last executing test programs: 11.004573423s ago: executing program 1 (id=156): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shmdt(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x7fff, 0x15f9) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 9.6973771s ago: executing program 1 (id=161): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 8.758713562s ago: executing program 0 (id=164): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8.713096564s ago: executing program 1 (id=165): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000001100), 0x80) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r2, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.22107336s ago: executing program 1 (id=169): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x8, 0x3000, 0x0, 0x0}, {0x6, 0x8200, 0x0, 0x0}, {0x3ff, 0x0, 0x0, 0x0}], 0x3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003c00), &(0x7f0000003c40)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000003cc0)={0x2020}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006800)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000006900)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000006a00)={0x2020}, 0x2020) 6.31578913s ago: executing program 3 (id=173): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.10900761s ago: executing program 0 (id=174): clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r0 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000b40)=""/131, 0x83}], 0x4}, 0x2}], 0x1, 0x2140, &(0x7f0000000d00)={0x77359400}) syz_usb_connect$hid(0x5, 0x36, 0x0, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xa0, 0x3, 0x7, 0x20, 0x6}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "1537861234cc80266dd4a48256ecbeeb"}]}}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000080)=0xb2f2) 5.286768846s ago: executing program 2 (id=175): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 5.286436596s ago: executing program 4 (id=176): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000800)={0x0, 0x4b70, 0x10100, 0x2, 0x40003, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) 5.099235104s ago: executing program 3 (id=177): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040)={r0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0x40044102, 0x0) 4.532431489s ago: executing program 3 (id=178): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0xfffffff7, 0x12d61, 0x12d58}}, 0x44) 4.405595425s ago: executing program 2 (id=179): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000001100), 0x80) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r2, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 4.194918464s ago: executing program 3 (id=180): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40301, 0x0) pselect6(0x40, &(0x7f0000000100)={0xa, 0x8, 0x9, 0x8, 0x7fff, 0x7, 0x1, 0x3}, &(0x7f0000000140)={0x7, 0xe, 0x80000001, 0x8000000000000001, 0x5, 0xa, 0xe, 0x5}, 0x0, 0x0, 0x0) 4.095201409s ago: executing program 3 (id=181): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x7, 0x2, 0x51f}, &(0x7f0000000180)=0x14) 3.480661686s ago: executing program 0 (id=182): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0xa6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.39158886s ago: executing program 2 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) 3.222836037s ago: executing program 4 (id=184): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @empty, 0x2}, 0x37) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x404280, 0x0) sendmmsg$inet6(r0, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @loopback, 0x2}, 0x1c, 0x0}}], 0x1, 0x1000) 3.006305577s ago: executing program 2 (id=185): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x1be}, &(0x7f0000001340), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 2.93076494s ago: executing program 4 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00e9ff00047c0000040042801400018006002000800a000008001c00", @ANYRES32=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.670720642s ago: executing program 1 (id=187): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.670339912s ago: executing program 0 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040)={r1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$swradio(0x0, 0x1, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0x40044102, 0x0) 2.430888702s ago: executing program 4 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, 0x0, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="0200", 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{r4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000880008805400008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2c00098028000080060001000a000000140002000000000000000000000000000100000105000300020000003000008008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000100", @ANYRES32=r9, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.891569677s ago: executing program 0 (id=190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0) 834.707923ms ago: executing program 4 (id=191): syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f"], 0x7) 319.578036ms ago: executing program 2 (id=192): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 253.056239ms ago: executing program 2 (id=193): socket$inet6(0xa, 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) socket(0x10, 0x80002, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 170.633423ms ago: executing program 4 (id=194): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000001100), 0x80) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r2, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 46.548198ms ago: executing program 1 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x80000) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) r7 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140)=0xfffffffe, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x5, 0x8, 0xd7, 0x7}, {0x7, 0x5, 0xc, 0x86}]}) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r8, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0x1000) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000200)={@rand_addr=0x640100fe, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.50304ms ago: executing program 3 (id=196): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=197): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x8, 0x3000, 0x0, 0x0}, {0x6, 0x8200, 0x0, 0x0}, {0x3ff, 0x0, 0x0, 0x0}], 0x3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003cc0)={0x2020}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006800)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000006900)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000006a00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 49.208044][ T4173] cgroup: Unknown subsys name 'net' [ 49.370466][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.610313][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.918348][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.001390][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.065087][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.073231][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.081590][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.097274][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.122214][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.129685][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.137470][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.152614][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.185800][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.211903][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.263096][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.289079][ T4192] team0: Port device team_slave_0 added [ 52.295132][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.302481][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.310344][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.322112][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.329553][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.337886][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.358356][ T4192] team0: Port device team_slave_1 added [ 52.406760][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.413946][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.422525][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.450763][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.463700][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.473322][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.480577][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.488267][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.495199][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.502501][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.510298][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.518481][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.525597][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.552282][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.580053][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.587608][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.595519][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.602729][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.610520][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.636787][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.684459][ T4183] team0: Port device team_slave_0 added [ 52.693842][ T4183] team0: Port device team_slave_1 added [ 52.701607][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.719128][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.728310][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.736393][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.744116][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.760598][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.778868][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.796758][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.803914][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.812287][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.851760][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.858804][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.884965][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.898423][ T4185] team0: Port device team_slave_0 added [ 52.915083][ T4190] team0: Port device team_slave_0 added [ 52.924293][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.931966][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.947805][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.954780][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.981091][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.995135][ T4185] team0: Port device team_slave_1 added [ 53.009662][ T4190] team0: Port device team_slave_1 added [ 53.024332][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.069827][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.077320][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.103395][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.116354][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.141955][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.149281][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.175426][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.187157][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.194108][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.220512][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.239552][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.246576][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.253060][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.260864][ T4183] Cannot create hsr debugfs directory [ 53.273807][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.280851][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.306961][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.330003][ T4184] team0: Port device team_slave_0 added [ 53.345634][ T4184] team0: Port device team_slave_1 added [ 53.370281][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.377511][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.403942][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.441332][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.448468][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.474865][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.513669][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.520558][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.527657][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.535347][ T4185] Cannot create hsr debugfs directory [ 53.557477][ T4190] device hsr_slave_0 entered promiscuous mode [ 53.564273][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.571754][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.579513][ T4190] Cannot create hsr debugfs directory [ 53.635094][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.642134][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.649044][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.656676][ T4184] Cannot create hsr debugfs directory [ 53.696520][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.696520][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 53.697355][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.702944][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 53.709800][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.914773][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.933944][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.943425][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.954181][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.012172][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.023171][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.033652][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.053651][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.116571][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.128653][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.152874][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.162331][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.178347][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.214586][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.223705][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.233163][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.242539][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.251601][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.277581][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.289337][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.305628][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.314900][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.324153][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.331719][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.340678][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.350396][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.359703][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.367159][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.374825][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.417968][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.432912][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.443871][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.453722][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.463376][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.472361][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.487452][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.510867][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.518245][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.528158][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.537613][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.554012][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.565149][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.584037][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.594917][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.604294][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.613221][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.622486][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.637658][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.651910][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.660163][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.668338][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.725465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.734365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.749975][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.757124][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.765720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.774383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.782923][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.790226][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.798307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.809127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.818554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.837495][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.849622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.863674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.874162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.911837][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.922010][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.932258][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.941941][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.951245][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.959477][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.971358][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.981571][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.996453][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.017728][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.044190][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.061006][