5 [ 67.050576][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.063223][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.077204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.089149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.099735][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.177322][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.278349][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383017][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.401210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.503916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 67.540163][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.561905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 67.583781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 67.606034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.681204][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.775589][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.833960][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.845274][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.855738][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.865877][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.874925][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.911871][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.916462][ T4252] binder: BINDER_SET_CONTEXT_MGR already set [ 67.926854][ T4252] binder: 4251:4252 ioctl 4018620d 200000000040 returned -16 [ 67.928266][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.935741][ T4252] binder: 4251:4252 ioctl c0306201 2000000003c0 returned -14 [ 67.950655][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.952408][ T4252] binder: 4251:4252 ioctl c0306201 200000000540 returned -11 [ 67.968199][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.018155][ T4180] device veth0_macvtap entered promiscuous mode [ 68.052234][ T4180] device veth1_macvtap entered promiscuous mode [ 68.077323][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.180742][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.222779][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.233608][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.244795][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.255239][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.266503][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.282826][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.313058][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.350972][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.393247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.410703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.434619][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.462549][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.498054][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.511995][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522785][ T4221] Bluetooth: hci1: command 0x0419 tx timeout [ 68.529678][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.540870][ T4221] Bluetooth: hci0: command 0x0419 tx timeout [ 68.546946][ T4221] Bluetooth: hci2: command 0x0419 tx timeout [ 68.554341][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.581481][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.599207][ T4221] Bluetooth: hci3: command 0x0419 tx timeout [ 68.605910][ T4221] Bluetooth: hci4: command 0x0419 tx timeout [ 68.618611][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.640309][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.655500][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.684560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.703957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.745318][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.748720][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.773885][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.789812][ T4276] syz.3.12 sent an empty control message without MSG_MORE. [ 68.807365][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.825507][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.835057][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.862501][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.897030][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.939001][ T4273] futex_wake_op: syz.2.15 tries to shift op by 144; fix this program [ 69.022965][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.068767][ T4208] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.076720][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.153471][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.191157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.210242][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.282578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.322875][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.328825][ T4208] usb 2-1: Using ep0 maxpacket: 16 [ 69.358227][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.421454][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.568833][ T4208] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 69.606406][ T4208] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 70.109514][ T4208] usb 2-1: string descriptor 0 read error: -22 [ 70.120947][ T4208] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 70.175637][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.595073][ T4270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.883076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.098967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.191077][ T4312] capability: warning: `syz.3.19' uses 32-bit capabilities (legacy support in use) [ 