last executing test programs: 9.890971828s ago: executing program 4 (id=213): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 9.847499039s ago: executing program 3 (id=214): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.476001706s ago: executing program 3 (id=216): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x5}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.380424887s ago: executing program 3 (id=219): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0) 7.297480788s ago: executing program 4 (id=222): syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) getpid() ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x6, 0x2, &(0x7f0000000040)={0x4, "93b8653bedbbda088620de5fc22f0f636c60e225b1f75bbe681a94ade4836ee72e"}}) 6.954479965s ago: executing program 1 (id=224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000400)=""/66, 0x42, 0x22, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x20}}, 0x880) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfce1) 6.398958156s ago: executing program 0 (id=227): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.804415317s ago: executing program 0 (id=228): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) 5.442142375s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) 5.342978047s ago: executing program 0 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x20000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x6, 0x2004cb, 0x8, 0x5, 0x0, 0x28, 0xfffffffffffffffd, 0x8000000000006, 0x5, 0x2, 0x8], 0x8000000, 0x210}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb, 0x10012, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.355526566s ago: executing program 0 (id=231): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000840)={0xa, 0x4e24, 0x6b, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@tclass={{0x10, 0x29, 0x43, 0xb}}], 0x10}}], 0x1, 0x0) 4.354508046s ago: executing program 4 (id=232): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000240)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]}) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xe3, "f7f96fc2acd672feb56ce63272357942"}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf8, 0x2, [@TCA_CGROUP_EMATCHES={0xf4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xe4, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xba, 0x5, "da0e4d35f51d44d4691a93656c1cbb72a9660e51d0ad2ad1f3a64ee4eb73b94c5d58fc9b17f266aea01fbc41496e41228daf65711d5052efc39b2493c47144b54f17faf24388d96515f1182f965e352145926f04f62adb4bae07ed61a38bd45a279561561e1f6001e4566714028eebc017fca65870b4c60ef0805cbb0cc2fff4190325ddb902cd9eeb76af102dec44f7c832e4eea48a97f08457f928a070357ade0c2a2c4206f6206b749701c72ba93b6b6fdd6cc941"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x4c, r2, 0x801, 0x0, 0x3, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x4c}}, 0x44000) r9 = socket$netlink(0x10, 0x3, 0xa) dup(r9) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) 3.969724983s ago: executing program 0 (id=233): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 3.913035494s ago: executing program 2 (id=234): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "74c05283a1348b4b", "1cf5a5faf8b5ccf7f96995cc78f3d68a426a5475a68e5c77de9d320ac6db84e7", "5e69db2c", "aaa5c6f27ae3cda6"}, 0x38) 3.165502559s ago: executing program 4 (id=235): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = dup2(r2, r2) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.006928042s ago: executing program 1 (id=236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.922520763s ago: executing program 2 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000700)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.874704654s ago: executing program 3 (id=238): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.675079698s ago: executing program 1 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a03fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00d20f030000000000001d440000000000006b0a00fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x72, 0x4004, @fd, 0x80000000, 0x0, 0x0, 0x5}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 2.607232239s ago: executing program 2 (id=240): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) 2.399325413s ago: executing program 1 (id=241): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07, 0x0, 0xf}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000000340)='^\')}#\xcd!G\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x800}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) socket$inet_udplite(0x2, 0x2, 0x88) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.242763046s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) 2.229406777s ago: executing program 2 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x18, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 1.474949671s ago: executing program 2 (id=244): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00'], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1.268527565s ago: executing program 3 (id=245): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 1.134825698s ago: executing program 2 (id=246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000400)=""/66, 0x42, 0x22, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x20}}, 0x880) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfce1) 767.068605ms ago: executing program 1 (id=247): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "74c05283a1348b4b", "1cf5a5faf8b5ccf7f96995cc78f3d68a426a5475a68e5c77de9d320ac6db84e7", "5e69db2c", "aaa5c6f27ae3cda6"}, 0x38) 290.073344ms ago: executing program 0 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) r1 = io_uring_setup(0x6dc2, &(0x7f00000001c0)={0x0, 0xcf51, 0x80, 0x2, 0x2}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 110.920028ms ago: executing program 1 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=250): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {0x0}, {&(0x7f0000000500)=""/167, 0xa7}], 0x6}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. syzkaller login: [ 69.025621][ T4254] cgroup: Unknown subsys name 'net' [ 69.188040][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.600344][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.134651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.141089][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.073211][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.080916][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.089852][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.092103][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.098103][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.105031][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.112091][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.120428][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.132540][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.132792][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.140024][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.147455][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.154126][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.161112][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.168692][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.175833][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.183329][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.189743][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.196350][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.203354][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.210421][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.217316][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.224077][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.231516][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.238216][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.244925][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.258797][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.261350][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.299339][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.374744][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.708302][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 