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.069817][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.079239][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.086356][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.094022][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.101997][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.109739][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.118955][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.127463][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.134575][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.142483][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.151578][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.165621][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.201669][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.211324][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.221718][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.237048][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.245621][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.253334][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.262237][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.287060][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.297964][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.308263][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.317726][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.326598][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.335796][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.344285][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.351775][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.359724][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.368736][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.378008][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.388594][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.419409][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.428380][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.439461][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.446907][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.454850][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.464397][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.473403][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.481224][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.494438][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.504182][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.513370][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.524083][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.544442][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.553375][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.572681][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.583641][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.593813][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.604489][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.612560][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.620778][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.629827][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.640242][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.647437][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.655487][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.663829][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.672437][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.680812][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.690183][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.711859][ T4192] device veth0_vlan entered promiscuous mode [ 55.722478][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.734982][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.744076][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.753482][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.761999][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.770998][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.779944][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 55.782293][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789222][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 55.793037][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.799604][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 55.806950][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 55.817491][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 55.819134][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.832472][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.845148][ T4192] device veth1_vlan entered promiscuous mode [ 55.859975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.870826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.879856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.919565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.928604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.944184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.954236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.971313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.998913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.014576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.032692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.041553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.050994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.059461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.068272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.078978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.086944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.097481][ T4190] device veth0_vlan entered promiscuous mode [ 56.111534][ T4192] device veth0_macvtap entered promiscuous mode [ 56.129111][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.143562][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.161854][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.176745][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.186530][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.196954][ T4192] device veth1_macvtap entered promiscuous mode [ 56.205161][ T4190] device veth1_vlan entered promiscuous mode [ 56.237365][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.249204][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.278539][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.287068][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.307320][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.314827][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.329221][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.341709][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.366361][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.382362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.399644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.410316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.424408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.434064][ T4190] device veth0_macvtap entered promiscuous mode [ 56.448837][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.462850][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.486010][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.494745][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504098][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.519653][ T4190] device veth1_macvtap entered promiscuous mode [ 56.538166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.553347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.561921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.571164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.599189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.614243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.651068][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.664481][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.688048][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.701857][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.714358][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.728459][ T4183] device veth0_vlan entered promiscuous mode [ 56.742497][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.754606][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.763623][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.772654][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.782259][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.790689][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.801495][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.820834][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.831474][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.842473][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.861640][ T4183] device veth1_vlan entered promiscuous mode [ 