71.252612][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259342][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.408596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.417802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 71.816537][ T4323] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.656647][ T4342] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.32'. [ 73.286288][ T4208] usb 2-1: USB disconnect, device number 2 [ 73.851037][ T4351] kvm: pic: single mode not supported [ 73.853875][ T4351] kvm: pic: single mode not supported [ 73.859757][ T4351] kvm: pic: level sensitive irq not supported [ 73.880866][ T4351] kvm: pic: level sensitive irq not supported [ 73.891209][ T4351] kvm: pic: single mode not supported [ 73.900287][ T4351] kvm: pic: single mode not supported [ 73.910305][ T4351] kvm: pic: level sensitive irq not supported [ 73.916324][ T4351] kvm: pic: single mode not supported [ 73.924899][ T4351] kvm: pic: level sensitive irq not supported [ 73.931340][ T4351] kvm: pic: single mode not supported [ 73.939231][ T4351] kvm: pic: single mode not supported [ 73.945218][ T4351] kvm: pic: level sensitive irq not supported [ 73.958140][ T4351] kvm: pic: single mode not supported [ 73.979922][ T4351] kvm: pic: level sensitive irq not supported [ 73.994116][ T4351] kvm: pic: single mode not supported [ 74.009808][ T4351] kvm: pic: level sensitive irq not supported [ 74.023229][ T4351] kvm: pic: single mode not supported [ 74.036026][ T4351] kvm: pic: level sensitive irq not supported [ 74.052523][ T4351] kvm: pic: level sensitive irq not supported [ 74.065901][ T4351] kvm: pic: level sensitive irq not supported [ 74.158770][ T4210] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 74.609122][ T4210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.744949][ T4364] input: syz1 as /devices/virtual/input/input6 [ 74.758888][ T4210] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 74.770033][ T4210] usb 2-1: can't read configurations, error -71 [ 75.257416][ T4373] netlink: 108 bytes leftover after parsing attributes in process `syz.1.41'. [ 75.415141][ T4371] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.434941][ T4371] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.659578][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.695915][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.725038][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.757992][ T4396] device bridge_slave_0 left promiscuous mode [ 76.776945][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.877063][ T4396] device bridge_slave_1 left promiscuous mode [ 76.897552][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.939316][ T4396] bond0: (slave bond_slave_0): Releasing backup interface [ 77.016808][ T4396] bond0: (slave bond_slave_1): Releasing backup interface [ 77.150674][ T4396] team0: Port device team_slave_0 removed [ 77.201534][ T4396] team0: Port device team_slave_1 removed [ 77.236796][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.268282][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.300835][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.321078][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.770457][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 77.965319][ T4414] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.975222][ T4413] binder: BINDER_SET_CONTEXT_MGR already set [ 78.025450][ T4413] binder: 4412:4413 ioctl 4018620d 200000000040 returned -16 [ 78.059603][ T4416] binder: 4412:4416 ioctl c0306201 200000000c00 returned -14 [ 78.538724][ T4210] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.068894][ T4210] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 79.113155][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.160975][ T4210] usb 1-1: Product: syz [ 79.199320][ T4210] usb 1-1: Manufacturer: syz [ 79.206166][ T4210] usb 1-1: SerialNumber: syz [ 79.225994][ T4210] usb 1-1: config 0 descriptor?? [ 79.302842][ T4210] ch341 1-1:0.0: ch341-uart converter detected [ 80.150003][ T4421] fuse: Unknown parameter '0xffffffffffffffff' [ 80.678918][ T4210] usb 1-1: failed to send control message: -71 [ 80.685572][ T4210] ch341-uart: probe of ttyUSB0 failed with error -71 [ 80.760419][ T4210] usb 1-1: USB disconnect, device number 2 [ 80.792466][ T4210] ch341 1-1:0.0: device disconnected [ 81.481843][ T7] cfg80211: failed to load regulatory.db [ 81.818655][ T4208] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.088722][ T4208] usb 5-1: Using ep0 maxpacket: 8 [ 82.208845][ T4208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.233621][ T4208] usb 5-1: config 0 has no interfaces? [ 82.267757][ T4494] device bond0 entered promiscuous mode [ 82.315328][ T4494] device batadv0 entered promiscuous mode [ 82.365432][ T4494] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 82.413671][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 82.431056][ T4208] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 82.475202][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.539274][ T4499] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.547455][ T4208] usb 5-1: Product: syz [ 82.562459][ T4208] usb 5-1: Manufacturer: syz [ 82.571594][ T4208] usb 5-1: SerialNumber: syz [ 82.600902][ T4208] usb 5-1: config 0 descriptor?? [ 82.788781][ T4209] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.093731][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.113420][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 83.152543][ T4209] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 83.163066][ T26] audit: type=1326 audit(1746157655.847:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.182517][ T4209] usb 3-1: config 0 has no interface number 0 [ 83.187940][ T4510] syz.0.88[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.202466][ T4209] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 83.202569][ T4510] syz.0.88[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.234212][ T26] audit: type=1326 audit(1746157655.867:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.244441][ T4209] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 83.252337][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 83.301385][ T26] audit: type=1326 audit(1746157655.987:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.329807][ T4209] usb 3-1: config 0 interface 255 has no altsetting 0 [ 83.335554][ T26] audit: type=1326 audit(1746157656.017:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.358632][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 83.371576][ T26] audit: type=1326 audit(1746157656.017:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.398817][ T26] audit: type=1326 audit(1746157656.017:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.421770][ T26] audit: type=1326 audit(1746157656.017:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.444248][ T26] audit: type=1326 audit(1746157656.017:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.467886][ T26] audit: type=1326 audit(1746157656.017:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.469057][ T4209] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 83.493549][ T26] audit: type=1326 audit(1746157656.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 83.499791][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.543677][ T23] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 83.554028][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.569797][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.592285][ T4209] usb 3-1: config 0 descriptor?? [ 83.617798][ T23] usb 4-1: config 0 descriptor?? [ 83.629848][ T4209] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 83.692054][ T4511] device batadv0 left promiscuous mode [ 83.843023][ T4209] usb 3-1: USB disconnect, device number 2 [ 83.983449][ T4520] device batadv0 entered promiscuous mode [ 84.020316][ T4520] device vlan2 entered promiscuous mode [ 84.028010][ T4520] device batadv0 left promiscuous mode [ 84.049212][ T4524] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.059194][ T4524] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.198725][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 84.204798][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.248313][ T23] usb 4-1: USB disconnect, device number 2 [ 85.225068][ T4209] usb 5-1: USB disconnect, device number 2 [ 86.317358][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 86.659137][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 86.785637][ T4583] process 'syz.1.112' launched './file2' with NULL argv: empty string added [ 87.627117][ T4565] delete_channel: no stack [ 88.028690][ T4221] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.628817][ T4221] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.639884][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.677336][ T4221] usb 3-1: Product: syz [ 88.689178][ T4221] usb 3-1: Manufacturer: syz [ 88.714445][ T4221] usb 3-1: SerialNumber: syz [ 88.770246][ T4221] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.898680][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.168775][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 89.288737][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.368721][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.379628][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 89.389414][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.409336][ T21] usb 2-1: config 0 descriptor?? [ 89.528716][ T4221] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.538721][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.838692][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 89.905408][ T21] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 89.998821][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.088751][ T7] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 90.118283][ T7] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 90.162067][ T23] usb 2-1: USB disconnect, device number 5 [ 90.449996][ T7] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 90.463882][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.478953][ T7] usb 4-1: Product: syz [ 90.488071][ T7] usb 4-1: Manufacturer: syz [ 90.500362][ T7] usb 4-1: SerialNumber: syz [ 90.598692][ T4221] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 90.608449][ T4221] ath9k_htc: Failed to initialize the device [ 91.154132][ T4210] usb 3-1: USB disconnect, device number 3 [ 91.200430][ T4210] usb 3-1: ath9k_htc: USB layer deinitialized [ 91.978637][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.388992][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.418598][ T7] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 92.470101][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.508692][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.584551][ T7] usb 1-1: invalid MIDI out EP 0 [ 92.786598][ T4221] usb 4-1: USB disconnect, device number 3 [ 92.851116][ T7] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 92.910183][ T7] usb 1-1: USB disconnect, device number 3 [ 93.178733][ T4210] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.294955][ T4664] udevd[4664]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.405201][ T4671] binder: 4669:4671 ioctl c0306201 200000000380 returned -22 [ 93.451667][ T4210] usb 5-1: Using ep0 maxpacket: 8 [ 93.654750][ T4210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.768820][ T4210] usb 5-1: config 0 has no interfaces? [ 93.988706][ T4221] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.068715][ T4210] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 94.093893][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.124321][ T4210] usb 5-1: Product: syz [ 94.144616][ T4210] usb 5-1: Manufacturer: syz [ 94.173295][ T4210] usb 5-1: SerialNumber: syz [ 94.209651][ T4210] usb 5-1: config 0 descriptor?? [ 94.268626][ T4221] usb 3-1: Using ep0 maxpacket: 8 [ 94.378758][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.408854][ T4221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.423512][ T4221] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.448692][ T4221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 94.494701][ T4221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 94.518994][ T4221] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 94.538352][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.611176][ T4221] hub 3-1:1.0: bad descriptor, ignoring hub [ 94.627158][ T4221] hub: probe of 3-1:1.0 failed with error -5 [ 94.638636][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 94.647940][ T4221] cdc_wdm 3-1:1.0: skipping garbage [ 94.688108][ T4221] cdc_wdm 3-1:1.0: skipping garbage [ 94.749007][ T4221] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 94.768722][ T7] usb 1-1: config 14 has too many interfaces: 42, using maximum allowed: 32 [ 94.796437][ T7] usb 1-1: config 14 has an invalid interface number: 246 but max is 41 [ 94.808068][ T4221] cdc_wdm 3-1:1.0: Unknown control protocol [ 94.876394][ T7] usb 1-1: config 14 has 1 interface, different from the descriptor's value: 42 [ 94.906213][ T7] usb 1-1: config 14 has no interface number 0 [ 94.913575][ T4221] usb 3-1: USB disconnect, device number 4 [ 94.972975][ T7] usb 1-1: config 14 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 95.238800][ T7] usb 1-1: New USB device found, idVendor=2042, idProduct=d300, bcdDevice=16.b3 [ 95.260684][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.276782][ T7] usb 1-1: Product: syz [ 95.282127][ T7] usb 1-1: Manufacturer: syz [ 95.288032][ T7] usb 1-1: SerialNumber: syz [ 95.329287][ T4697] netlink: 32 bytes leftover after parsing attributes in process `syz.3.149'. [ 95.440340][ T4221] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.715350][ T4704] ip6t_srh: unknown srh invflags 7D00 [ 95.721029][ T4221] usb 3-1: Using ep0 maxpacket: 8 [ 95.762829][ T4237] usb 5-1: USB disconnect, device number 3 [ 95.873892][ T4221] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 95.915943][ T4221] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.957347][ T4221] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.015934][ T4221] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.055806][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.161185][ T4221] hub 3-1:1.0: bad descriptor, ignoring hub [ 96.204344][ T4221] hub: probe of 3-1:1.0 failed with error -5 [ 96.239068][ T4221] cdc_wdm 3-1:1.0: skipping garbage [ 96.329293][ T4221] cdc_wdm 3-1:1.0: skipping garbage [ 96.334559][ T4221] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 96.479546][ T4221] usb 3-1: USB disconnect, device number 5 [ 96.683000][ T4714] crypto_alloc_aead failed rc=-4 [ 97.014052][ T4732] binder: 4731:4732 ioctl c0306201 200000000540 returned -14 [ 97.039232][ T4221] usb 1-1: USB disconnect, device number 4 [ 97.447519][ T4747] loop2: detected capacity change from 0 to 7 [ 97.494872][ T4747] Dev loop2: unable to read RDB block 7 [ 97.525783][ T4747] loop2: unable to read partition table [ 97.577892][ T4747] loop2: partition table beyond EOD, truncated [ 97.624929][ T4747] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.924229][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 98.878749][ T4757] mmap: syz.4.165 (4757) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 99.369454][ T4776] capability: warning: `syz.4.171' uses deprecated v2 capabilities in a way that may be insecure [ 99.478867][ T4210] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 99.858693][ T4210] usb 3-1: config 0 has no interfaces? [ 100.078843][ T4210] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.102051][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.118673][ T4237] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.137042][ T4210] usb 3-1: Product: syz [ 100.162897][ T4210] usb 3-1: Manufacturer: syz [ 100.184322][ T4210] usb 3-1: SerialNumber: syz [ 100.213594][ T4210] usb 3-1: config 0 descriptor?? [ 100.588856][ T4237] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.735198][ T4800] netlink: 'syz.4.179': attribute type 2 has an invalid length. [ 100.829472][ T4237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.868643][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.897258][ T4237] usb 1-1: Product: syz [ 100.911975][ T4237] usb 1-1: Manufacturer: syz [ 100.927015][ T4237] usb 1-1: SerialNumber: syz [ 100.938670][ T4800] netlink: 'syz.4.179': attribute type 2 has an invalid length. [ 101.310459][ T4237] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.639174][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.008722][ T23] usb 5-1: config 0 has no interfaces? [ 102.112693][ T21] usb 3-1: USB disconnect, device number 6 [ 102.188832][ T23] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.197928][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.288666][ T23] usb 5-1: Product: syz [ 102.311570][ T23] usb 5-1: Manufacturer: syz [ 102.324195][ T23] usb 5-1: SerialNumber: syz [ 102.341392][ T23] usb 5-1: config 0 descriptor?? [ 103.298640][ T4209] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.818718][ T4209] usb 4-1: config 0 has no interfaces? [ 103.923544][ T23] usb 1-1: USB disconnect, device number 5 [ 103.941110][ T23] usblp0: removed [ 104.093030][ T4208] usb 5-1: USB