last executing test programs: 20.995922611s ago: executing program 4 (id=697): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 18.506186025s ago: executing program 4 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000479000/0x1000)=nil, 0x9000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, r1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'vlan1\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x82) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 16.637298168s ago: executing program 0 (id=706): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29) 16.384895853s ago: executing program 0 (id=708): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000500)='.\x00'}, 0x66) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r6, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x3314) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) 16.321837549s ago: executing program 1 (id=711): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f00000001c0)) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x1005}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 15.215851757s ago: executing program 0 (id=713): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0xa, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 15.08760449s ago: executing program 0 (id=714): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 14.964338622s ago: executing program 4 (id=716): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000400), 0x90200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2001c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 13.619124314s ago: executing program 4 (id=717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1]}) 11.82569856s ago: executing program 0 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x1}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x2, 0x0, 0x40000}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x40585414, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 11.586176183s ago: executing program 2 (id=721): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r6, 0x0, 0x0) 11.51540623s ago: executing program 3 (id=722): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x8000) 11.468204815s ago: executing program 1 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.78333929s ago: executing program 3 (id=724): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000500)='.\x00'}, 0x66) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r6, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x3314) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) 9.433253855s ago: executing program 2 (id=725): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x14d241, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x8000000, 0x0, 0x3}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x100000000, 0x1, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f0000000080)={0x6, 0x9}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xf6c447fee59241f0}) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3}}) 9.345955163s ago: executing program 3 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000479000/0x1000)=nil, 0x9000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, r1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'vlan1\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x82) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 9.129704424s ago: executing program 1 (id=727): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 5.253002265s ago: executing program 2 (id=728): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 4.728018876s ago: executing program 1 (id=729): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 4.657260683s ago: executing program 2 (id=730): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 3.918780966s ago: executing program 4 (id=731): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 3.751355942s ago: executing program 3 (id=732): socket$vsock_stream(0x28, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r1, 0x0, 0x0) 3.594395247s ago: executing program 1 (id=733): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r5, 0x0, 0x0) 2.284567656s ago: executing program 3 (id=734): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x8000) 2.283434046s ago: executing program 2 (id=735): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r6, 0x0, 0x0) 530.434108ms ago: executing program 4 (id=736): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000500)='.\x00'}, 0x66) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r6, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x3314) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) 504.451821ms ago: executing program 1 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 337.919077ms ago: executing program 0 (id=738): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x14d241, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x8000000, 0x0, 0x3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x100000000, 0x1, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xf6c447fee59241f0}) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x3}}) 195.872421ms ago: executing program 3 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=740): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 52.256981][ T4253] cgroup: Unknown subsys name 'net' [ 52.406090][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.700213][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.963397][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.974751][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.980859][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.982630][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.989252][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.996626][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.005039][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.010823][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.017413][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.024358][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.031877][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.038174][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.045026][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.053502][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.058936][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.066120][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.074454][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.081227][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.094787][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.102555][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.109924][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.113400][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.117690][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.124587][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.139954][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.148543][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.169571][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.176860][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.216803][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.224151][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.627879][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 55.656970][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.670272][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.684423][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 55.740075][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 55.854669][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.861845][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.869923][ T4266] device bridge_slave_0 entered promiscuous mode [ 55.890669][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.897789][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.905962][ T4268] device bridge_slave_0 entered promiscuous mode [ 55.924914][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.932098][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.939690][ T4266] device bridge_slave_1 entered promiscuous mode [ 55.953667][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.960762][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.969185][ T4265] device bridge_slave_0 entered promiscuous mode [ 55.976678][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.983901][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.991906][ T4268] device bridge_slave_1 entered promiscuous mode [ 56.020043][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.027327][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.035182][ T4275] device bridge_slave_0 entered promiscuous mode [ 56.042841][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.049919][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.057694][ T4265] device bridge_slave_1 entered promiscuous mode [ 56.077339][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.084915][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.093126][ T4274] device bridge_slave_0 entered promiscuous mode [ 56.106962][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.114220][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.122411][ T4275] device bridge_slave_1 entered promiscuous mode [ 56.144563][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.153793][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.160894][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.169549][ T4274] device bridge_slave_1 entered promiscuous mode [ 56.177818][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.197534][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.209108][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.219521][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.239038][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.249305][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.260148][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.320348][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.339314][ T4275] team0: Port device team_slave_0 added [ 56.353018][ T4268] team0: Port device team_slave_0 added [ 56.360449][ T4265] team0: Port device team_slave_0 added [ 56.368902][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.379627][ T4266] team0: Port device team_slave_0 added [ 56.386819][ T4275] team0: Port device team_slave_1 added [ 56.393926][ T4265] team0: Port device team_slave_1 added [ 56.408517][ T4268] team0: Port device team_slave_1 added [ 56.429459][ T4266] team0: Port device team_slave_1 added [ 56.474377][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.481681][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.507781][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.520284][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.527738][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.553893][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.566906][ T4274] team0: Port device team_slave_0 added [ 56.581052][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.588098][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.614328][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.633918][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.640859][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.667034][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.678636][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.685655][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.711720][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.723712][ T4274] team0: Port device team_slave_1 added [ 56.733744][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.740689][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.767019][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.778441][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.785716][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.812041][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.838024][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.847684][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.873736][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.929956][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.937705][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.964134][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.976881][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.983908][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.009952][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.036836][ T4275] device hsr_slave_0 entered promiscuous mode [ 57.043485][ T4275] device hsr_slave_1 entered promiscuous mode [ 57.063773][ T4268] device hsr_slave_0 entered promiscuous mode [ 57.070371][ T4268] device hsr_slave_1 entered promiscuous mode [ 57.077678][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.085503][ T4268] Cannot create hsr debugfs directory [ 57.095738][ T4265] device hsr_slave_0 entered promiscuous mode [ 57.102344][ T4265] device hsr_slave_1 entered promiscuous mode [ 57.108808][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.116662][ T4265] Cannot create