56.877959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.888049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.897471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.910267][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.920041][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.928799][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.937594][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.962301][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.972754][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.986970][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.991362][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.004393][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.015979][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.023962][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.033008][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.079971][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.090051][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.098979][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.107722][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.116389][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.124167][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.142996][ T4183] device veth0_macvtap entered promiscuous mode [ 57.162190][ T4185] device veth0_vlan entered promiscuous mode [ 57.178898][ T4183] device veth1_macvtap entered promiscuous mode [ 57.185814][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.193816][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.204135][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.218064][ T4184] device veth0_vlan entered promiscuous mode [ 57.225066][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.234390][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.250804][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.255640][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.260234][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.277657][ T4185] device veth1_vlan entered promiscuous mode [ 57.293478][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.304384][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.315413][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.326105][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.337514][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.349599][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.360325][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.370534][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.382200][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.393612][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.407501][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.416671][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.424551][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.432761][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.442726][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.452274][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.462168][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.500150][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.510746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.523203][ T4184] device veth1_vlan entered promiscuous mode [ 57.538351][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.559023][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.579134][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.588344][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.644243][ T4185] device veth0_macvtap entered promiscuous mode [ 57.656330][ T4185] device veth1_macvtap entered promiscuous mode [ 57.682167][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.699720][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.711432][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.727481][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.743511][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.755896][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.767373][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.777035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.785194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.793085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.803307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.814964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.829825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.841084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.857210][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 57.964034][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 58.124529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.139760][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 58.227975][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 58.333906][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 58.350331][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.363689][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.374055][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.384584][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.394413][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.405194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.419229][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.456185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.470087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.482929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.497227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.520689][ T4184] device veth0_macvtap entered promiscuous mode [ 58.538939][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.552201][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.562155][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.571153][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.616492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.627043][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.635047][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.658275][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.678602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.697895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.706621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.726551][ T4184] device veth1_macvtap entered promiscuous mode [ 58.763569][ T4303] Cannot find add_set index 0 as target [ 58.836018][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.856021][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.871595][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.891996][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.904208][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.924367][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.934926][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.952746][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.964927][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.982866][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.006149][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.022507][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.033236][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.043576][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.054365][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.064670][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.081606][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.107838][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.132186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.149798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.163589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.180977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.190555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.312775][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.322443][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.331480][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.340497][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.367389][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.436505][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.894700][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.016289][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 60.038715][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.049069][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.097510][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 60.585312][ C1] sched: RT throttling activated [ 60.690424][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 60.696755][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 60.703336][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 60.710681][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 60.824095][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.918551][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.975580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.985375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 