disconnect, device number 4 [ 104.368753][ T4209] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.394282][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.448354][ T4209] usb 4-1: Product: syz [ 104.468677][ T4209] usb 4-1: Manufacturer: syz [ 104.548353][ T4209] usb 4-1: SerialNumber: syz [ 104.568424][ T4209] usb 4-1: config 0 descriptor?? [ 104.741685][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.760582][ T4865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.128863][ T7] usb 5-1: config 0 has no interfaces? [ 105.294955][ T7] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.336382][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.355271][ T7] usb 5-1: Product: syz [ 105.368152][ T7] usb 5-1: Manufacturer: syz [ 105.382689][ T7] usb 5-1: SerialNumber: syz [ 105.432804][ T7] usb 5-1: config 0 descriptor?? [ 106.157298][ T4210] usb 4-1: USB disconnect, device number 4 [ 106.517137][ T4902] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 106.542388][ T4902] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 106.602076][ T4903] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 108.083577][ T4937] device batadv0 entered promiscuous mode [ 108.119045][ T4936] device batadv0 left promiscuous mode [ 108.415002][ T4208] usb 5-1: USB disconnect, device number 5 [ 108.792609][ T4955] kvm: MONITOR instruction emulated as NOP! [ 109.048789][ T4208] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.053315][ T4210] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.328619][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 109.328619][ T4208] usb 1-1: Using ep0 maxpacket: 8 [ 109.468803][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.490270][ T4208] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.504763][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.548624][ T4210] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.557726][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.579074][ T4208] usb 1-1: config 6 has an invalid interface number: 202 but max is 0 [ 109.607894][ T4208] usb 1-1: config 6 has no interface number 0 [ 109.639152][ T4210] usb 4-1: config 0 descriptor?? [ 109.642119][ T4208] usb 1-1: config 6 interface 202 has no altsetting 0 [ 109.828818][ T4208] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=2c.f8 [ 109.853185][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.886237][ T4208] usb 1-1: Product: syz [ 109.908645][ T4208] usb 1-1: Manufacturer: syz [ 109.928666][ T4208] usb 1-1: SerialNumber: syz [ 110.137299][ T4210] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 110.268198][ T4208] usb 1-1: bad CDC descriptors [ 110.283299][ T4208] usb 1-1: bad CDC descriptors [ 110.342012][ T4208] usb 1-1: USB disconnect, device number 6 [ 110.405454][ T4210] usb 4-1: USB disconnect, device number 5 [ 111.026511][ T4995] device bond_slave_0 entered promiscuous mode [ 111.033042][ T4995] device bond_slave_1 entered promiscuous mode [ 111.106910][ T4995] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.160303][ T5003] tipc: Started in network mode [ 111.165465][ T5003] tipc: Node identity 5f02000008000000002e5f2e, cluster identity 4711 [ 111.347290][ T5015] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 111.374527][ T5015] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 111.395787][ T5015] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 111.408657][ T5015] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 111.464838][ T5023] Zero length message leads to an empty skb [ 111.495498][ T5025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.262'. [ 111.585988][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 111.586003][ T26] audit: type=1326 audit(1746157684.267:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 111.624029][ T26] audit: type=1326 audit(1746157684.267:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 111.697703][ T26] audit: type=1326 audit(1746157684.267:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b83a56969 code=0x7ffc0000 [ 111.766793][ T5037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.270'. [ 112.045423][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 112.648823][ T4210] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.939416][ T26] audit: type=1326 audit(1746157685.627:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 112.968220][ T5084] tipc: Enabled bearer , priority 10 [ 113.028881][ T4210] usb 2-1: config 0 has no interfaces? [ 113.063224][ T26] audit: type=1326 audit(1746157685.627:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 113.166667][ T26] audit: type=1326 audit(1746157685.627:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 113.218713][ T4210] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.235394][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.243969][ T26] audit: type=1326 audit(1746157685.627:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 113.295410][ T4210] usb 2-1: Product: syz [ 113.317563][ T4210] usb 2-1: Manufacturer: syz [ 113.346389][ T26] audit: type=1326 audit(1746157685.627:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 113.348716][ T4210] usb 2-1: SerialNumber: syz [ 113.396317][ T26] audit: type=1326 audit(1746157685.627:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89f4f969 code=0x7ffc0000 [ 113.504867][ T4210] usb 2-1: config 0 descriptor?? [ 113.550805][ T26] audit: type=1326 audit(1746157685.627:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce89f51887 code=0x7ffc0000 [ 113.963642][ T4210] tipc: Node number set to 1462525742 [ 114.828623][ T4210] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 115.116816][ T7] usb 2-1: USB disconnect, device number 6 [ 115.258925][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.278908][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.325495][ T4210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 115.368646][ T4210] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 115.406699][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.430376][ T4210] usb 4-1: config 0 descriptor?? [ 115.777621][ T5136] bridge0: port 3(macsec0) entered blocking state [ 115.919253][ T4210] hid (null): unknown global tag 0xe [ 115.929182][ T4210] hid (null): global environment stack underflow [ 115.956304][ T5136] bridge0: port 3(macsec0) entered disabled state [ 115.968409][ T4210] hid-generic 0003:0B05:18C6.0003: unknown main item tag 0xe [ 116.013771][ T4210] hid-generic 0003:0B05:18C6.0003: unknown main item tag 0x4 [ 116.068709][ T4210] hid-generic 0003:0B05:18C6.0003: unknown main item tag 0x1 [ 116.106471][ T4210] hid-generic 0003:0B05:18C6.0003: unknown global tag 0xe [ 116.126769][ T4210] hid-generic 0003:0B05:18C6.0003: item 0 0 1 14 parsing failed [ 116.157901][ T4210] hid-generic: probe of 0003:0B05:18C6.0003 failed with error -22 [ 116.208268][ T4210] usb 4-1: USB disconnect, device number 6 [ 116.381258][ T5136] device macsec0 entered promiscuous mode [ 116.400528][ T5136] bridge0: port 3(macsec0) entered blocking state [ 116.407357][ T5136] bridge0: port 3(macsec0) entered forwarding state [ 116.987440][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 117.598713][ T4210] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.661653][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.828627][ T4209] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 117.869176][ T4210] usb 5-1: Using ep0 maxpacket: 8 [ 117.918661][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 118.038928][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.075486][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.094866][ T4210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.135777][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.173716][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.188927][ T4209] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.208042][ T4209] usb 1-1: config 0 has no interface number 0 [ 118.218786][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.223547][ T4210] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 118.257299][ T4209] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 118.279647][ T4210] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 118.287306][ T21] usb 4-1: config 0 descriptor?? [ 118.296655][ T4209] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 118.321898][ T4209] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 118.358725][ T4209] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.408717][ T4209] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.428644][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.498751][ T4210] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 118.520193][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.528245][ T4210] usb 5-1: Product: syz [ 118.553572][ T4209] usb 1-1: config 0 descriptor?? [ 118.579092][ T5170] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 118.591431][ T5170] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 118.602314][ T4210] usb 5-1: Manufacturer: syz [ 118.618794][ T4210] usb 5-1: SerialNumber: syz [ 118.650354][ T4209] ldusb 1-1:0.55: Interrupt in endpoint not found [ 118.793498][ T21] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 118.828686][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 118.899755][ T5159] udc-core: couldn't find an available UDC or it's busy [ 118.906912][ T5159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.928092][ T23] usb 1-1: USB disconnect, device number 7 [ 118.997402][ T21] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 119.042687][ T21] usb 4-1: USB disconnect, device number 7 [ 119.328747][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.538626][ T23] usb 1-1: device descriptor read/64, error -71 [ 119.782104][ T4209] usb 5-1: USB disconnect, device number 6 [ 119.808855][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.882230][ T5194] netlink: 'syz.4.326': attribute type 10 has an invalid length. [ 119.924562][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.947917][ T5194] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.018730][ T23] usb 1-1: device descriptor read/64, error -71 [ 120.128616][ T4208] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.138931][ T23] usb usb1-port1: attempt power cycle [ 120.388633][ T4208] usb 4-1: Using ep0 maxpacket: 32 [ 120.519275][ T4208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.548724][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.698891][ T4208] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.716634][ T4208] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.725415][ T4208] usb 4-1: Product: syz [ 120.734048][ T4208] usb 4-1: Manufacturer: syz [ 120.739119][ T4208] usb 4-1: SerialNumber: syz [ 120.758138][ T4208] usb 4-1: config 0 descriptor?? [ 120.779255][ T5193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.808708][ T23] usb 1-1: device not accepting address 10, error -71 [ 120.929905][ T4209] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.169251][ T4237] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.198978][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.298825][ T4209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.322018][ T4209] usb 3-1: config 0 has no interfaces? [ 121.327536][ T4209] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 121.342855][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.370305][ T4209] usb 3-1: config 0 descriptor?? [ 121.428779][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.442371][ T7] usb 4-1: USB disconnect, device number 8 [ 121.463279][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.493395][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.506473][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.549072][ T5209] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 121.578869][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.644221][ T5207] udc-core: couldn't find an available UDC or it's busy [ 121.668598][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.740510][ T5207] device bond_slave_0 entered promiscuous mode [ 121.746761][ T5207] device bond_slave_1 entered promiscuous mode [ 121.768863][ T4237] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 121.810172][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.818219][ T4237] usb 2-1: Product: syz [ 121.831455][ T5207] device vlan2 entered promiscuous mode [ 121.847276][ T4237] usb 2-1: Manufacturer: syz [ 121.853930][ T5207] device bond0 entered promiscuous mode [ 121.859957][ T4237] usb 2-1: SerialNumber: syz [ 121.878623][ T4237] usb 2-1: config 0 descriptor?? [ 121.888355][ T7] usb 1-1: USB disconnect, device number 11 [ 121.894939][ T5207] device bond0 left promiscuous mode [ 121.909447][ T5207] device bond_slave_0 left promiscuous mode [ 121.915417][ T5207] device bond_slave_1 left promiscuous mode [ 121.997473][ T4177] ================================================================== [ 121.998339][ T5234] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 122.005858][ T4177] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 122.005920][ T4177] Read of size 1 at addr ffff88802b705c09 by task kworker/u5:4/4177 [ 122.005938][ T4177] [ 122.005954][ T4177] CPU: 0 PID: 4177 Comm: kworker/u5:4 Not tainted 5.15.180-syzkaller #0 [ 122.005974][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.005988][ T4177] Workqueue: hci3 hci_rx_work [ 122.006022][ T4177] Call Trace: [ 122.006030][ T4177] [ 122.006039][ T4177] dump_stack_lvl+0x168/0x230 [ 122.006069][ T4177] ? show_regs_print_info+0x20/0x20 [ 122.006097][ T4177] ? load_image+0x3b0/0x3b0 [ 122.006119][ T4177] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 122.006155][ T4177] print_address_description+0x60/0x2d0 [ 122.006178][ T4177] ? hci_le_meta_evt+0x12c0/0x3b80 [ 122.006199][ T4177] kasan_report+0xdf/0x130 [ 122.006225][ T4177] ? hci_le_meta_evt+0x12c0/0x3b80 [ 122.006252][ T4177] hci_le_meta_evt+0x12c0/0x3b80 [ 122.006275][ T4177] ? hci_event_packet+0x250/0x12f0 [ 122.111299][ T4177] ? hci_remote_host_features_evt+0x280/0x280 [ 122.117375][ T4177] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 122.123010][ T4177] ? mark_lock+0x94/0x320 [ 122.127342][ T4177] ? mutex_unlock+0x10/0x10 [ 122.131846][ T4177] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 122.137828][ T4177] ? lock_chain_count+0x20/0x20 [ 122.142682][ T4177] ? __rwlock_init+0x140/0x140 [ 122.147463][ T4177] hci_event_packet+0xe05/0x12f0 [ 122.152435][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.157634][ T4177] ? rcu_lock_release+0x20/0x20 [ 122.162496][ T4177] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.167708][ T4177] hci_rx_work+0x255/0xa10 [ 122.172133][ T4177] process_one_work+0x863/0x1000 [ 122.177086][ T4177] ? worker_detach_from_pool+0x240/0x240 [ 122.182722][ T4177] ? lockdep_hardirqs_off+0x70/0x100 [ 122.188028][ T4177] ? _raw_spin_lock_irq+0xab/0xe0 [ 122.193052][ T4177] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 122.198424][ T4177] ? wq_worker_running+0x97/0x170 [ 122.203448][ T4177] worker_thread+0xaa8/0x12a0 [ 122.208121][ T4177] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 122.214014][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.219236][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.224454][ T4177] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 122.230355][ T4177] kthread+0x436/0x520 [ 122.234418][ T4177] ? rcu_lock_release+0x20/0x20 [ 122.239261][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 122.243853][ T4177] ret_from_fork+0x1f/0x30 [ 122.248278][ T4177] [ 122.251295][ T4177] [ 122.253617][ T4177] Allocated by task 5234: [ 122.257939][ T4177] __kasan_kmalloc+0xb5/0xf0 [ 122.262541][ T4177] __alloc_skb+0x22c/0x750 [ 122.266950][ T4177] vhci_write+0xbc/0x450 [ 122.271178][ T4177] vfs_write+0x712/0xd00 [ 122.275408][ T4177] ksys_write+0x14d/0x250 [ 122.279734][ T4177] do_syscall_64+0x4c/0xa0 [ 122.284158][ T4177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.290046][ T4177] [ 122.292359][ T4177] Last potentially related work creation: [ 122.298058][ T4177] kasan_save_stack+0x35/0x60 [ 122.302730][ T4177] kasan_record_aux_stack+0xb8/0x100 [ 122.308015][ T4177] call_rcu+0x179/0x920 [ 122.312178][ T4177] mqprio_attach+0x12c/0x240 [ 122.316767][ T4177] qdisc_graft+0x1133/0x14a0 [ 122.321354][ T4177] tc_modify_qdisc+0xe1a/0x16c0 [ 122.326201][ T4177] rtnetlink_rcv_msg+0x9b9/0xe60 [ 122.331136][ T4177] netlink_rcv_skb+0x1e0/0x430 [ 122.335889][ T4177] netlink_unicast+0x77c/0x920 [ 122.340640][ T4177] netlink_sendmsg+0x8ab/0xbc0 [ 122.345392][ T4177] ____sys_sendmsg+0x5a2/0x8c0 [ 122.350148][ T4177] ___sys_sendmsg+0x1f0/0x260 [ 122.354818][ T4177] __se_sys_sendmsg+0x190/0x250 [ 122.359663][ T4177] do_syscall_64+0x4c/0xa0 [ 122.364087][ T4177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.369976][ T4177] [ 122.372288][ T4177] The buggy address belongs to the object at ffff88802b705800 [ 122.372288][ T4177] which belongs to the cache kmalloc-1k of size 1024 [ 122.386326][ T4177] The buggy address is located 9 bytes to the right of [ 122.386326][ T4177] 1024-byte region [ffff88802b705800, ffff88802b705c00) [ 122.400044][ T4177] The buggy address belongs to the page: [ 122.405675][ T4177] page:ffffea0000adc000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b700 [ 122.415818][ T4177] head:ffffea0000adc000 order:3 compound_mapcount:0 compound_pincount:0 [ 122.424132][ T4177] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 122.432117][ T4177] raw: 00fff00000010200 ffffea00007eea00 0000000200000002 ffff888016841dc0 [ 122.440696][ T4177] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 122.449275][ T4177] page dumped because: kasan: bad access detected [ 122.455685][ T4177] page_owner tracks the page as allocated [ 122.461388][ T4177] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4167, ts 63147612198, free_ts 63136186833 [ 122.480481][ T4177] get_page_from_freelist+0x1b77/0x1c60 [ 122.486046][ T4177] __alloc_pages+0x1e1/0x470 [ 122.490627][ T4177] new_slab+0xc0/0x4b0 [ 122.494713][ T4177] ___slab_alloc+0x81e/0xdf0 [ 122.499306][ T4177] __kmalloc_node+0x200/0x3b0 [ 122.504004][ T4177] qdisc_alloc+0x8d/0xb10 [ 122.508331][ T4177] qdisc_create_dflt+0x5f/0x430 [ 122.513172][ T4177] dev_activate+0x331/0x12b0 [ 122.517753][ T4177] __dev_open+0x32c/0x420 [ 122.522070][ T4177] __dev_change_flags+0x20a/0x6a0 [ 122.527093][ T4177] dev_change_flags+0x82/0x1a0 [ 122.531878][ T4177] do_setlink+0xc01/0x3980 [ 122.536313][ T4177] rtnl_newlink+0x1419/0x17d0 [ 122.540991][ T4177] rtnetlink_rcv_msg+0x9b9/0xe60 [ 122.545925][ T4177] netlink_rcv_skb+0x1e0/0x430 [ 122.550682][ T4177] netlink_unicast+0x77c/0x920 [ 122.555437][ T4177] page last free stack trace: [ 122.560095][ T4177] free_unref_page_prepare+0x637/0x6c0 [ 122.565551][ T4177] free_unref_page+0x94/0x280 [ 122.570232][ T4177] __unfreeze_partials+0x1a5/0x200 [ 122.575361][ T4177] put_cpu_partial+0x12d/0x190 [ 122.580142][ T4177] qlist_free_all+0x35/0x90 [ 122.584668][ T4177] kasan_quarantine_reduce+0x150/0x160 [ 122.590139][ T4177] __kasan_slab_alloc+0x2f/0xd0 [ 122.595010][ T4177] slab_post_alloc_hook+0x4c/0x380 [ 122.600146][ T4177] __kmalloc+0x127/0x330 [ 122.604408][ T4177] fib6_info_alloc+0x2e/0xe0 [ 122.609014][ T4177] ip6_route_info_create+0x44f/0x1210 [ 122.614401][ T4177] ip6_route_add+0x24/0x130 [ 122.618921][ T4177] add_v4_addrs+0x8ea/0xc60 [ 122.623443][ T4177] addrconf_init_auto_addrs+0x384/0xb50 [ 122.629122][ T4177] addrconf_notify+0xa6b/0xf00 [ 122.633902][ T4177] raw_notifier_call_chain+0xcb/0x160 [ 122.639292][ T4177] [ 122.641624][ T4177] Memory state around the buggy address: [ 122.647273][ T4177] ffff88802b705b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.655345][ T4177] ffff88802b705b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.663429][ T4177] >ffff88802b705c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.671502][ T4177] ^ [ 122.675844][ T4177] ffff88802b705c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.683964][ T4177] ffff88802b705d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.692036][ T4177] ================================================================== [ 122.700103][ T4177] Disabling lock debugging due to kernel taint [ 122.706300][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.718025][ T4177] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.725249][ T4177] CPU: 0 PID: 4177 Comm: kworker/u5:4 Tainted: G B 5.15.180-syzkaller #0 [ 122.734971][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.745060][ T4177] Workqueue: hci3 hci_rx_work [ 122.749737][ T4177] Call Trace: [ 122.753018][ T4177] [ 122.755942][ T4177] dump_stack_lvl+0x168/0x230 [ 122.760625][ T4177] ? show_regs_print_info+0x20/0x20 [ 122.765820][ T4177] ? load_image+0x3b0/0x3b0 [ 122.770323][ T4177] panic+0x2c9/0x7f0 [ 122.774250][ T4177] ? bpf_jit_dump+0xd0/0xd0 [ 122.778753][ T4177] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 122.784648][ T4177] ? _raw_spin_unlock+0x40/0x40 [ 122.789495][ T4177] ? hci_le_meta_evt+0x12c0/0x3b80 [ 122.794604][ T4177] check_panic_on_warn+0x80/0xa0 [ 122.799539][ T4177] ? hci_le_meta_evt+0x12c0/0x3b80 [ 122.804670][ T4177] end_report+0x6d/0xf0 [ 122.808823][ T4177] kasan_report+0x102/0x130 [ 122.813322][ T4177] ? hci_le_meta_evt+0x12c0/0x3b80 [ 122.818428][ T4177] hci_le_meta_evt+0x12c0/0x3b80 [ 122.823359][ T4177] ? hci_event_packet+0x250/0x12f0 [ 122.828473][ T4177] ? hci_remote_host_features_evt+0x280/0x280 [ 122.834540][ T4177] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 122.840170][ T4177] ? mark_lock+0x94/0x320 [ 122.844495][ T4177] ? mutex_unlock+0x10/0x10 [ 122.848995][ T4177] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 122.854970][ T4177] ? lock_chain_count+0x20/0x20 [ 122.859820][ T4177] ? __rwlock_init+0x140/0x140 [ 122.864575][ T4177] hci_event_packet+0xe05/0x12f0 [ 122.869504][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.874698][ T4177] ? rcu_lock_release+0x20/0x20 [ 122.879542][ T4177] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.884743][ T4177] hci_rx_work+0x255/0xa10 [ 122.889174][ T4177] process_one_work+0x863/0x1000 [ 122.894125][ T4177] ? worker_detach_from_pool+0x240/0x240 [ 122.899748][ T4177] ? lockdep_hardirqs_off+0x70/0x100 [ 122.905037][ T4177] ? _raw_spin_lock_irq+0xab/0xe0 [ 122.910088][ T4177] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 122.915458][ T4177] ? wq_worker_running+0x97/0x170 [ 122.920477][ T4177] worker_thread+0xaa8/0x12a0 [ 122.925147][ T4177] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 122.931035][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.936230][ T4177] ? lockdep_hardirqs_on+0x94/0x140 [ 122.941420][ T4177] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 122.947313][ T4177] kthread+0x436/0x520 [ 122.951372][ T4177] ? rcu_lock_release+0x20/0x20 [ 122.956255][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 122.960842][ T4177] ret_from_fork+0x1f/0x30 [ 122.965264][ T4177] [ 122.968575][ T4177] Kernel Offset: disabled [ 122.972900][ T4177] Rebooting in 86400 seconds..