72.853696][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 72.883396][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 72.904520][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 72.960244][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.968269][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976393][ T4273] device bridge_slave_0 entered promiscuous mode [ 73.003163][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.010316][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.018327][ T4273] device bridge_slave_1 entered promiscuous mode [ 73.051516][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 73.103242][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.110412][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.118872][ T4264] device bridge_slave_0 entered promiscuous mode [ 73.136115][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.145341][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.152908][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.161310][ T4265] device bridge_slave_0 entered promiscuous mode [ 73.189727][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.197119][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.205143][ T4264] device bridge_slave_1 entered promiscuous mode [ 73.213665][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.223092][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.230188][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.238485][ T4265] device bridge_slave_1 entered promiscuous mode [ 73.283278][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.290374][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.298418][ T4276] device bridge_slave_0 entered promiscuous mode [ 73.334181][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.341314][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.349447][ T4276] device bridge_slave_1 entered promiscuous mode [ 73.362525][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.383273][ T4273] team0: Port device team_slave_0 added [ 73.390995][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.410074][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.435013][ T4273] team0: Port device team_slave_1 added [ 73.440880][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.448155][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.456856][ T4269] device bridge_slave_0 entered promiscuous mode [ 73.466000][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.501509][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.508726][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.516615][ T4269] device bridge_slave_1 entered promiscuous mode [ 73.539602][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.550895][ T4264] team0: Port device team_slave_0 added [ 73.581962][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.593039][ T4264] team0: Port device team_slave_1 added [ 73.606112][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.613396][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.639656][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.654136][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.666605][ T4265] team0: Port device team_slave_0 added [ 73.687203][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.694372][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.720618][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.733484][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.747844][ T4265] team0: Port device team_slave_1 added [ 73.763181][ T4276] team0: Port device team_slave_0 added [ 73.769413][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.776717][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.803030][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.842254][ T4276] team0: Port device team_slave_1 added [ 73.862544][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.869525][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.895641][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.924802][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.932062][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.958149][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.988188][ T4273] device hsr_slave_0 entered promiscuous mode [ 73.995035][ T4273] device hsr_slave_1 entered promiscuous mode [ 74.003909][ T4269] team0: Port device team_slave_0 added [ 74.018625][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.025743][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.051772][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.068307][ T4269] team0: Port device team_slave_1 added [ 74.075392][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.083577][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.109606][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.152282][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.159258][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.185489][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.199934][ T4264] device hsr_slave_0 entered promiscuous mode [ 74.207043][ T4264] device hsr_slave_1 entered promiscuous mode [ 74.213698][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.221463][ T4264] Cannot create hsr debugfs directory [ 74.268962][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.276068][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.302533][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.332396][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 74.339013][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 74.360240][ T4265] device hsr_slave_0 entered promiscuous mode [ 74.367001][ T4265] device hsr_slave_1 entered promiscuous mode [ 74.374176][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.381914][ T4265] Cannot create hsr debugfs directory [ 74.387849][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.394969][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.421203][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 74.421222][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 74.421425][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 74.427775][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.460897][ T4276] device hsr_slave_0 entered promiscuous mode [ 74.467760][ T4276] device hsr_slave_1 entered promiscuous mode [ 74.474712][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.482352][ T4276] Cannot create hsr debugfs directory [ 74.583900][ T4269] device hsr_slave_0 entered promiscuous mode [ 74.590849][ T4269] device hsr_slave_1 entered promiscuous mode [ 74.597492][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.605749][ T4269] Cannot create hsr debugfs directory [ 74.856411][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.873274][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.882423][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.934205][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.954880][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.968765][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.978277][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.995264][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.036443][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.047526][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.072625][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.082227][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.147100][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.156518][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.180679][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.189652][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.239215][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.277993][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.287375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.316251][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.338937][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.350385][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.360272][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.367592][