60.994935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.008010][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.018947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.036999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.046103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.067315][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.083612][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.115349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.124434][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.133451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.142534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.159478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.452053][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.813246][ T4327] binder: BINDER_SET_CONTEXT_MGR already set [ 62.820055][ T4327] binder: 4325:4327 ioctl 4018620d 200000000040 returned -16 [ 64.338309][ T4346] netlink: set zone limit has 8 unknown bytes [ 64.415662][ T4304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.665415][ T4304] usb 1-1: Using ep0 maxpacket: 8 [ 64.786090][ T4304] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 64.806850][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.883783][ T4304] pvrusb2: Hardware description: Terratec Grabster AV400 [ 64.903972][ T4304] pvrusb2: ********** [ 64.931905][ T4304] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 64.985432][ T4304] pvrusb2: Important functionality might not be entirely working. [ 65.007774][ T4304] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 65.051230][ T4304] pvrusb2: ********** [ 65.147842][ T2422] pvrusb2: Invalid write control endpoint [ 65.422864][ T4304] usb 1-1: USB disconnect, device number 2 [ 65.484756][ T2422] pvrusb2: Invalid write control endpoint [ 65.534040][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 65.599241][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 65.694549][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 65.749730][ T2422] pvrusb2: Device being rendered inoperable [ 65.954256][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 66.006363][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 66.555456][ T2422] pvrusb2: Attached sub-driver cx25840 [ 66.561271][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 66.667771][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 67.405727][ T4304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.265692][ T4304] usb 2-1: Using ep0 maxpacket: 8 [ 68.365504][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.586538][ T4304] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 68.615570][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 68.672804][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.746107][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 61258, setting to 1024 [ 68.791464][ T4304] usb 2-1: Product: syz [ 68.808495][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 68.825412][ T4304] usb 2-1: Manufacturer: syz [ 68.834045][ T4304] usb 2-1: SerialNumber: syz [ 68.845402][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 68.876956][ T4304] usb 2-1: config 0 descriptor?? [ 68.882417][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 68.917748][ T4304] gspca_main: sq905-2.14.0 probing 2770:9120 [ 69.185640][ T13] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 69.205441][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.213569][ T13] usb 1-1: Product: syz [ 69.295573][ T13] usb 1-1: Manufacturer: syz [ 69.333853][ T13] usb 1-1: config 0 descriptor?? [ 69.387184][ T13] usb 1-1: can't set config #0, error -71 [ 69.433858][ T13] usb 1-1: USB disconnect, device number 3 [ 69.455485][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.625415][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 69.779045][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.795489][ T4304] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 69.803305][ T4304] sq905: probe of 2-1:0.0 failed with error -32 [ 69.875513][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x11, skipping [ 70.786519][ T1108] usb 2-1: USB disconnect, device number 2 [ 71.304345][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315526][ T4233] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.325140][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.525041][ T4233] usb 4-1: Product: syz [ 71.529326][ T4233] usb 4-1: Manufacturer: syz [ 71.534503][ T4233] usb 4-1: SerialNumber: syz [ 71.541098][ T4233] usb 4-1: config 0 descriptor?? [ 71.628506][ T4233] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 71.695508][ T4304] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.056233][ T4415] Cannot find add_set index 0 as target [ 72.159647][ T4304] usb 3-1: Using ep0 maxpacket: 8 [ 72.720766][ T4304] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 72.734210][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.767816][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.266838][ T4421] usb 4-1: USB disconnect, device number 2 [ 73.280557][ T4304] pvrusb2: Hardware description: Terratec Grabster AV400 [ 73.439914][ T4304] pvrusb2: ********** [ 73.446965][ T4304] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 73.532244][ T4304] pvrusb2: Important functionality might not be entirely working. [ 73.540419][ T4304] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 73.552421][ T4304] pvrusb2: ********** [ 73.762918][ T2422] pvrusb2: Invalid write control endpoint [ 74.170857][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 74.332940][ T4247] usb 3-1: USB disconnect, device number 2 [ 74.404440][ T2422] pvrusb2: Invalid write control endpoint [ 74.412777][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 74.424689][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 74.520032][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 74.558180][ T2422] pvrusb2: Device being rendered inoperable [ 74.564562][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 74.572449][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 74.581838][ T2422] pvrusb2: Attached sub-driver cx25840 [ 74.605522][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 74.635451][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 76.578087][ T1111] cfg80211: failed to load regulatory.db [ 76.818057][ T4463] Cannot find add_set index 0 as target [ 76.895455][ T1108] Bluetooth: hci5: command 0xfc11 tx timeout [ 76.901609][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 79.031568][ T4487] netlink: set zone limit has 8 unknown bytes [ 80.415477][ T4421] Bluetooth: hci5: command 0xfc11 tx timeout [ 80.415497][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 80.555530][ T4406] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.835688][ T4406] usb 1-1: Using ep0 maxpacket: 8 [ 81.196360][ T4406] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 81.607920][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.808906][ T4406] pvrusb2: Hardware description: Terratec Grabster AV400 [ 81.822945][ T4406] pvrusb2: ********** [ 81.840633][ T4406] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 81.873140][ T4406] pvrusb2: Important functionality might not be entirely working. [ 81.883050][ T4406] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 81.897771][ T4406] pvrusb2: ********** [ 82.097597][ T2422] pvrusb2: Invalid write control endpoint [ 82.390136][ T4421] usb 1-1: USB disconnect, device number 4 [ 82.460242][ T4517] Cannot find add_set index 0 as target [ 82.479416][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 82.513761][ T2422] pvrusb2: Invalid write control endpoint [ 82.524705][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 82.535714][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 82.544181][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 82.561261][ T2422] pvrusb2: Device being rendered inoperable [ 82.567996][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 82.575082][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 82.620155][ T2422] pvrusb2: Attached sub-driver cx25840 [ 82.629235][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 82.641973][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 83.857152][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 84.386057][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 85.786488][ T4554] netlink: 'syz.2.63': attribute type 2 has an invalid length. [ 86.082215][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 87.585398][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.845414][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 87.965980][ T4577] Cannot find add_set index 0 as target [ 88.025717][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 88.058466][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.252181][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 88.662683][ T21] pvrusb2: ********** [ 88.685465][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 88.779601][ T21] pvrusb2: Important functionality might not be entirely working. [ 88.814759][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 89.525806][ T21] pvrusb2: ********** [ 89.624019][ T2422] pvrusb2: Invalid write control endpoint [ 90.024003][ T4406] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.032289][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 