hsr debugfs directory [ 57.166597][ T4266] device hsr_slave_0 entered promiscuous mode [ 57.173490][ T4266] device hsr_slave_1 entered promiscuous mode [ 57.179945][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.187747][ T4266] Cannot create hsr debugfs directory [ 57.205060][ T4274] device hsr_slave_0 entered promiscuous mode [ 57.211994][ T4274] device hsr_slave_1 entered promiscuous mode [ 57.218461][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.226249][ T4274] Cannot create hsr debugfs directory [ 57.232542][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 57.232553][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 57.244760][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 57.311328][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 57.311608][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 57.534383][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.556655][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.568855][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.580520][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.620213][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.629539][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.655054][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.670280][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.679976][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.690454][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.717424][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.728044][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.803009][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.827470][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.836930][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.846399][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.901832][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.925491][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.937713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.947524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.976533][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.993946][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.004000][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.014144][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.023241][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.032974][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.040615][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.068007][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.077206][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.086189][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.093554][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.102892][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.124992][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.146562][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.156004][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.165316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.173909][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.181187][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.190070][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.199604][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.208233][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.215352][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.223235][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.232048][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.240343][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.247430][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.255112][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.263903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.272716][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.281324][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.290599][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.299416][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.307772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.316144][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.324511][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.332972][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.341177][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.349126][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.375677][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.402635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.414068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.425217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.433981][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.442780][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.451424][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.459979][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.468642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.477239][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.486108][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.495148][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.506324][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.530540][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.547326][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.572280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.588938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.599557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.614909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.624662][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.631749][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.639424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.648264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.656720][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.663830][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.677533][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.694046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.736185][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.762498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.781854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.802617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.816939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.829765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.840108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.851079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.897117][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.906740][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.915568][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.925902][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.934991][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.943600][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.951919][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.960431][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.969257][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.976376][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.984455][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.994981][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.003747][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.010832][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.019728][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.028224][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.043471][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.057585][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.075646][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.087522][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.107405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.116711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.126139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.135743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.146154][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.159309][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.174758][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.183254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.225844][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.237440][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.266904][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.281856][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.293656][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.305351][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.312516][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.320490][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 59.328024][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 59.328037][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 59.334699][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.349878][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.358644][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.365772][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.373895][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.381429][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.388872][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.397632][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 59.401847][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 59.404635][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.418170][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.426875][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.449732][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.485316][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.509293][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.529484][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.548803][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.565318][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.577632][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.589549][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.598848][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.628892][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.639507][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.648227][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.657815][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.688475][ T4275] device veth0_vlan entered promiscuous mode [ 59.708510][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.732835][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.750039][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.758232][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.772577][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.780932][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.798079][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.808061][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.820671][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.832726][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.856362][ T4275] device veth1_vlan entered promiscuous mode [ 59.906068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.932934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.992747][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.013149][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.036608][ T4275] device veth0_macvtap entered promiscuous mode [ 60.054023][ T4274] device veth0_vlan entered promiscuous mode [ 60.063054][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.076573][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.088602][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.100078][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.118707][ T4275] device veth1_macvtap entered promiscuous mode [ 60.139445][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.150706][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.166831][ T4274] device veth1_vlan entered promiscuous mode [ 60.195638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.206961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.217706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.230414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.247095][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.267573][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.281870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.290443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.300496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.308323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.315922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.325317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.343624][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.363815][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.377836][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.387351][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.397123][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.412316][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.420858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.429347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.436981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.447268][ T4274] device veth0_macvtap entered promiscuous mode [ 60.466254][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.477719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.486482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.496878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.505928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.515668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.524123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.531916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.540055][ T4274] device veth1_macvtap entered promiscuous mode [ 60.558770][ T4268] device veth0_vlan entered promiscuous mode [ 60.601842][ T4268] device veth1_vlan entered promiscuous mode [ 60.616058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.625627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.634125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.642299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.650365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.680046][ T4265] device veth0_vlan entered promiscuous mode [ 60.687050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.695209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.718748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.730047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.764578][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.776363][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.788653][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.798579][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.809244][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.820685][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.828776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.839321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.847830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.856805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.865751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.874437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.886569][ T4268] device veth0_macvtap entered promiscuous mode [ 60.896435][ T4265] device veth1_vlan entered promiscuous mode [ 60.903352][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.916975][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.926943][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.929564][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.945157][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.953969][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.977210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.985545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.995604][ T4268] device veth1_macvtap entered promiscuous mode [ 61.018340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.026748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.035092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.051968][ T4265] device veth0_macvtap entered promiscuous mode [ 61.068327][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.079654][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.090277][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.101852][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.112996][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.127631][ T4266] device veth0_vlan entered promiscuous mode [ 61.136637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.144980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.154186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.166326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.174944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.184417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.193301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.205837][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.217186][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.227172][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.238156][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.249086][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.259344][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.268140][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.278463][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.288118][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299237][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.307482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.316123][ T4265] device veth1_macvtap entered promiscuous mode [ 61.328202][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.336420][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.346779][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.355752][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.391381][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 61.391396][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 61.391422][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 61.400464][ T4266] device veth1_vlan entered promiscuous mode [ 61.432460][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.450736][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.461749][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.472588][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.472651][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 61.483439][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 61.489187][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.505180][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.517265][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.564996][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.590088][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.599019][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.607932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.619849][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.631337][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.643149][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.654945][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.664263][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.670509][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.691656][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.703114][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.726928][ T4266] device veth0_macvtap entered promiscuous mode [ 61.743193][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.761763][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.770168][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.780361][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.808522][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818505][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.826212][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835249][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.844240][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.854446][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.856781][ T4266] device veth1_macvtap entered promiscuous mode [ 61.868512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 61.885633][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.933735][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.948677][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.960902][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.986897][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.030080][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.053898][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.076725][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.092997][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.104118][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.117044][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.128883][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.143909][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.155972][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.177754][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.187976][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.195724][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.203324][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.216045][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.225352][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.236591][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.246614][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.265167][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.282830][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.298373][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.309181][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.320624][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.331239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 62.342497][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.354279][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.368286][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.381968][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.403006][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.416054][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.431856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.440168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.507429][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.537422][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.564698][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.588268][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.606577][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.647981][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.656938][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.708535][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.770286][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.837392][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.930328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.940321][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.949070][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.960345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.986980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.471808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.471957][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 63.486148][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 63.486177][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 63.551836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.560153][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 63.567258][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 63.791434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.799674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.580024][ T4401] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 64.689895][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.703472][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.720571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.881717][ T41] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.094024][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 65.126295][ T41] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 65.837649][ T41] usb 3-1: config 0 has no interface number 0 [ 65.873366][ T41] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 65.888414][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.897000][ T41] usb 3-1: Product: syz [ 65.901232][ T41] usb 3-1: Manufacturer: syz [ 65.906788][ T41] usb 3-1: SerialNumber: syz [ 65.919096][ T41] usb 3-1: config 0 descriptor?? [ 65.927933][ T41] hub 3-1:0.132: bad descriptor, ignoring hub [ 65.927965][ T41] hub: probe of 3-1:0.132 failed with error -5 [ 65.930202][ T41] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input5 [ 66.282150][ T4356] usb 3-1: USB disconnect, device number 2 [ 67.702743][ T4442] ubi31: attaching mtd0 [ 67.714225][ T4442] ubi31: scanning is finished [ 67.719491][ T4442] ubi31: empty MTD device detected [ 67.926772][ T4442] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 67.934489][ T4442] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 67.942088][ T4442] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 67.949527][ T4442] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 67.959200][ T4442] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 67.966660][ T4442] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 67.974997][ T4442] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 119116316 [ 67.986239][ T4442] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 67.997358][ T4453] ubi31: background thread "ubi_bgt31d" started, PID 4453 [ 68.131315][ T4348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.061202][ T4348] usb 5-1: Using ep0 maxpacket: 32 [ 69.068523][ T4348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 69.123625][ T4348] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 