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.378032][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.393309][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.405761][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.421980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.430735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.439649][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.446812][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.456621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.469857][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.485320][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.498189][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.516864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.524768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.548692][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.556205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.565396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.575615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.584598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.618476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.628690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.659816][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.667137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.678405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.687500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.696540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.705362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.712490][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.720519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.729135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.737540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.748664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.759091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.768114][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.775297][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.794272][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.811569][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.826517][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.841913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.849690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.864147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.896600][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.918606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.929305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.938691][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.950633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.960138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.971550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.985176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.994388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.003876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.013021][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.020137][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.066213][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.078467][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.094242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.102663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.110700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.119683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.130241][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.139790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.149263][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.156447][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.166020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.175996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.184707][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.191847][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.199750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.210728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.220107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.229040][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.236190][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.245475][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.254688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.265084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.273660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.300698][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.319113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.330054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.343326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.353813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.367820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.411929][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 76.422416][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 76.431626][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.441335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.451312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.460147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.469228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.477281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.485251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.493921][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 76.501456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.502582][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 76.510772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.515670][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 76.523992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.556587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.577435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.588027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.598065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.606892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.615457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.624900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.638583][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.658319][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.681274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.705164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.737999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.762770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.771420][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.778591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.822593][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.844485][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.862583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.871214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.893860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.913777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.932684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.949898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.957086][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.968212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.022536][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.042008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.050811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.082896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.090430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.106275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.117698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.130565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.140966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.150236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.160295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.176948][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.200910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.223982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.249729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.273607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.351769][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.361136][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.381485][ T4264] device veth0_vlan entered promiscuous mode [ 77.395432][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.407387][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.429864][ T4264] device veth1_vlan entered promiscuous mode [ 77.520184][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.532784][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.559531][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.582845][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.596977][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.608505][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.619799][ T4264] device veth0_macvtap entered promiscuous mode [ 77.654332][ T4264] device veth1_macvtap entered promiscuous mode [ 77.667042][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.675569][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.685148][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.694976][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.708361][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.716625][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.725194][ T4273] device veth0_vlan entered promiscuous mode [ 77.746751][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.768815][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.777157][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.788632][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.808881][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.816879][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.830386][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.839577][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.857176][ T4273] device veth1_vlan entered promiscuous mode [ 77.879048][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.899511][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.909387][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918891][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.927782][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955226][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.963414][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.970909][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.987122][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.057838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.066395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.074206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.081642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.093297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.102450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.110891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.127458][ T4273] device veth0_macvtap entered promiscuous mode [ 78.138731][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.157654][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.182197][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.191411][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.202942][ T4273] device veth1_macvtap entered promiscuous mode [ 78.272440][ T4276] device veth0_vlan entered promiscuous mode [ 78.287189][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.294983][ T4276] device veth1_vlan entered promiscuous mode [ 78.303540][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.305911][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.319700][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.328965][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.337500][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.345792][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.354451][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.365315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.374034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.385363][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.396389][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.408384][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.431190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.441397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.449716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.457836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.468166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.477667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.486728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.495404][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 78.501445][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 78.533844][ T4269] device veth0_vlan entered promiscuous mode [ 78.534779][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.547686][ T4269] device veth1_vlan entered promiscuous mode [ 78.559065][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.564996][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.577019][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 78.582370][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 78.589205][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 78.594659][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.609420][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.625791][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.634763][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647275][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.657416][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669411][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.679038][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.687142][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.695585][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.704814][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.742585][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.751193][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.761496][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.770302][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.788567][ T4265] device veth0_vlan entered promiscuous mode [ 78.803881][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.819575][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.829802][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.838706][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.849617][ T4269] device veth0_macvtap entered promiscuous mode [ 78.865214][ T4265] device veth1_vlan entered promiscuous mode [ 78.887531][ T4276] device veth0_macvtap entered promiscuous mode [ 78.903985][ T4269] device veth1_macvtap entered promiscuous mode [ 78.949607][ T4276] device veth1_macvtap entered promiscuous mode [ 78.990189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.999857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.014123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.026970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.037227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.049237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.069254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.078633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.097118][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.108355][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.127021][ T4384] fuse: Unknown parameter '00000000000000000003' [ 79.134356][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.152960][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.172529][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.192461][ T4265] device veth0_macvtap entered promiscuous mode [ 