90.264201][ T2422] pvrusb2: Invalid write control endpoint [ 90.293761][ T21] usb 2-1: USB disconnect, device number 3 [ 90.297401][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 90.320421][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 90.495183][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 90.507424][ T2422] pvrusb2: Device being rendered inoperable [ 90.513515][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 90.521532][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 91.377954][ T2422] pvrusb2: Attached sub-driver cx25840 [ 91.416515][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.586753][ T4406] usb 4-1: device not accepting address 3, error -71 [ 91.635193][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 93.174691][ T4631] Cannot find add_set index 0 as target [ 94.035282][ T4614] capability: warning: `syz.4.82' uses 32-bit capabilities (legacy support in use) [ 94.185399][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.017221][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.029693][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.041457][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.051616][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.065613][ T4247] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.355777][ T4247] usb 4-1: Using ep0 maxpacket: 8 [ 95.506315][ T4247] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.543917][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.785706][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.805184][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.814731][ T7] usb 1-1: Product: syz [ 95.824387][ T7] usb 1-1: Manufacturer: syz [ 95.955624][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 95.960879][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 95.983889][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 95.995132][ T4247] pvrusb2: Hardware description: Terratec Grabster AV400 [ 96.001515][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 96.003027][ T4247] pvrusb2: ********** [ 96.331087][ T26] audit: type=1326 audit(1763956355.931:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f304a65f749 code=0x0 [ 96.405490][ T4247] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 96.415781][ T4247] pvrusb2: Important functionality might not be entirely working. [ 96.423677][ T4247] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 96.435077][ T4247] pvrusb2: ********** [ 96.476221][ T2422] pvrusb2: Invalid write control endpoint [ 96.548741][ T7] usb 1-1: USB disconnect, device number 5 [ 96.585585][ T2422] pvrusb2: Invalid write control endpoint [ 96.594761][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.606841][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.619824][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.631911][ T2422] pvrusb2: Device being rendered inoperable [ 96.644453][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.653531][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 96.746302][ T2422] pvrusb2: Attached sub-driver cx25840 [ 96.752236][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.763850][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.782004][ T1108] usb 4-1: USB disconnect, device number 5 [ 97.115562][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 99.371098][ T4680] Cannot find add_set index 0 as target [ 101.706552][ T4247] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.675516][ T4247] usb 3-1: device descriptor read/all, error -71 [ 103.715503][ T4240] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.985487][ T4240] usb 2-1: Using ep0 maxpacket: 8 [ 104.586327][ T4732] Cannot find add_set index 0 as target [ 104.896872][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 104.998984][ T4240] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 105.034180][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.156554][ T4201] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 105.722008][ T4240] pvrusb2: Hardware description: Terratec Grabster AV400 [ 107.427284][ T4240] pvrusb2: ********** [ 107.431310][ T4240] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 107.442176][ T4240] pvrusb2: Important functionality might not be entirely working. [ 107.450032][ T4240] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 107.461373][ T4240] pvrusb2: ********** [ 107.620721][ T2422] pvrusb2: Invalid write control endpoint [ 107.728423][ T4240] usb 2-1: USB disconnect, device number 4 [ 108.336263][ T2422] pvrusb2: Invalid write control endpoint [ 108.410041][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 108.442927][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 108.829795][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.019125][ T2422] pvrusb2: Device being rendered inoperable [ 109.026462][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.071505][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 109.215487][ T2422] pvrusb2: Attached sub-driver cx25840 [ 109.299661][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.426313][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.696072][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 113.273132][ T4806] ======================================================= [ 113.273132][ T4806] WARNING: The mand mount option has been deprecated and [ 113.273132][ T4806] and is ignored by this kernel. Remove the mand [ 113.273132][ T4806] option from the mount to silence this warning. [ 113.273132][ T4806] ======================================================= [ 114.009076][ T4806] FAT-fs (nullb0): bogus number of reserved sectors [ 114.016561][ T4806] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 114.149143][ T4240] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.445478][ T4240] usb 5-1: Using ep0 maxpacket: 8 [ 114.590752][ T4240] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 114.604984][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.703032][ T4240] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.718282][ T4240] pvrusb2: ********** [ 114.736367][ T4240] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.777175][ T4240] pvrusb2: Important functionality might not be entirely working. [ 114.824754][ T4240] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.855025][ T4240] pvrusb2: ********** [ 114.925544][ T2422] pvrusb2: Invalid write control endpoint [ 115.095449][ T4290] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.129697][ T3577] usb 5-1: USB disconnect, device number 2 [ 115.194138][ T2422] pvrusb2: Invalid write control endpoint [ 115.200957][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 115.218156][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 115.236160][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 115.247466][ T2422] pvrusb2: Device being rendered inoperable [ 115.253507][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 115.260977][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 115.273317][ T2422] pvrusb2: Attached sub-driver cx25840 [ 115.295698][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 115.430975][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 115.466120][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.521533][ T4290] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 115.536523][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.583625][ T4290] usb 1-1: config 0 descriptor?? [ 116.255515][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 116.665612][ T4290] usbhid 1-1:0.0: can't add hid device: -71 [ 116.682102][ T4290] usbhid: probe of 1-1:0.0 failed with error -71 [ 116.726598][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 116.931837][ T4290] usb 1-1: USB disconnect, device number 6 [ 118.306653][ T4854] kvm [4850]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 118.347397][ T4854] kvm [4850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 118.372225][ T4854] kvm [4850]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 118.389407][ T4854] kvm [4850]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 118.407011][ T4854] kvm [4850]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 118.415249][ T4854] kvm [4850]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x4000 [ 119.038202][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.345457][ T4290] usb 5-1: Using ep0 maxpacket: 8 [ 119.645606][ T4290] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 119.694213][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.901298][ T4290] pvrusb2: Hardware description: Terratec Grabster AV400 [ 119.968726][ T4290] pvrusb2: ********** [ 119.983011][ T4290] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.013821][ T4290] pvrusb2: Important functionality might not be entirely working. [ 120.037425][ T4290] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.068525][ T4290] pvrusb2: ********** [ 120.117639][ T2422] pvrusb2: Invalid write control endpoint [ 120.221892][ T2422] pvrusb2: Invalid write control endpoint [ 120.228122][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 120.256401][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 