69.156606][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 69.219397][ T4348] usb 5-1: Product: syz [ 69.261705][ T4348] usb 5-1: Manufacturer: syz [ 69.283289][ T4348] usb 5-1: SerialNumber: syz [ 69.295234][ T4348] usb 5-1: config 0 descriptor?? [ 69.302034][ T4450] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.158981][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.165645][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.010529][ T7] usb 5-1: USB disconnect, device number 2 [ 75.701272][ T4510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.805249][ T4510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.866530][ T4510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.274414][ T14] cfg80211: failed to load regulatory.db [ 77.747253][ T4523] random: crng reseeded on system resumption [ 79.892443][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.088687][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.109387][ T4564] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 80.116079][ T4564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.125428][ T4564] vhci_hcd vhci_hcd.0: Device attached [ 80.151472][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.177266][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.299286][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 80.441339][ T125] usb 36-1: SetAddress Request (2) to port 0 [ 80.447658][ T125] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.306396][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 83.726898][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 83.835557][ T4610] device team_slave_0 entered promiscuous mode [ 83.841889][ T4610] device team_slave_1 entered promiscuous mode [ 83.848110][ T4610] device macsec1 entered promiscuous mode [ 83.853862][ T4610] device team0 entered promiscuous mode [ 83.860216][ T4610] team0: Device macsec1 is already an upper device of the team interface [ 83.886872][ T4610] device team0 left promiscuous mode [ 83.893307][ T4610] device team_slave_0 left promiscuous mode [ 83.899204][ T4610] device team_slave_1 left promiscuous mode [ 84.000701][ T4617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 87.081930][ T4636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.204660][ T4628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 88.834431][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 90.275011][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 90.756950][ T4653] netlink: 'syz.2.80': attribute type 5 has an invalid length. [ 91.224496][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.303491][ T4663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.310279][ T4669] tipc: Can't bind to reserved service type 1 [ 92.795360][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 92.815487][ T4675] sp0: Synchronizing with TNC [ 94.641067][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 97.301129][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 97.612923][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 97.817738][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 97.927498][ T4712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 99.775186][ T4724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 101.580301][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 101.632198][ T4731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.653494][ T4731] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.710046][ T4731] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 101.725803][ T4731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.740482][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 101.749564][ T4731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.812941][ T4731] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 101.856053][ T4731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.867334][ T4731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.940223][ T4731] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 101.965597][ T4731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.981344][ T4731] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.007454][ T4731] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 102.016519][ T4731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.031309][ T4731] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.048849][ T4731] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 102.671299][ T41] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.705978][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 102.831224][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.861215][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 102.869520][ T41] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 102.928288][ T41] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.967975][ T41] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.993212][ T41] usb 4-1: Product: syz [ 103.007431][ T41] usb 4-1: Manufacturer: syz [ 103.019677][ T41] usb 4-1: SerialNumber: syz [ 103.054581][ T41] usb 4-1: config 0 descriptor?? [ 103.072635][ T4756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.475252][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 103.791421][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.871219][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.031248][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.037390][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.911150][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 104.988234][ T4334] usb 4-1: USB disconnect, device number 2 [ 105.088648][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 105.256041][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 105.871556][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 105.951223][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 106.121248][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 106.127285][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 106.191902][ T4789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.198113][ T4789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.279796][ T4789] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 106.306300][ T4792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 106.311273][ T4789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.326092][ T4789] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.368457][ T4789] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 106.403123][ T4789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.442701][ T4789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.463467][ T4789] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 106.574165][ T4789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.610412][ T4789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.623084][ T4789] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 106.633671][ T4789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.639900][ T4789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.653397][ T4789] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 106.734338][ T4800] ubi: mtd0 is already attached to ubi31 [ 107.702825][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 107.722252][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.111208][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.351253][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.431220][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.591244][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.671195][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.232283][ T4822] random: crng reseeded on system resumption [ 110.191306][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 110.265756][ T4826] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 110.431180][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 110.511262][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 110.671236][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 110.751336][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 110.758406][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 110.863396][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'. [ 111.219469][ T4844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.226046][ T4844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.240282][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 111.251396][ T4844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.266086][ T4844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.288035][ T4844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.827450][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 113.161180][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.241308][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.321312][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.321334][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.327437][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.774233][ T4874] Zero length message leads to an empty skb [ 115.231172][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 116.478535][ T4889] sp0: Synchronizing with TNC [ 117.146131][ T4890] ubi: mtd0 is already attached to ubi31 [ 117.565712][ T4887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 117.618488][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 118.136338][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 118.247534][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.160858][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.261579][ T4904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.551203][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.603524][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.753761][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 119.761057][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.893380][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.402239][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.410441][ T7] usb 1-1: Product: syz [ 121.414880][ T7] usb 1-1: Manufacturer: syz [ 121.419465][ T7] usb 1-1: SerialNumber: syz [ 121.430860][ T7] usb 1-1: config 0 descriptor?? [ 121.437009][ T4920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.280999][ T4312] usb 1-1: USB disconnect, device number 2 [ 122.565265][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 122.835418][ T4944] sp0: Synchronizing with TNC [ 123.756830][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 123.973268][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 126.739040][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 129.452654][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 129.795481][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 130.282030][ T4993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.184'. [ 131.143550][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 131.417874][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 132.593988][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.600378][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892496][ T5014] autofs4:pid:5014:autofs_fill_super: called with bogus options [ 136.385379][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 136.471196][ T4389] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.981255][ T4389] usb 2-1: Using ep0 maxpacket: 32 [ 138.328516][ T4389] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.427051][ T4389] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.335104][ T4389] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.637471][ T4389] usb 2-1: Product: syz [ 139.642046][ T4389] usb 2-1: Manufacturer: syz [ 139.646747][ T4389] usb 2-1: SerialNumber: syz [ 139.654617][ T4389] usb 2-1: config 0 descriptor?? [ 139.727111][ T4389] usb 2-1: can't set config #0, error -71 [ 139.734479][ T4389] usb 2-1: USB disconnect, device number 2 [ 139.903484][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 139.920775][ T5058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.989982][ T5058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.049566][ T5058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.230740][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 140.266456][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.287980][ T5061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.523830][ T5067] autofs4:pid:5067:autofs_fill_super: called with bogus options [ 142.805472][ T5085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 144.441155][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 145.691200][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.401144][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 146.409605][ T4319] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 146.472643][ T4319] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.506062][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.535379][ T4319] usb 3-1: Product: syz [ 146.546518][ T4319] usb 3-1: Manufacturer: syz [ 146.560636][ T4319] usb 3-1: SerialNumber: syz [ 146.598373][ T4319] usb 3-1: config 0 descriptor?? [ 146.604007][ T5095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.780448][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 