79.212725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.221163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.237091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.250275][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.267007][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.277748][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.296368][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.311965][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.325817][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.338771][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.360412][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.378752][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.389380][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.403771][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.418284][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.433748][ T4265] device veth1_macvtap entered promiscuous mode [ 79.445403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.459314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.471273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.485984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.505844][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.515475][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.526235][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.555575][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.566768][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.580626][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.591587][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.606867][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.621076][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.638821][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.648419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.661428][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.671970][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.680781][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.705651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.719502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.729202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.754922][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.768854][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.786946][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.806615][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.860873][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.878510][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.889551][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.913610][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.925822][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.943825][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.956062][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.979930][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.999808][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.010370][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.014828][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.029310][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.031790][ T26] audit: type=1326 audit(1757165611.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4386 comm="syz.1.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x0 [ 80.042162][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.076866][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.078872][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.101729][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.112763][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.123182][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.135171][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.147616][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.160979][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169923][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.179068][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189091][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.204844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.216999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.228404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.236752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.247278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.497014][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.517401][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.528520][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.537850][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.551349][ T26] audit: type=1326 audit(1757165611.819:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.582094][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 80.588251][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 80.598617][ T26] audit: type=1326 audit(1757165611.859:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.628272][ T26] audit: type=1326 audit(1757165611.859:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.653034][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 80.659089][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 80.665697][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 80.671902][ T26] audit: type=1326 audit(1757165611.859:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.694640][ T26] audit: type=1326 audit(1757165611.859:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.716888][ T26] audit: type=1326 audit(1757165611.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.740185][ T26] audit: type=1326 audit(1757165611.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.764316][ T26] audit: type=1326 audit(1757165611.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.786989][ T26] audit: type=1326 audit(1757165611.859:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ef18ebe9 code=0x7ffc0000 [ 80.909944][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.938247][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.989973][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.007405][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.033354][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.049452][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.061330][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.076881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.148480][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.169158][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.181869][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.211572][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.249808][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.270210][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.612606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.819504][ T4404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.851911][ T4404] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.905605][ T4404] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 81.931949][ T4404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.960427][ T4404] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.061350][ T4404] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 82.121362][ T4404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.133703][ T4404] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.197538][ T4404] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 82.217006][ T4404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.232462][ T4404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.287795][ T4404] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 82.315458][ T4404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.331861][ T4404] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 82.424080][ T4404] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 82.591968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.761866][ T4321] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.007076][ T4321] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.036443][ T4321] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 83.085151][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.114722][ T4321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 83.174887][ T4321] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.222088][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.249774][ T4321] usb 3-1: Product: syz [ 83.264259][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.273181][ T4321] usb 3-1: Manufacturer: syz [ 83.347842][ T4321] cdc_wdm 3-1:1.0: skipping garbage [ 83.391840][ T4321] cdc_wdm 3-1:1.0: skipping garbage [ 83.436545][ T4321] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 83.448982][ T4321] cdc_wdm 3-1:1.0: Unknown control protocol [ 83.491852][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 83.504646][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.530977][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.565421][ T127] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.594055][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.609013][ T127] usb 1-1: Product: syz [ 83.625467][ T127] usb 1-1: Manufacturer: syz [ 83.631273][ T127] usb 1-1: SerialNumber: syz [ 83.772565][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.011912][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.059804][ T127] usb 1-1: cannot find UAC_HEADER [ 84.092263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.100718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.109089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 84.149698][ T127] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 84.172374][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.245853][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.263130][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.269629][ T127] usb 1-1: USB disconnect, device number 2 [ 84.279817][ T4311] usb 3-1: USB disconnect, device number 2 [ 84.332332][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.731973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.945904][ T4449] netlink: 136 bytes leftover after parsing attributes in process `syz.0.17'. [ 84.987022][ T4449] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.153855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.276778][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 85.276788][ T26] audit: type=1326 audit(1757165616.549:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.18" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x0 [ 85.845244][ T4455] binder: 4454:4455 ioctl 4018620d 0 returned -22 [ 85.854485][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 86.091932][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 86.252060][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 86.332170][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 86.412161][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 86.506363][ T14] cfg80211: failed to load regulatory.db [ 86.513161][ T26] audit: type=1326 audit(1757165617.789:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.582091][ T26] audit: type=1326 audit(1757165617.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.681841][ T26] audit: type=1326 audit(1757165617.879:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.799972][ T26] audit: type=1326 audit(1757165617.879:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.832324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.846082][ T26] audit: type=1326 audit(1757165617.879:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.879689][ T26] audit: type=1326 audit(1757165617.879:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.944269][ T4464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.951335][ T26] audit: type=1326 audit(1757165617.879:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 86.965112][ T4464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.037503][ T4464] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 87.044070][ T26] audit: type=1326 audit(1757165617.879:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 87.077297][ T4464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.147381][ T4464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.157706][ T26] audit: type=1326 audit(1757165617.879:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e9718ebe9 code=0x7ffc0000 [ 87.181278][ T4464] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 87.202279][ T4464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.231923][ T4464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.280024][ T4464] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 87.301981][ T4464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.355261][ T4464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.412131][ T4464] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 87.431815][ T4464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.455579][ T4464] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.506249][ T4464] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 87.784933][ T4487] binder: 4486:4487 ioctl 4018620d 0 returned -22 [ 87.791834][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.802096][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.995002][ T14] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.004273][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.053101][ T14] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 88.066658][ T4321] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.131773][ T4311] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.149065][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.158227][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.164378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.179817][ T14] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 88.192540][ T4321] usb 1-1: config 0 descriptor?? [ 88.202278][ T14] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.213930][ T4321] pwc: Askey VC010 type 2 USB webcam detected. [ 88.221367][ T14] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.230535][ T14] usb 2-1: Product: syz [ 88.235041][ T14] usb 2-1: Manufacturer: syz [ 88.245165][ T4479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.261537][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 88.267372][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 88.277814][ T14] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 88.356429][ T4311] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.370405][ T4311] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 88.385357][ T4311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.394787][ T4311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 88.476131][ T4311] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.480919][ T4496] tipc: Started in network mode [ 88.490527][ T4496] tipc: Node identity be20a638e5a6, cluster identity 4711 [ 88.498629][ T4496] tipc: Enabled bearer , priority 0 [ 88.507327][ T4496] device syzkaller0 entered promiscuous mode [ 88.550735][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.559941][ T4311] usb 4-1: Product: syz [ 88.560011][ T4495] tipc: Resetting bearer [ 88.571435][ T4311] usb 4-1: Manufacturer: syz [ 88.588774][ T14] usb 2-1: USB disconnect, device number 2 [ 88.628286][ T4495] tipc: Disabling bearer [ 88.643241][ T4311] cdc_wdm 4-1:1.0: skipping garbage [ 88.669127][ T4311] cdc_wdm 4-1:1.0: skipping garbage [ 88.681004][ T4311] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 88.687326][ T4311] cdc_wdm 4-1:1.0: Unknown control protocol [ 88.811937][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.818262][ T4321] pwc: recv_control_msg error -71 req 02 val 2700 [ 88.828313][ T4321] pwc: recv_control_msg error -71 req 02 val 2c00 [ 88.836128][ T4321] pwc: recv_control_msg error -71 req 04 val 1000 [ 88.852519][ T4321] pwc: recv_control_msg error -71 req 04 val 1300 [ 88.889122][ T4321] pwc: recv_control_msg error -71 req 04 val 1400 [ 88.911178][ T4500] tipc: Started in network mode [ 88.917583][ T4321] pwc: recv_control_msg error -71 req 02 val 2000 [ 88.946199][ T4321] pwc: recv_control_msg error -71 req 02 val 2100 [ 88.952889][ T4500] tipc: Node identity 76d60c7599c1, cluster identity 4711 [ 88.955644][ T14] usb 4-1: USB disconnect, device number 2 [ 88.967681][ T4321] pwc: recv_control_msg error -71 req 04 val 1500 [ 88.975640][ T4321] pwc: recv_control_msg error -71 req 02 val 2500 [ 88.999677][ T4500] tipc: Enabled bearer , priority 0 [ 89.000904][ T4321] pwc: recv_control_msg error -71 req 02 val 2400 [ 89.036925][ T4321] pwc: recv_control_msg error -71 req 02 val 2600 [ 