120.284298][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 120.305473][ T2422] pvrusb2: Device being rendered inoperable [ 120.325536][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 120.344625][ T4290] usb 5-1: USB disconnect, device number 3 [ 120.360957][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 120.381213][ T2422] pvrusb2: Attached sub-driver cx25840 [ 120.445705][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 120.554052][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 121.535527][ T3577] Bluetooth: hci5: command 0xfc11 tx timeout [ 121.625613][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 122.755732][ T3577] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.415505][ T3577] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.474193][ T3577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.550810][ T4304] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.639874][ T3577] usb 5-1: Product: syz [ 123.644089][ T3577] usb 5-1: Manufacturer: syz [ 123.665520][ T3577] usb 5-1: SerialNumber: syz [ 123.747174][ T3577] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.809681][ T4304] usb 1-1: Using ep0 maxpacket: 8 [ 124.086394][ T4304] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 124.118696][ T4304] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 124.177891][ T4304] usb 1-1: Product: syz [ 124.187610][ T4304] usb 1-1: Manufacturer: syz [ 124.193597][ T4304] usb 1-1: SerialNumber: syz [ 124.206219][ T4304] usb 1-1: config 0 descriptor?? [ 124.247537][ T4304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 124.585462][ T3577] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 124.635470][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.705545][ T4304] gspca_zc3xx: reg_r err -71 [ 124.710390][ T4304] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 124.726556][ T4304] usb 1-1: USB disconnect, device number 7 [ 124.788433][ T21] usb 5-1: USB disconnect, device number 4 [ 125.421188][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 126.393549][ T3577] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 126.401230][ T3577] ath9k_htc: Failed to initialize the device [ 126.409700][ T21] usb 5-1: ath9k_htc: USB layer deinitialized [ 126.440741][ T4233] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 126.467529][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.103542][ T4233] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.159203][ T4233] pvrusb2: ********** [ 127.175646][ T4966] IPVS: ip_vs_add_dest(): server weight less than zero [ 127.191994][ T4233] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.254889][ T4233] pvrusb2: Important functionality might not be entirely working. [ 127.348991][ T4233] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.399257][ T4233] pvrusb2: ********** [ 127.456327][ T2422] pvrusb2: Invalid write control endpoint [ 127.624626][ T2422] pvrusb2: Invalid write control endpoint [ 127.635496][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.644991][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.669713][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.736099][ T2422] pvrusb2: Device being rendered inoperable [ 127.764681][ T4304] usb 2-1: USB disconnect, device number 5 [ 127.773174][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.945885][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 128.048988][ T2422] pvrusb2: Attached sub-driver cx25840 [ 128.054607][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.065474][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.936423][ T4996] syz.2.185[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.937185][ T4996] syz.2.185[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.529223][ T5007] kthread_run failed with err -4 [ 131.385705][ T4247] Bluetooth: hci5: command 0xfc11 tx timeout [ 131.391872][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 131.955453][ T3577] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.737695][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.325579][ T3577] usb 1-1: Using ep0 maxpacket: 8 [ 133.493017][ T5033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.524420][ T5019] ================================================================== [ 133.532846][ T5019] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 133.540567][ T5019] Write of size 4 at addr ffff8880607084b8 by task syz.2.193/5019 [ 133.548445][ T5019] [ 133.550802][ T5019] CPU: 0 PID: 5019 Comm: syz.2.193 Not tainted syzkaller #0 [ 133.558082][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.568140][ T5019] Call Trace: [ 133.571499][ T5019] [ 133.574418][ T5019] dump_stack_lvl+0x168/0x230 [ 133.579101][ T5019] ? show_regs_print_info+0x20/0x20 [ 133.584293][ T5019] ? load_image+0x3b0/0x3b0 [ 133.588795][ T5019] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 133.594157][ T5019] ? lockdep_hardirqs_on+0x94/0x140 [ 133.599346][ T5019] print_address_description+0x60/0x2d0 [ 133.604893][ T5019] ? ax25_dev_device_down+0x35e/0x520 [ 133.605714][ T3577] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 133.610269][ T5019] kasan_report+0xdf/0x130 [ 133.623704][ T5019] ? ax25_dev_device_down+0x35e/0x520 [ 133.629069][ T5019] ? kfree+0xef/0x2a0 [ 133.633039][ T5019] kasan_check_range+0x27b/0x290 [ 133.637982][ T5019] ax25_dev_device_down+0x35e/0x520 [ 133.643229][ T5019] ax25_device_event+0x4b4/0x4f0 [ 133.648814][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 133.654189][ T5019] dev_close_many+0x28d/0x400 [ 133.658862][ T5019] ? _raw_spin_unlock+0x40/0x40 [ 133.663728][ T5019] ? __dev_open+0x420/0x420 [ 133.668388][ T5019] ? bond_netdev_event+0x159/0xea0 [ 133.673582][ T5019] ? try_to_del_timer_sync+0x165/0x1b0 [ 133.679036][ T5019] dev_close+0x14c/0x200 [ 133.683278][ T5019] ? __dev_close_many+0x2a0/0x2a0 [ 133.688298][ T5019] ? macvlan_device_event+0x10b/0x930 [ 133.693784][ T5019] bpq_device_event+0x2f4/0x9c0 [ 133.698630][ T5019] ? lockdep_rtnl_is_held+0x22/0x30 [ 133.703820][ T5019] ? team_device_event+0x11b/0x9e0 [ 133.708929][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 133.714306][ T5019] __dev_notify_flags+0x178/0x2d0 [ 133.719338][ T5019] ? __dev_change_flags+0x6a0/0x6a0 [ 133.724524][ T5019] ? __dev_change_flags+0x4bb/0x6a0 [ 133.729829][ T5019] ? dev_get_flags+0x1c0/0x1c0 [ 133.734594][ T5019] ? dev_ioctl+0x54e/0xe50 [ 133.739002][ T5019] ? dev_ioctl+0x54e/0xe50 [ 133.743407][ T5019] dev_change_flags+0xe3/0x1a0 [ 133.748180][ T5019] dev_ifsioc+0x147/0xe70 [ 133.752495][ T5019] ? dev_ioctl+0xe50/0xe50 [ 133.756901][ T5019] ? apparmor_capable+0x12c/0x190 [ 133.762000][ T5019] ? full_name_hash+0x8e/0xe0 [ 133.766670][ T5019] dev_ioctl+0x55f/0xe50 [ 133.770895][ T5019] ? _copy_from_user+0x111/0x170 [ 133.775817][ T5019] sock_do_ioctl+0x222/0x2f0 [ 133.780394][ T5019] ? sock_show_fdinfo+0xb0/0xb0 [ 133.785238][ T5019] sock_ioctl+0x4ed/0x6e0 [ 133.789553][ T5019] ? sock_poll+0x3f0/0x3f0 [ 133.793965][ T5019] ? bpf_lsm_file_ioctl+0x5/0x10 [ 133.798946][ T5019] ? security_file_ioctl+0x7c/0xa0 [ 133.804226][ T5019] ? sock_poll+0x3f0/0x3f0 [ 133.808625][ T5019] __se_sys_ioctl+0xfa/0x170 [ 133.813198][ T5019] do_syscall_64+0x4c/0xa0 [ 133.817596][ T5019] ? clear_bhb_loop+0x30/0x80 [ 133.822252][ T5019] ? clear_bhb_loop+0x30/0x80 [ 133.826917][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.832817][ T5019] RIP: 0033:0x7efd73492749 [ 133.837218][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.856815][ T5019] RSP: 002b:00007efd716d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.865281][ T5019] RAX: ffffffffffffffda RBX: 00007efd736e9090 RCX: 00007efd73492749 [ 133.873759][ T5019] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000008 [ 133.881744][ T5019] RBP: 00007efd73516f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.889916][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.897884][ T5019] R13: 00007efd736e9128 R14: 00007efd736e9090 R15: 00007ffcc3f1fe18 [ 133.905852][ T5019] [ 133.908849][ T5019] [ 133.911149][ T5019] Allocated by task 4521: [ 133.915472][ T5019] __kasan_kmalloc+0xb5/0xf0 [ 133.920043][ T5019] ax25_dev_device_up+0x50/0x580 [ 133.924967][ T5019] ax25_device_event+0x483/0x4f0 [ 133.929900][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 133.935257][ T5019] __dev_notify_flags+0x178/0x2d0 [ 133.940274][ T5019] dev_change_flags+0xe3/0x1a0 [ 133.945018][ T5019] dev_ifsioc+0x147/0xe70 [ 133.949324][ T5019] dev_ioctl+0x55f/0xe50 [ 133.953542][ T5019] sock_do_ioctl+0x222/0x2f0 [ 133.958118][ T5019] sock_ioctl+0x4ed/0x6e0 [ 133.962431][ T5019] __se_sys_ioctl+0xfa/0x170 [ 133.967009][ T5019] do_syscall_64+0x4c/0xa0 [ 133.971409][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.977284][ T5019] [ 133.979586][ T5019] Freed by task 5019: [ 133.983555][ T5019] kasan_set_track+0x4b/0x70 [ 133.988219][ T5019] kasan_set_free_info+0x1f/0x40 [ 133.993169][ T5019] ____kasan_slab_free+0xd5/0x110 [ 133.998181][ T5019] slab_free_freelist_hook+0xea/0x170 [ 134.003538][ T5019] kfree+0xef/0x2a0 [ 134.007326][ T5019] ax25_dev_device_down+0x1c0/0x520 [ 134.012504][ T5019] ax25_device_event+0x4b4/0x4f0 [ 134.017435][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 