147.361343][ T4334] usb 3-1: USB disconnect, device number 3 [ 147.381803][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.478853][ T5114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.058915][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.616562][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 154.259530][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 157.444831][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.404358][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 158.418089][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.425987][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.436929][ T5172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.534100][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.570805][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.069017][ T5213] syz.2.246 uses obsolete (PF_INET,SOCK_PACKET) [ 163.250818][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 165.192433][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 165.905720][ T5247] tipc: Enabling of bearer rejected, failed to enable media [ 166.032238][ T5252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.102854][ T5252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.179469][ T5252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.475000][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 171.747666][ T5289] tipc: Enabling of bearer rejected, failed to enable media [ 171.981598][ T4382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.184524][ T5300] device team_slave_0 entered promiscuous mode [ 172.190765][ T5300] device team_slave_1 entered promiscuous mode [ 172.197269][ T5300] device macsec1 entered promiscuous mode [ 172.203179][ T5300] device team0 entered promiscuous mode [ 172.212676][ T5300] team0: Device macsec1 is already an upper device of the team interface [ 172.261304][ T4382] usb 4-1: Using ep0 maxpacket: 32 [ 172.288561][ T4382] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 172.718494][ T4382] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.771581][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.807950][ T4382] usb 4-1: Product: syz [ 172.844622][ T4382] usb 4-1: Manufacturer: syz [ 172.869600][ T4382] usb 4-1: SerialNumber: syz [ 172.961551][ T4382] usb 4-1: config 0 descriptor?? [ 172.982113][ T5290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.198146][ T5300] device team0 left promiscuous mode [ 173.345183][ T5300] device team_slave_0 left promiscuous mode [ 173.351417][ T5300] device team_slave_1 left promiscuous mode [ 173.621354][ T14] usb 4-1: USB disconnect, device number 3 [ 173.678564][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 174.114079][ T5325] ubi: mtd0 is already attached to ubi31 [ 177.304656][ T5346] tipc: Enabling of bearer rejected, failed to enable media [ 178.201674][ T5361] ubi: mtd0 is already attached to ubi31 [ 178.788166][ T5368] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.289'. [ 179.156304][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 182.382450][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 182.530061][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 185.182356][ T5407] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.302'. [ 185.412828][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 185.854508][ T5416] sp0: Synchronizing with TNC [ 188.887140][ T5427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 189.113836][ T5434] autofs4:pid:5434:autofs_fill_super: called with bogus options [ 189.449141][ T5445] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.314'. [ 189.564706][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 190.178185][ T5460] sp0: Synchronizing with TNC [ 191.135825][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 191.197017][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.230936][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.247557][ T5465] autofs4:pid:5465:autofs_fill_super: called with bogus options [ 191.307388][ T5463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.697276][ T5475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 193.648428][ T5485] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.330'. [ 194.038592][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.048260][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.073937][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 195.454534][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 197.182652][ T5510] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 197.189211][ T5510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.197207][ T5510] vhci_hcd vhci_hcd.0: Device attached [ 197.265884][ T5515] vhci_hcd: connection closed [ 197.268124][ T46] vhci_hcd: stop threads [ 197.524330][ T46] vhci_hcd: release socket [ 197.621800][ T46] vhci_hcd: disconnect device [ 198.716793][ T5529] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.342'. [ 199.093592][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 199.110674][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 199.118291][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 199.546225][ T5535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.572668][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.343'. [ 199.611664][ T5525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 199.760025][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 201.381971][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 201.581457][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 201.598749][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.745381][ T5568] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.355'. [ 201.757496][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.878823][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 201.901490][ T5570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.944581][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 201.976274][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.993593][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.006723][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.015937][ T5571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.078321][ T14] usbtmc: probe of 5-1:16.0 failed with error -22 [ 202.082107][ T5570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.413427][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 202.772369][ T5585] vivid-001: ================= START STATUS ================= [ 202.784219][ T5585] vivid-001: Radio HW Seek Mode: Bounded [ 202.906089][ T5585] vivid-001: Radio Programmable HW Seek: false [ 202.920870][ T5585] vivid-001: RDS Rx I/O Mode: Block I/O [ 202.941190][ T5585] vivid-001: Generate RBDS Instead of RDS: false [ 202.977137][ T5585] vivid-001: RDS Reception: true [ 202.989592][ T5585] vivid-001: RDS Program Type: 0 inactive [ 203.039401][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 203.059823][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.080877][ T5585] vivid-001: RDS PS Name: [ 203.087103][ T5585] [ 203.979583][ T5589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.000278][ T5585] inactive [ 204.004991][ T5585] vivid-001: RDS Radio Text: inactive [ 204.036993][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 204.055517][ T5585] [ 204.123345][ T5585] vivid-001: RDS Traffic Announcement: false inactive [ 204.176527][ T5585] vivid-001: RDS Traffic Program: false inactive [ 204.185400][ T5585] vivid-001: RDS Music: false inactive [ 204.190943][ T5585] vivid-001: ================== END STATUS ================== [ 204.203766][ T4319] usb 5-1: USB disconnect, device number 3 [ 205.266090][ T5620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.396762][ T5620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.470976][ T5614] binder: 5613:5614 ioctl 8008f512 0 returned -22 [ 205.784262][ T5625] ubi: mtd0 is already attached to ubi31 [ 206.574298][ T5632] binder: 5627:5632 ioctl c06864a1 200000000680 returned -22 [ 206.582803][ T5632] binder: 5627:5632 ioctl c06864ce 200000000600 returned -22 [ 206.593375][ T5632] random: crng reseeded on system resumption [ 206.646626][ T5633] binder: 5627:5633 ioctl c06864b8 2000000001c0 returned -22 [ 206.655578][ T5633] binder: 5627:5633 ioctl c04064a0 200000000a40 returned -22 [ 206.663822][ T5633] binder: 5627:5633 ioctl 80089203 200000000080 returned -22 [ 208.494637][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 208.751209][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 208.760459][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.800267][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.838899][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.864584][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.884695][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 208.897871][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.901512][ T5649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.941709][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.104001][ T5649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.167749][ T14] usb 1-1: usb_control_msg returned -32 [ 209.184746][ T14] usbtmc 1-1:16.0: can't read capabilities [ 209.208113][ T14] usb 1-1: USB disconnect, device number 3 [ 209.698284][ T5646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.718720][ T5646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.730770][ T5646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.741437][ T5646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.748213][ T5646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.795893][ T5664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.831226][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.896872][ T5664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.919629][ T5664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.290266][ T5677] random: crng reseeded on system resumption [ 211.791338][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.797409][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.803609][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.809623][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.112972][ T5676] vivid-004: ================= START STATUS ================= [ 212.120764][ T5676] vivid-004: Radio HW Seek Mode: Bounded [ 212.130598][ T5676] vivid-004: Radio Programmable HW Seek: false [ 212.137862][ T5676] vivid-004: RDS Rx I/O Mode: Block I/O [ 212.155943][ T5676] vivid-004: Generate RBDS Instead of RDS: false [ 212.300745][ T5676] vivid-004: RDS Reception: true [ 212.308481][ T5676] vivid-004: RDS Program Type: 0 inactive [ 212.368114][ T5676] vivid-004: RDS PS Name: inactive [ 212.448588][ T5686] ubi: mtd0 is already attached to ubi31 [ 212.532542][ T5676] vivid-004: RDS Radio Text: inactive [ 212.747187][ T5676] vivid-004: RDS Traffic Announcement: false inactive [ 212.779371][ T5676] vivid-004: RDS Traffic Program: false inactive [ 212.797096][ T5676] vivid-004: RDS Music: false inactive [ 212.804190][ T5676] vivid-004: ================== END STATUS ================== [ 213.201769][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 213.391193][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 213.398945][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.445964][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.331124][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.341732][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.355250][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.396476][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.648705][ T14] usb 1-1: usb_control_msg returned -32 [ 214.658591][ T14] usbtmc 1-1:16.0: can't read capabilities [ 214.695871][ T14] usb 1-1: USB disconnect, device number 4 [ 214.843719][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.929650][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.982919][ T5717] random: crng reseeded on system resumption [ 216.565617][ T5720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.294651][ T5733] device bridge1 entered promiscuous mode [ 218.471846][ T26] audit: type=1326 audit(2000000039.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 218.857102][ T26] audit: type=1326 audit(2000000039.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 218.879269][ T26] audit: type=1326 audit(2000000040.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 218.901243][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.907378][ T26] audit: type=1326 audit(2000000040.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 218.992865][ T26] audit: type=1326 audit(2000000040.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 219.109973][ T26] audit: type=1326 audit(2000000040.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 219.171217][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 219.210616][ T26] audit: type=1326 audit(2000000040.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 219.251207][ T4389] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.781352][ T4389] usb 1-1: Using ep0 maxpacket: 8 [ 219.788429][ T4389] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.802873][ T26] audit: type=1326 audit(2000000000.