89.045589][ T4321] pwc: recv_control_msg error -71 req 02 val 2900 [ 89.086257][ T4321] pwc: recv_control_msg error -71 req 02 val 2800 [ 89.103353][ T4502] device syzkaller0 entered promiscuous mode [ 89.110452][ T4321] pwc: recv_control_msg error -71 req 04 val 1100 [ 89.131850][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.155131][ T4321] pwc: recv_control_msg error -71 req 04 val 1200 [ 89.175522][ T4321] pwc: Registered as video103. [ 89.187243][ T4321] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 89.211800][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.339416][ T4321] usb 1-1: USB disconnect, device number 3 [ 89.371930][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.441864][ T4311] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 89.451881][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.463392][ T4497] tipc: Resetting bearer [ 89.503445][ T4510] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.550810][ T4497] tipc: Disabling bearer [ 89.729972][ T4311] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.756290][ T4311] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 89.810845][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.840682][ T4311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 89.890033][ T4311] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.931775][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.951571][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.981476][ T4311] usb 5-1: Product: syz [ 90.003021][ T4311] usb 5-1: Manufacturer: syz [ 90.036124][ T4311] cdc_wdm 5-1:1.0: skipping garbage [ 90.049033][ T4311] cdc_wdm 5-1:1.0: skipping garbage [ 90.081300][ T4311] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 90.107493][ T4311] cdc_wdm 5-1:1.0: Unknown control protocol [ 90.121902][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 90.129287][ T4321] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.187697][ T4321] usb 1-1: config 0 has no interface number 0 [ 90.212389][ T4321] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 90.245679][ T4321] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 90.314372][ T4321] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.356477][ T4321] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.380212][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.427513][ T4321] usb 1-1: config 0 descriptor?? [ 90.452047][ T4321] ldusb 1-1:0.55: Interrupt in endpoint not found [ 90.466354][ T4525] binder: 4524:4525 ioctl c0306201 0 returned -14 [ 90.688812][ T4321] usb 1-1: USB disconnect, device number 4 [ 90.901813][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 91.007570][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 91.007687][ T22] usb 5-1: USB disconnect, device number 2 [ 91.014475][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 91.026319][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 91.221769][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 91.291956][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 91.452322][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 91.542678][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 91.706113][ T4279] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 91.878229][ T4543] tipc: Started in network mode [ 91.910202][ T4543] tipc: Node identity 724a442bae, cluster identity 4711 [ 91.958575][ T4543] tipc: Enabled bearer , priority 0 [ 91.972247][ T4546] device syzkaller0 entered promiscuous mode [ 92.019528][ T4542] tipc: Resetting bearer [ 92.100160][ T4542] tipc: Disabling bearer [ 92.971408][ T4553] binder: 4552:4553 ioctl c0306201 0 returned -14 [ 93.304089][ T4279] Bluetooth: hci2: Malformed Event: 0x2f [ 93.502622][ T4311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.721800][ T4390] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.738850][ T4311] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.756156][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.778055][ T4311] usb 4-1: Product: syz [ 93.795198][ T4311] usb 4-1: Manufacturer: syz [ 93.799814][ T4311] usb 4-1: SerialNumber: syz [ 93.823324][ T4311] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.884901][ T4311] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 93.921819][ T4390] usb 1-1: Using ep0 maxpacket: 16 [ 93.930926][ T4390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.996113][ T4390] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.021831][ T4390] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.043591][ T4390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.083077][ T4390] usb 1-1: config 0 descriptor?? [ 94.334643][ T4572] tipc: Enabled bearer , priority 0 [ 94.355176][ T4572] tipc: Resetting bearer [ 94.426598][ T4571] tipc: Disabling bearer [ 95.131843][ T4311] usb 4-1: Service connection timeout for: 256 [ 95.141921][ T4311] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 95.213086][ T4311] ath9k_htc: Failed to initialize the device [ 95.255705][ T4311] usb 4-1: ath9k_htc: USB layer deinitialized [ 95.518481][ T127] usb 4-1: USB disconnect, device number 3 [ 96.338715][ T4593] binder: 4592:4593 ioctl c0306201 0 returned -14 [ 96.449613][ T4595] syz.1.73 uses obsolete (PF_INET,SOCK_PACKET) [ 96.539791][ T4390] usbhid 1-1:0.0: can't add hid device: -71 [ 96.569553][ T4390] usbhid: probe of 1-1:0.0 failed with error -71 [ 96.589874][ T4390] usb 1-1: USB disconnect, device number 5 [ 96.655839][ T4602] tipc: Enabled bearer , priority 0 [ 96.679559][ T4602] tipc: Resetting bearer [ 96.707515][ T4601] tipc: Disabling bearer [ 96.771899][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.868066][ T4608] kvm: emulating exchange as write [ 96.896908][ T127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.971810][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 96.996333][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.059117][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.101795][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 97.110436][ T127] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 97.119258][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.135794][ T127] usb 4-1: config 0 has no interface number 0 [ 97.153098][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.161177][ T22] usb 2-1: Product: syz [ 97.166522][ T127] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.182060][ T22] usb 2-1: Manufacturer: syz [ 97.188013][ T127] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.201563][ T22] usb 2-1: SerialNumber: syz [ 97.218061][ T127] usb 4-1: config 0 interface 41 has no altsetting 0 [ 97.250575][ T127] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 97.269486][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.289238][ T127] usb 4-1: Product: syz [ 97.299106][ T127] usb 4-1: Manufacturer: syz [ 97.308697][ T127] usb 4-1: SerialNumber: syz [ 97.328653][ T127] usb 4-1: config 0 descriptor?? [ 97.337217][ T4597] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.360854][ T4597] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.430670][ T22] usb 2-1: 0:2 : does not exist [ 97.446699][ T22] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 97.526043][ T22] usb 2-1: USB disconnect, device number 3 [ 97.604008][ T127] CoreChips: probe of 4-1:0.41 failed with error -71 [ 97.628367][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 97.644392][ T127] usb 4-1: USB disconnect, device number 4 [ 97.783881][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.832329][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 97.873735][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 97.873749][ T26] audit: type=1326 audit(1757165629.149:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4630 comm="syz.2.