134.022809][ T5019] dev_close_many+0x28d/0x400 [ 134.027505][ T5019] dev_close+0x14c/0x200 [ 134.031733][ T5019] bpq_device_event+0x2f4/0x9c0 [ 134.036591][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 134.042037][ T5019] __dev_notify_flags+0x178/0x2d0 [ 134.047136][ T5019] dev_change_flags+0xe3/0x1a0 [ 134.051882][ T5019] dev_ifsioc+0x147/0xe70 [ 134.056188][ T5019] dev_ioctl+0x55f/0xe50 [ 134.060426][ T5019] sock_do_ioctl+0x222/0x2f0 [ 134.065011][ T5019] sock_ioctl+0x4ed/0x6e0 [ 134.069338][ T5019] __se_sys_ioctl+0xfa/0x170 [ 134.074022][ T5019] do_syscall_64+0x4c/0xa0 [ 134.078432][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.084508][ T5019] [ 134.086831][ T5019] Last potentially related work creation: [ 134.092540][ T5019] kasan_save_stack+0x35/0x60 [ 134.097226][ T5019] kasan_record_aux_stack+0xb8/0x100 [ 134.102518][ T5019] insert_work+0x54/0x3d0 [ 134.107017][ T5019] __queue_work+0x9c5/0xd50 [ 134.111510][ T5019] queue_work_on+0x11d/0x1d0 [ 134.116086][ T5019] inet6addr_event+0x9c/0xc0 [ 134.120684][ T5019] atomic_notifier_call_chain+0x15d/0x280 [ 134.126422][ T5019] ipv6_add_addr+0xb30/0xde0 [ 134.130994][ T5019] inet6_addr_add+0x43a/0x9c0 [ 134.135743][ T5019] inet6_rtm_newaddr+0x5d7/0x840 [ 134.140686][ T5019] rtnetlink_rcv_msg+0x7ff/0xe90 [ 134.145627][ T5019] netlink_rcv_skb+0x1e0/0x430 [ 134.150458][ T5019] netlink_unicast+0x774/0x920 [ 134.155207][ T5019] netlink_sendmsg+0x8ab/0xbc0 [ 134.159946][ T5019] __sys_sendto+0x423/0x580 [ 134.164435][ T5019] __x64_sys_sendto+0xda/0xf0 [ 134.169111][ T5019] do_syscall_64+0x4c/0xa0 [ 134.173511][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.179386][ T5019] [ 134.181694][ T5019] The buggy address belongs to the object at ffff888060708400 [ 134.181694][ T5019] which belongs to the cache kmalloc-192 of size 192 [ 134.196117][ T5019] The buggy address is located 184 bytes inside of [ 134.196117][ T5019] 192-byte region [ffff888060708400, ffff8880607084c0) [ 134.209382][ T5019] The buggy address belongs to the page: [ 134.215010][ T5019] page:ffffea000181c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60708 [ 134.225148][ T5019] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 134.232952][ T5019] raw: 00fff00000000200 ffffea00008cc0c0 0000000200000002 ffff888016841a00 [ 134.241525][ T5019] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 134.250084][ T5019] page dumped because: kasan: bad access detected [ 134.256686][ T5019] page_owner tracks the page as allocated [ 134.262392][ T5019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4303, ts 58761834132, free_ts 12097082418 [ 134.278347][ T5019] get_page_from_freelist+0x1b77/0x1c60 [ 134.284108][ T5019] __alloc_pages+0x1e1/0x470 [ 134.288805][ T5019] new_slab+0xb6/0x4b0 [ 134.292863][ T5019] ___slab_alloc+0x81e/0xdf0 [ 134.297434][ T5019] __kmalloc_node+0x200/0x3b0 [ 134.302091][ T5019] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 134.307909][ T5019] new_slab+0x100/0x4b0 [ 134.312058][ T5019] ___slab_alloc+0x81e/0xdf0 [ 134.316648][ T5019] kmem_cache_alloc+0x195/0x290 [ 134.321493][ T5019] sk_prot_alloc+0x57/0x210 [ 134.325983][ T5019] sk_alloc+0x2f/0x310 [ 134.330148][ T5019] inet_create+0x728/0xef0 [ 134.334561][ T5019] __sock_create+0x47b/0x900 [ 134.339151][ T5019] __sys_socket+0xe2/0x170 [ 134.343583][ T5019] __x64_sys_socket+0x76/0x80 [ 134.348453][ T5019] do_syscall_64+0x4c/0xa0 [ 134.352868][ T5019] page last free stack trace: [ 134.357521][ T5019] free_unref_page_prepare+0x637/0x6c0 [ 134.362968][ T5019] free_unref_page+0x94/0x280 [ 134.367632][ T5019] free_contig_range+0x96/0xf0 [ 134.372415][ T5019] destroy_args+0x100/0xa20 [ 134.376912][ T5019] debug_vm_pgtable+0x318/0x370 [ 134.381783][ T5019] do_one_initcall+0x1ee/0x680 [ 134.386568][ T5019] do_initcall_level+0x137/0x1f0 [ 134.391507][ T5019] do_initcalls+0x4b/0x90 [ 134.395818][ T5019] kernel_init_freeable+0x3ce/0x560 [ 134.401000][ T5019] kernel_init+0x19/0x1b0 [ 134.405334][ T5019] ret_from_fork+0x1f/0x30 [ 134.409747][ T5019] [ 134.412051][ T5019] Memory state around the buggy address: [ 134.417679][ T5019] ffff888060708380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 134.425793][ T5019] ffff888060708400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.434023][ T5019] >ffff888060708480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.442068][ T5019] ^ [ 134.447956][ T5019] ffff888060708500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.456027][ T5019] ffff888060708580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 134.464230][ T5019] ================================================================== [ 134.472497][ T5019] Disabling lock debugging due to kernel taint [ 134.539783][ T3577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.617552][ T3577] pvrusb2: Hardware description: Terratec Grabster AV400 [ 134.624610][ T3577] pvrusb2: ********** [ 134.639270][ T3577] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 134.666739][ T3577] pvrusb2: Important functionality might not be entirely working. [ 134.683599][ T3577] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 134.708518][ T3577] pvrusb2: ********** [ 134.760868][ T5019] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.768193][ T5019] CPU: 1 PID: 5019 Comm: syz.2.193 Tainted: G B syzkaller #0 [ 134.776878][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.786944][ T5019] Call Trace: [ 134.790227][ T5019] [ 134.793159][ T5019] dump_stack_lvl+0x168/0x230 [ 134.797860][ T5019] ? show_regs_print_info+0x20/0x20 [ 134.803081][ T5019] ? load_image+0x3b0/0x3b0 [ 134.807656][ T5019] panic+0x2c9/0x7f0 [ 134.811574][ T5019] ? bpf_jit_dump+0xd0/0xd0 [ 134.816107][ T5019] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 134.822015][ T5019] ? _raw_spin_unlock+0x40/0x40 [ 134.826880][ T5019] ? ax25_dev_device_down+0x35e/0x520 [ 134.832270][ T5019] check_panic_on_warn+0x80/0xa0 [ 134.837533][ T5019] ? ax25_dev_device_down+0x35e/0x520 [ 134.842954][ T5019] end_report+0x6d/0xf0 [ 134.847127][ T5019] kasan_report+0x102/0x130 [ 134.851880][ T5019] ? ax25_dev_device_down+0x35e/0x520 [ 134.855499][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 134.857245][ T5019] ? kfree+0xef/0x2a0 [ 134.857268][ T5019] kasan_check_range+0x27b/0x290 [ 134.867088][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 134.869450][ T5019] ax25_dev_device_down+0x35e/0x520 [ 134.875368][ T146] Bluetooth: hci1: hardware error 0x00 [ 134.881133][ T5019] ax25_device_event+0x4b4/0x4f0 [ 134.881160][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 134.881179][ T5019] dev_close_many+0x28d/0x400 [ 134.881200][ T5019] ? _raw_spin_unlock+0x40/0x40 [ 134.881218][ T5019] ? __dev_open+0x420/0x420 [ 134.881237][ T5019] ? bond_netdev_event+0x159/0xea0 [ 134.881257][ T5019] ? try_to_del_timer_sync+0x165/0x1b0 [ 134.881278][ T5019] dev_close+0x14c/0x200 [ 134.881298][ T5019] ? __dev_close_many+0x2a0/0x2a0 [ 134.881317][ T5019] ? macvlan_device_event+0x10b/0x930 [ 134.881342][ T5019] bpq_device_event+0x2f4/0x9c0 [ 134.881359][ T5019] ? lockdep_rtnl_is_held+0x22/0x30 [ 134.881377][ T5019] ? team_device_event+0x11b/0x9e0 [ 134.881400][ T5019] raw_notifier_call_chain+0xcb/0x160 [ 134.881420][ T5019] __dev_notify_flags+0x178/0x2d0 [ 134.881441][ T5019] ? __dev_change_flags+0x6a0/0x6a0 [ 134.881459][ T5019] ? __dev_change_flags+0x4bb/0x6a0 [ 134.881477][ T5019] ? dev_get_flags+0x1c0/0x1c0 [ 134.881493][ T5019] ? dev_ioctl+0x54e/0xe50 [ 134.881507][ T5019] ? dev_ioctl+0x54e/0xe50 [ 134.881522][ T5019] dev_change_flags+0xe3/0x1a0 [ 134.881541][ T5019] dev_ifsioc+0x147/0xe70 [ 134.881557][ T5019] ? dev_ioctl+0xe50/0xe50 [ 134.881572][ T5019] ? apparmor_capable+0x12c/0x190 [ 135.009425][ T5019] ? full_name_hash+0x8e/0xe0 [ 135.014092][ T5019] dev_ioctl+0x55f/0xe50 [ 135.018342][ T5019] ? _copy_from_user+0x111/0x170 [ 135.023263][ T5019] sock_do_ioctl+0x222/0x2f0 [ 135.027843][ T5019] ? sock_show_fdinfo+0xb0/0xb0 [ 135.032696][ T5019] sock_ioctl+0x4ed/0x6e0 [ 135.037013][ T5019] ? sock_poll+0x3f0/0x3f0 [ 135.041415][ T5019] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.046369][ T5019] ? security_file_ioctl+0x7c/0xa0 [ 135.051581][ T5019] ? sock_poll+0x3f0/0x3f0 [ 135.056002][ T5019] __se_sys_ioctl+0xfa/0x170 [ 135.060614][ T5019] do_syscall_64+0x4c/0xa0 [ 135.065016][ T5019] ? clear_bhb_loop+0x30/0x80 [ 135.069676][ T5019] ? clear_bhb_loop+0x30/0x80 [ 135.074335][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.080225][ T5019] RIP: 0033:0x7efd73492749 [ 135.084627][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.104234][ T5019] RSP: 002b:00007efd716d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.112640][ T5019] RAX: ffffffffffffffda RBX: 00007efd736e9090 RCX: 00007efd73492749 [ 135.120605][ T5019] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000008 [ 135.128688][ T5019] RBP: 00007efd73516f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.136659][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.144629][ T5019] R13: 00007efd736e9128 R14: 00007efd736e9090 R15: 00007ffcc3f1fe18 [ 135.152600][ T5019] [ 135.155967][ T5019] Kernel Offset: disabled [ 135.160292][ T5019] Rebooting in 86400 seconds..