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 219.831179][ T4389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.881135][ T4389] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.897521][ T4389] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.916987][ T26] audit: type=1326 audit(2000000000.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 219.954962][ T4389] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.041678][ T5767] random: crng reseeded on system resumption [ 220.150749][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.178874][ T26] audit: type=1326 audit(2000000000.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb5ad18efc9 code=0x7ffc0000 [ 220.201088][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.258715][ T4389] usb 1-1: usb_control_msg returned -32 [ 221.271565][ T4389] usbtmc 1-1:16.0: can't read capabilities [ 221.382194][ T4389] usb 1-1: USB disconnect, device number 5 [ 221.515981][ T5774] vivid-002: ================= START STATUS ================= [ 221.536099][ T5774] vivid-002: Radio HW Seek Mode: Bounded [ 221.551545][ T5774] vivid-002: Radio Programmable HW Seek: false [ 221.674332][ T5774] vivid-002: RDS Rx I/O Mode: Block I/O [ 221.701260][ T5774] vivid-002: Generate RBDS Instead of RDS: false [ 221.709102][ T5774] vivid-002: RDS Reception: true [ 221.730705][ T5774] vivid-002: RDS Program Type: 0 inactive [ 221.746348][ T5774] vivid-002: RDS PS Name: inactive [ 222.521563][ T5774] vivid-002: RDS Radio Text: inactive [ 222.552492][ T5774] vivid-002: RDS Traffic Announcement: [ 222.590726][ T5786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.608431][ T5774] false inactive [ 222.614837][ T5774] vivid-002: RDS Traffic Program: false inactive [ 222.622207][ T5774] vivid-002: RDS Music: false inactive [ 222.629844][ T5774] vivid-002: ================== END STATUS ================== [ 222.675914][ T5786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.713996][ T5786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.055742][ T5778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.074347][ T5778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.080983][ T5778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.100111][ T5778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.106421][ T5778] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.631311][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.161269][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.161364][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.174268][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.180370][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.661125][ T4312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 227.491258][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 227.524496][ T4312] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.541303][ T4312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.553174][ T4312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.572301][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 227.608066][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 227.643829][ T4312] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.085452][ T4312] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.108904][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.348883][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 228.716817][ T4312] usb 5-1: usb_control_msg returned -71 [ 228.726314][ T4312] usbtmc 5-1:16.0: can't read capabilities [ 228.752463][ T4312] usb 5-1: USB disconnect, device number 4 [ 229.128785][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 232.110168][ T5880] random: crng reseeded on system resumption [ 232.971384][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 233.324358][ T5893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 233.535598][ T5894] vivid-001: ================= START STATUS ================= [ 233.545406][ T5894] vivid-001: Radio HW Seek Mode: Bounded [ 233.557019][ T5894] vivid-001: Radio Programmable HW Seek: false [ 233.572359][ T5894] vivid-001: RDS Rx I/O Mode: Block I/O [ 233.577981][ T5894] vivid-001: Generate RBDS Instead of RDS: false [ 234.008232][ T5894] vivid-001: RDS Reception: true [ 234.024009][ T5894] vivid-001: RDS Program Type: 0 inactive [ 234.065104][ T5894] vivid-001: RDS PS Name: inactive [ 234.116143][ T5894] vivid-001: RDS Radio Text: inactive [ 234.129769][ T5894] vivid-001: RDS Traffic Announcement: false inactive [ 234.137508][ T5894] vivid-001: RDS Traffic Program: false inactive [ 234.151817][ T5894] vivid-001: RDS Music: false inactive [ 234.162601][ T5894] vivid-001: ================== END STATUS ================== [ 234.261237][ T4392] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 234.325456][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 235.341887][ T4392] usb 2-1: Using ep0 maxpacket: 8 [ 235.897934][ T4392] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.853095][ T4392] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.863505][ T4392] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.873694][ T4392] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.887274][ T4392] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.897136][ T4392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.981180][ T4392] usb 2-1: can't set config #16, error -71 [ 237.087348][ T4392] usb 2-1: USB disconnect, device number 3 [ 237.265941][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 237.588200][ T5938] random: crng reseeded on system resumption [ 239.724195][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 241.339828][ T5954] device team_slave_0 entered promiscuous mode [ 241.346096][ T5954] device team_slave_1 entered promiscuous mode [ 241.352558][ T5954] device macsec1 entered promiscuous mode [ 241.358517][ T5954] device team0 entered promiscuous mode [ 241.368369][ T5954] team0: Device macsec1 is already an upper device of the team interface [ 241.502456][ T5954] device team0 left promiscuous mode [ 241.509188][ T5954] device team_slave_0 left promiscuous mode [ 241.515197][ T5954] device team_slave_1 left promiscuous mode [ 243.235686][ T5963] ubi: mtd0 is already attached to ubi31 [ 243.371966][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 243.831136][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 244.611101][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 244.620212][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.641085][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.652156][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.662406][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.679267][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.745328][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.043766][ T14] usb 2-1: usb_control_msg returned -32 [ 246.329007][ T14] usbtmc 2-1:16.0: can't read capabilities [ 246.345196][ T14] usb 2-1: USB disconnect, device number 4 [ 246.445073][ T5974] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 246.573757][ T5974] qnx6: wrong signature (magic) in superblock #1. [ 246.580223][ T5974] qnx6: unable to read the first superblock [ 246.845155][ T5989] vivid-003: ================= START STATUS ================= [ 246.861231][ T5989] vivid-003: Radio HW Seek Mode: Bounded [ 246.874551][ T5989] vivid-003: Radio Programmable HW Seek: false [ 246.881272][ T5989] vivid-003: RDS Rx I/O Mode: Block I/O [ 246.975215][ T5989] vivid-003: Generate RBDS Instead of RDS: false [ 247.095049][ T5989] vivid-003: RDS Reception: true [ 247.134476][ T5989] vivid-003: RDS Program Type: 0 inactive [ 247.194985][ T5989] vivid-003: RDS PS Name: inactive [ 247.227950][ T5989] vivid-003: RDS Radio Text: inactive [ 247.247992][ T5989] vivid-003: RDS Traffic Announcement: false inactive [ 247.256703][ T5989] vivid-003: RDS Traffic Program: false inactive [ 247.264044][ T5989] vivid-003: RDS Music: false inactive [ 247.276412][ T5989] vivid-003: ================== END STATUS ================== [ 247.794168][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 248.749857][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 250.071186][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.921238][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 250.928116][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.968429][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.998824][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.044884][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.068111][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.104417][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.335770][ T14] usb 4-1: GET_CAPABILITIES returned 0 [ 251.341340][ T14] usbtmc 4-1:16.0: can't read capabilities [ 251.545804][ T14] usb 4-1: USB disconnect, device number 4 [ 251.667621][ T6040] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 251.754089][ T6040] qnx6: wrong signature (magic) in superblock #1. [ 252.682678][ T6040] qnx6: unable to read the first superblock [ 252.961794][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 254.475078][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 254.534504][ T6065] sp0: Synchronizing with TNC [ 255.474143][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.480519][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.133100][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 256.601166][ T4389] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.431152][ T4389] usb 2-1: Using ep0 maxpacket: 8 [ 257.442256][ T4389] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.458231][ T4389] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.476204][ T4389] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.246993][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 258.387286][ T4389] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.400398][ T4389] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.409472][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.629674][ T4389] usb 2-1: GET_CAPABILITIES returned 0 [ 258.635309][ T4389] usbtmc 2-1:16.0: can't read capabilities [ 258.833633][ T4389] usb 2-1: USB disconnect, device number 5 [ 259.580599][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 261.731233][ T6147] sp0: Synchronizing with TNC [ 262.473317][ T6141] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 262.656551][ T6141] qnx6: wrong signature (magic) in superblock #1. [ 262.687729][ T6141] qnx6: unable to read the first superblock [ 262.703977][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 262.714759][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.731786][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 262.744047][ T6149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.903186][ T6161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.007141][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.025992][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.107659][ T6159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.155896][ T6159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.166622][ T6159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.175323][ T6159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.182267][ T6159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.791678][ T4382] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 264.567357][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 264.761124][ T4382] usb 3-1: Using ep0 maxpacket: 8 [ 265.071180][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.231302][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.231346][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.231389][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 265.250604][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.541620][ T4382] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.563760][ T4382] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.576768][ T4382] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.588129][ T4382] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.607251][ T4382] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.616661][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.904671][ T4382] usb 3-1: GET_CAPABILITIES returned 0 [ 266.478476][ T4382] usbtmc 3-1:16.0: can't read capabilities [ 266.520978][ T4382] usb 3-1: USB disconnect, device number 4 [ 266.971609][ T6203] vivid-002: ================= START STATUS ================= [ 266.981144][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 266.992151][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.003096][ T6202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.096113][ T6203] vivid-002: Radio HW Seek Mode: Bounded [ 267.113946][ T6203] vivid-002: Radio Programmable HW Seek: false [ 267.124040][ T6203] vivid-002: RDS Rx I/O Mode: Block I/O [ 267.174730][ T6203] vivid-002: Generate RBDS Instead of RDS: false [ 267.187159][ T6203] vivid-002: RDS Reception: true [ 267.193560][ T6203] vivid-002: RDS Program Type: 0 inactive [ 267.202545][ T6203] vivid-002: RDS PS Name: inactive [ 267.209525][ T6203] vivid-002: RDS Radio Text: inactive [ 267.216462][ T6203] vivid-002: RDS Traffic Announcement: false inactive [ 267.235330][ T6203] vivid-002: RDS Traffic Program: false inactive [ 267.260559][ T6203] vivid-002: RDS Music: false inactive [ 267.272555][ T6203] vivid-002: ================== END STATUS ================== [ 267.594742][ T6209] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 267.673247][ T6209] qnx6: wrong signature (magic) in superblock #1. [ 267.739787][ T6209] qnx6: unable to read the first superblock [ 267.768355][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 267.833988][ T6216] device syzkaller0 entered promiscuous mode [ 268.157423][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 268.168226][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.180589][ T6220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.264019][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.362926][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.395144][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.282903][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 270.393648][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 271.717175][ T6238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.731301][ T6238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.737455][ T6238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.743893][ T6238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.750072][ T6238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.351157][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.125824][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 273.459983][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.544'. [ 273.470316][ T6265] device team_slave_0 entered promiscuous mode [ 273.476518][ T6265] device team_slave_1 entered promiscuous mode [ 273.532918][ T6265] device macsec1 entered promiscuous mode [ 273.538738][ T6265] device team0 entered promiscuous mode [ 273.791247][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.797415][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.803488][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.809522][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.028463][ T6265] team0: Device macsec1 is already an upper device of the team interface [ 274.398104][ T6265] device team0 left promiscuous mode [ 274.460586][ T6265] device team_slave_0 left promiscuous mode [ 274.466601][ T6265] device team_slave_1 left promiscuous mode [ 274.647172][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.737636][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.785150][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.928245][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 274.939029][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.947276][ T6279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.365255][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 277.204668][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'. [ 277.512026][ T6303] sp0: Synchronizing with TNC [ 278.453881][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 279.651427][ T6316] device team_slave_0 entered promiscuous mode [ 279.657615][ T6316] device team_slave_1 entered promiscuous mode [ 280.511335][ T6316] device macsec1 entered promiscuous mode [ 280.525904][ T6316] device team0 entered promiscuous mode [ 280.540151][ T6316] team0: Device macsec1 is already an upper device of the team interface [ 280.556958][ T6316] device team0 left promiscuous mode [ 280.567018][ T6316] device team_slave_0 left promiscuous mode [ 280.572966][ T6316] device team_slave_1 left promiscuous mode [ 280.643879][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 280.658777][ T6334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.706991][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 280.717823][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.731410][ T6333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.799716][ T6331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.849522][ T6331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.013107][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.567'. [ 281.175712][ T6348] vivid-001: ================= START STATUS ================= [ 281.187003][ T6348] vivid-001: Radio HW Seek Mode: Bounded [ 281.192993][ T6348] vivid-001: Radio Programmable HW Seek: false [ 281.199341][ T6348] vivid-001: RDS Rx I/O Mode: Block I/O [ 281.208021][ T6348] vivid-001: Generate RBDS Instead of RDS: false [ 281.220069][ T6348] vivid-001: RDS Reception: true [ 281.255195][ T6348] vivid-001: RDS Program Type: 0 inactive [ 281.261221][ T6348] vivid-001: RDS PS Name: inactive [ 281.266695][ T6348] vivid-001: RDS Radio Text: inactive [ 281.275067][ T6348] vivid-001: RDS Traffic Announcement: false inactive [ 281.284149][ T6348] vivid-001: RDS Traffic Program: false inactive [ 281.290690][ T6348] vivid-001: RDS Music: false inactive [ 281.299651][ T6348] vivid-001: ================== END STATUS ================== [ 282.192227][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 284.516527][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 285.702747][ T6381] device team_slave_0 entered promiscuous mode [ 285.708943][ T6381] device team_slave_1 entered promiscuous mode [ 285.907446][ T6388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.992479][ T6388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.011333][ T6381] device macsec1 entered promiscuous mode [ 286.025199][ T6381] device team0 entered promiscuous mode [ 286.073370][ T6390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.444374][ T6381] team0: Device macsec1 is already an upper device of the team interface [ 286.562451][ T6381] device team0 left promiscuous mode [ 286.571863][ T6381] device team_slave_0 left promiscuous mode [ 286.577847][ T6381] device team_slave_1 left promiscuous mode [ 288.068191][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 289.369170][ T6405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.376305][ T6405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.383492][ T6405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.389664][ T6405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.415348][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 289.415755][ T6405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.556352][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 291.043464][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 291.352482][ T6442] sp0: Synchronizing with TNC [ 291.391145][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.397220][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.403285][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.409301][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.471090][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 292.331820][ T6437] device team_slave_0 entered promiscuous mode [ 292.338045][ T6437] device team_slave_1 entered promiscuous mode [ 292.371240][ T6437] device macsec1 entered promiscuous mode [ 292.393117][ T6437] device team0 entered promiscuous mode [ 292.405533][ T6437] team0: Device macsec1 is already an upper device of the team interface [ 292.456784][ T6437] device team0 left promiscuous mode [ 292.469165][ T6437] device team_slave_0 left promiscuous mode [ 292.475115][ T6437] device team_slave_1 left promiscuous mode [ 294.947984][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 295.075849][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.601'. [ 297.248918][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 297.259654][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.268323][ T6479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.756486][ T6489] sp0: Synchronizing with TNC [ 298.971632][ T6491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.993585][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 299.023887][ T6491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.041480][ T6491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.076133][ T6491] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.084335][ T6491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.557642][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 300.431119][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 301.071241][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.077348][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.083413][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.151095][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 304.239191][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 304.314174][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 305.373129][ T6547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.548754][ T6552] sp0: Synchronizing with TNC [ 306.241489][ T6547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.266114][ T6547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.300648][ T6544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.394568][ T6544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.412106][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 307.220069][ T6544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.241613][ T6544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.247783][ T6544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.391310][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.431195][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.045936][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 309.096118][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 309.241121][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.311250][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.311276][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.307082][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.389283][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.422579][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.501059][ T4312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 310.524913][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 311.424657][ T6607] random: crng reseeded on system resumption [ 311.520240][ T4312] usb 1-1: device descriptor read/64, error -71 [ 311.831165][ T4312] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 312.601142][ T4312] usb 1-1: device descriptor read/64, error -71 [ 312.837328][ T6619] random: crng reseeded on system resumption [ 312.909121][ T4312] usb usb1-port1: attempt power cycle [ 313.768206][ T6628] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 313.787193][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 313.801290][ T6628] qnx6: wrong signature (magic) in superblock #1. [ 313.829016][ T6628] qnx6: unable to read the first superblock [ 313.875991][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 315.250105][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 316.456844][ T6648] random: crng reseeded on system resumption [ 316.730747][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.887357][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.915603][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.918681][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.921930][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.325418][ T6671] sp0: Synchronizing with TNC [ 318.375427][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'. [ 319.986023][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 320.502046][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 321.491212][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 321.564564][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 322.367587][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.463042][ T4319] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 322.568006][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 322.630589][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 322.648633][ T6701] random: crng reseeded on system resumption [ 322.871062][ T4319] usb 3-1: Product: syz [ 322.916766][ T4319] usb 3-1: Manufacturer: syz [ 322.931147][ T4319] usb 3-1: SerialNumber: syz [ 322.974657][ T4319] usb 3-1: config 0 descriptor?? [ 323.685572][ T4319] usb 3-1: USB disconnect, device number 5 [ 323.854060][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.360759][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.615288][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'. [ 329.475064][ T6755] random: crng reseeded on system resumption [ 329.886390][ T6760] sp0: Synchronizing with TNC [ 330.271104][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 332.151083][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 333.482650][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 333.514020][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 335.007767][ T4319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 335.026344][ T4319] usb 4-1: can't read configurations, error -71 [ 335.134233][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 337.411720][ T6795] random: crng reseeded on system resumption [ 338.517668][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 338.676564][ T6815] device team_slave_0 entered promiscuous mode [ 338.682788][ T6815] device team_slave_1 entered promiscuous mode [ 338.689110][ T6815] device macsec1 entered promiscuous mode [ 338.694863][ T6815] device team0 entered promiscuous mode [ 338.701326][ T6815] team0: Device macsec1 is already an upper device of the team interface [ 338.716527][ T6815] device team0 left promiscuous mode [ 338.722144][ T6815] device team_slave_0 left promiscuous mode [ 338.728064][ T6815] device team_slave_1 left promiscuous mode [ 339.337009][ T6821] sp0: Synchronizing with TNC [ 339.651171][ T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 340.731181][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 340.741960][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 340.753570][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 340.765807][ T41] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 340.809638][ T41] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 340.819450][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 340.819779][ T41] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 340.838044][ T41] usb 4-1: Product: syz [ 340.843750][ T41] usb 4-1: Manufacturer: syz [ 340.848865][ T41] usb 4-1: SerialNumber: syz [ 342.480744][ T41] usb 4-1: config 0 descriptor?? [ 342.578421][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 342.609300][ T41] usb 4-1: can't set config #0, error -32 [ 342.653997][ T41] usb 4-1: USB disconnect, device number 7 [ 342.867703][ T6852] random: crng reseeded on system resumption [ 343.130640][ T6862] sp0: Synchronizing with TNC [ 343.937192][ T6865] usb usb8: usbfs: process 6865 (syz.0.713) did not claim interface 0 before use [ 344.130603][ T6870] device team_slave_0 entered promiscuous mode [ 344.137657][ T6870] device team_slave_1 entered promiscuous mode [ 344.144016][ T6870] device macsec1 entered promiscuous mode [ 344.149724][ T6870] device team0 entered promiscuous mode [ 344.156222][ T6870] team0: Device macsec1 is already an upper device of the team interface [ 344.196928][ T6870] device team0 left promiscuous mode [ 344.202594][ T6870] device team_slave_0 left promiscuous mode [ 344.208531][ T6870] device team_slave_1 left promiscuous mode [ 345.813479][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 347.493429][ T6894] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 347.843050][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'. [ 349.396156][ T6909] random: crng reseeded on system resumption [ 349.528504][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 349.550889][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.572740][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.633799][ T6902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.669202][ T6913] device bridge1 entered promiscuous mode [ 350.045010][ T6919] sp0: Synchronizing with TNC [ 354.539185][ T6930] device team_slave_0 entered promiscuous mode [ 354.545652][ T6930] device team_slave_1 entered promiscuous mode [ 354.552272][ T6930] device macsec1 entered promiscuous mode [ 354.558337][ T6930] device team0 entered promiscuous mode [ 354.565322][ T6930] team0: Device macsec1 is already an upper device of the team interface [ 354.575625][ T6930] device team0 left promiscuous mode [ 354.581379][ T6930] device team_slave_0 left promiscuous mode [ 354.587332][ T6930] device team_slave_1 left promiscuous mode [ 355.425262][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 356.042483][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 357.108322][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 358.833664][ T6957] random: crng reseeded on system resumption [ 358.949973][ T6958] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.737'. [ 358.979101][ T6961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.151134][ T27] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 359.169089][ T6966] sp0: Synchronizing with TNC [ 359.903769][ T27] Not tainted syzkaller #0 [ 359.908760][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.910595][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.919997][ T27] task:kworker/1:0 state:D stack:25936 pid:22 ppid:2 flags:0x00004000 [ 359.953998][ T27] Workqueue: usb_hub_wq hub_event [ 359.991668][ T27] Call Trace: [ 360.032160][ T27] [ 360.035227][ T27] __schedule+0x10ec/0x40b0 [ 360.039943][ T27] ? __sched_text_start+0x8/0x8 [ 360.045093][ T27] schedule+0xb9/0x180 [ 360.049829][ T27] schedule_preempt_disabled+0xf/0x20 [ 360.055483][ T27] __mutex_lock+0x555/0xaf0 [ 360.060113][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 360.065427][ T27] ? hub_event+0x21ee/0x54e0 [ 360.070221][ T27] ? mutex_lock_nested+0x10/0x10 [ 360.075360][ T27] ? hub_ext_port_status+0x4b0/0x6d0 [ 360.080754][ T27] hub_event+0x21ee/0x54e0 [ 360.085477][ T27] ? hub_post_resume+0x120/0x120 [ 360.090449][ T27] ? read_lock_is_recursive+0x10/0x10 [ 360.095896][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 360.102073][ T27] ? _raw_spin_unlock+0x40/0x40 [ 360.106952][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 360.112296][ T27] ? process_one_work+0x7a1/0x1160 [ 360.117450][ T27] process_one_work+0x898/0x1160 [ 360.122599][ T27] ? worker_detach_from_pool+0x240/0x240 [ 360.128268][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 360.133439][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 360.138845][ T27] ? kthread_data+0x4b/0xc0 [ 360.143636][ T27] worker_thread+0xaa2/0x1250 [ 360.148384][ T27] kthread+0x29d/0x330 [ 360.153019][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 360.158109][ T27] ? kthread_blkcg+0xd0/0xd0 [ 360.162823][ T27] ret_from_fork+0x1f/0x30 [ 360.167270][ T27] [ 360.170543][ T27] [ 360.170543][ T27] Showing all locks held in the system: [ 360.179156][ T27] 1 lock held by rcu_tasks_kthre/12: [ 360.185072][ T27] #0: ffffffff8cb2b630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 360.196106][ T27] 1 lock held by rcu_tasks_trace/13: [ 360.201778][ T27] #0: ffffffff8cb2be50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 360.212995][ T27] 5 locks held by kworker/1:0/22: [ 360.218034][ T27] #0: ffff888143ea5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 360.228898][ T27] #1: ffffc900001c7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 360.240299][ T27] #2: ffff888028c5c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 360.249411][ T27] #3: ffff888028c5f4f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21bd/0x54e0 [ 360.260108][ T27] #4: ffff8880286fca68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21ee/0x54e0 [ 360.270361][ T27] 1 lock held by khungtaskd/27: [ 360.275681][ T27] #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 360.285711][ T27] 5 locks held by kworker/1:2/125: [ 360.290841][ T27] #0: ffff888143ea5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 360.302032][ T27] #1: ffffc90002dc7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 360.313477][ T27] #2: ffff888028c8a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 360.322616][ T27] #3: ffff888028c8d4f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21bd/0x54e0 [ 360.332997][ T27] #4: ffff8880286fca68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21ee/0x54e0 [ 360.342947][ T27] 2 locks held by getty/4031: [ 360.347769][ T27] #0: ffff88814d2c4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 360.357890][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 360.368250][ T27] 4 locks held by kworker/u4:18/5013: [ 360.373735][ T27] 3 locks held by syz.0.738/6966: [ 360.379202][ T27] #0: ffff88802807f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x58/0x200 [ 360.389152][ T27] #1: ffff8880557b3098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x7c/0x200 [ 360.399326][ T27] #2: ffffffff8cb30840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 360.409582][ T27] [ 360.416402][ T27] ============================================= [ 360.416402][ T27] [ 360.427423][ T27] NMI backtrace for cpu 1 [ 360.431838][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 360.439144][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.449194][ T27] Call Trace: [ 360.452483][ T27] [ 360.455407][ T27] dump_stack_lvl+0x168/0x22e [ 360.460088][ T27] ? irq_work_queue+0xb8/0x140 [ 360.464844][ T27] ? show_regs_print_info+0x12/0x12 [ 360.470031][ T27] ? load_image+0x3b0/0x3b0 [ 360.475048][ T27] ? vprintk_emit+0x571/0x680 [ 360.479723][ T27] ? printk_sprint+0x460/0x460 [ 360.484577][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 360.489514][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 360.495654][ T27] ? _printk+0xcc/0x110 [ 360.499835][ T27] ? load_image+0x3b0/0x3b0 [ 360.504351][ T27] ? load_image+0x3b0/0x3b0 [ 360.508854][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 360.514910][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 360.520880][ T27] watchdog+0xeee/0xf30 [ 360.525049][ T27] ? watchdog+0x1ed/0xf30 [ 360.529379][ T27] kthread+0x29d/0x330 [ 360.533477][ T27] ? hungtask_pm_notify+0x40/0x40 [ 360.538518][ T27] ? kthread_blkcg+0xd0/0xd0 [ 360.543115][ T27] ret_from_fork+0x1f/0x30 [ 360.547530][ T27] [ 360.550596][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.557388][ T27] Sending NMI from CPU 1 to CPUs 0: [ 360.562833][ C0] NMI backtrace for cpu 0 [ 360.562844][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 360.562859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.562867][ C0] RIP: 0010:skb_release_head_state+0x0/0x240 [ 360.562890][ C0] Code: 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 69 ff ff ff 4c 89 f7 e8 02 a1 b4 f9 e9 5c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <55> 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 360.562908][ C0] RSP: 0018:ffffc90000147980 EFLAGS: 00000246 [ 360.562922][ C0] RAX: ffffffff881c81dc RBX: ffff88807e46edc0 RCX: ffff88813fef3b80 [ 360.562932][ C0] RDX: 0000000000000100 RSI: ffffffff8adef380 RDI: ffff88807e46edc0 [ 360.562942][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1c3ed96 [ 360.562952][ C0] R10: fffffbfff1c3ed96 R11: 1ffffffff1c3ed95 R12: ffff8880765eeae0 [ 360.562962][ C0] R13: ffff88801da68358 R14: ffff88807e46eea4 R15: dffffc0000000000 [ 360.562973][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 360.562986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.562996][ C0] CR2: 00007ffff446b000 CR3: 000000000c88e000 CR4: 00000000003526f0 [ 360.563009][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.563017][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.563025][ C0] Call Trace: [ 360.563030][ C0] [ 360.563035][ C0] consume_skb+0x72/0x100 [ 360.563053][ C0] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 360.563072][ C0] __iterate_interfaces+0x243/0x500 [ 360.563086][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 360.563101][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 360.563117][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 360.563131][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 360.563147][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 360.563161][ C0] __hrtimer_run_queues+0x554/0xd60 [ 360.563180][ C0] ? hw_scan_work+0xf30/0xf30 [ 360.563196][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 360.563208][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 360.563227][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 360.563242][ C0] handle_softirqs+0x2a1/0x920 [ 360.563265][ C0] ? run_ksoftirqd+0x98/0xf0 [ 360.563279][ C0] ? do_softirq+0x200/0x200 [ 360.563300][ C0] run_ksoftirqd+0x98/0xf0 [ 360.563312][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 360.563325][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 360.563344][ C0] ? takeover_tasklets+0x800/0x800 [ 360.563356][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 360.563367][ C0] smpboot_thread_fn+0x64a/0xa40 [ 360.563385][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 360.563403][ C0] kthread+0x29d/0x330 [ 360.563420][ C0] ? cpu_report_death+0x230/0x230 [ 360.563436][ C0] ? kthread_blkcg+0xd0/0xd0 [ 360.563453][ C0] ret_from_fork+0x1f/0x30 [ 360.563475][ C0] [ 360.566985][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 360.857605][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 360.864792][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.874970][ T27] Call Trace: [ 360.878412][ T27] [ 360.881329][ T27] dump_stack_lvl+0x168/0x22e [ 360.886000][ T27] ? memcpy+0x3c/0x60 [ 360.889982][ T27] ? show_regs_print_info+0x12/0x12 [ 360.895167][ T27] ? load_image+0x3b0/0x3b0 [ 360.899665][ T27] panic+0x2c9/0x710 [ 360.903677][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 360.909301][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 360.913805][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 360.919574][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 360.925937][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 360.932191][ T27] watchdog+0xf2d/0xf30 [ 360.936369][ T27] ? watchdog+0x1ed/0xf30 [ 360.940782][ T27] kthread+0x29d/0x330 [ 360.944861][ T27] ? hungtask_pm_notify+0x40/0x40 [ 360.949887][ T27] ? kthread_blkcg+0xd0/0xd0 [ 360.954592][ T27] ret_from_fork+0x1f/0x30 [ 360.959043][ T27] [ 360.962204][ T27] Kernel Offset: disabled [ 360.966577][ T27] Rebooting in 86400 seconds..