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7d038ebe9 code=0x0 [ 98.103573][ T4636] tipc: Started in network mode [ 98.108677][ T4636] tipc: Node identity ba8913593451, cluster identity 4711 [ 98.116288][ T4636] tipc: Enabled bearer , priority 0 [ 98.134475][ T4636] tipc: Resetting bearer [ 98.151465][ T4635] tipc: Disabling bearer [ 98.902008][ T4321] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 99.106281][ T4321] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.133023][ T4321] usb 2-1: config 0 has no interface number 0 [ 99.152760][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 99.175829][ T4321] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 99.240700][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 99.260515][ T4321] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.281885][ T4321] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.299946][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.327228][ T4321] usb 2-1: config 0 descriptor?? [ 99.337524][ T4646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.353000][ T4646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.372841][ T4321] ldusb 2-1:0.55: Interrupt in endpoint not found [ 99.403911][ T4664] device syzkaller0 entered promiscuous mode [ 99.601827][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.803319][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.819995][ T14] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.870585][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.933670][ T14] usb 3-1: config 0 descriptor?? [ 100.169893][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 100.180071][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 100.197480][ T127] usb 2-1: USB disconnect, device number 4 [ 100.220433][ T14] usb 3-1: USB disconnect, device number 3 [ 100.391925][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.459913][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 100.489265][ T4678] Zero length message leads to an empty skb [ 100.526017][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 100.591760][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 100.608503][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.643338][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 100.677262][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.711920][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 100.771990][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.777947][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 100.809568][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.836905][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 48059, setting to 1024 [ 100.860886][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 100.892657][ T22] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 100.911772][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.939565][ T22] usb 5-1: Product: syz [ 100.943918][ T22] usb 5-1: Manufacturer: syz [ 100.959846][ T22] usb 5-1: SerialNumber: syz [ 100.972512][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 100.977420][ T22] usb 5-1: config 0 descriptor?? [ 100.979824][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.004619][ T4675] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 101.049022][ T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 101.089556][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.105220][ T22] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 101.196341][ T14] usb 3-1: config 0 descriptor?? [ 101.196750][ T4688] udevd[4688]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.240597][ T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.278782][ T22] usb 5-1: USB disconnect, device number 3 [ 101.299958][ T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.636882][ T22] usb 3-1: USB disconnect, device number 4 [ 101.659522][ T22] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 102.501518][ T4703] device syzkaller0 entered promiscuous mode [ 103.243002][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 103.569745][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.646977][ T4724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.339659][ T4734] fuse: Unknown parameter '00000000000000000003' [ 107.129091][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 107.491816][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.721754][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.730857][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.804442][ T14] usb 4-1: Product: syz [ 107.829034][ T14] usb 4-1: Manufacturer: syz [ 107.859383][ T14] usb 4-1: SerialNumber: syz [ 107.907910][ T14] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.968685][ T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.121801][ T4390] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 108.325952][ T4390] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.345664][ T4390] usb 2-1: config 0 has no interface number 0 [ 108.363712][ T4390] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 108.383913][ T4390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.401278][ T4390] usb 2-1: config 0 descriptor?? [ 108.445885][ T4390] usb 2-1: selecting invalid altsetting 1 [ 108.467612][ T4390] dvb_ttusb_budget: ttusb_init_controller: error [ 108.474326][ T4390] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 108.586186][ T127] usb 4-1: USB disconnect, device number 5 [ 108.701851][ T4390] DVB: Unable to find symbol cx22700_attach() [ 108.768858][ T4279] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 108.934293][ T4390] DVB: Unable to find symbol tda10046_attach() [ 108.957960][ T4390] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 108.986210][ T4390] usb 2-1: USB disconnect, device number 5 [ 109.175288][ T4793] device batadv_slave_1 entered promiscuous mode [ 109.221979][ T14] usb 4-1: Service connection timeout for: 256 [ 109.233112][ T14] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 109.245542][ T4792] device batadv_slave_1 left promiscuous mode [ 109.431692][ T14] ath9k_htc: Failed to initialize the device [ 109.668144][ T127] usb 4-1: ath9k_htc: USB layer deinitialized [ 110.016000][ T4816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.040567][ T4816] netlink: 67 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.501836][ T4390] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.693843][ T4390] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.730933][ T4390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.762801][ T4390] usb 2-1: config 0 descriptor?? [ 110.979973][ T4390] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 110.990685][ T4829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'. [ 111.021730][ T4390] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 111.189850][ T4390] [drm:udl_init] *ERROR* Selecting channel failed [ 111.230344][ T4390] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 111.270933][ T4390] [drm] Initialized udl on minor 2 [ 111.299623][ T4390] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.333171][ T4390] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 111.381997][ T4390] usb 2-1: USB disconnect, device number 6 [ 111.426728][ T4310] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 111.440954][ T4310] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 111.492326][ T4310] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.241832][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.441876][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 112.448968][ T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 112.481729][ T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.525252][ T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 112.577271][ T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 112.593822][ T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.656334][ T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 112.703948][ T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 112.711408][ T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.791797][ T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 112.855409][ T14] usb 2-1: string descriptor 0 read error: -22 [ 112.878150][ T14] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.936654][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.004793][ T14] adutux 2-1:168.0: interrupt endpoints not found [ 113.214515][ T4826] usb 2-1: USB disconnect, device number 7 [ 113.781881][ T4826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.868729][ T4863] netlink: 'syz.3.165': attribute type 5 has an invalid length. [ 113.991751][ T4826] usb 2-1: Using ep0 maxpacket: 8 [ 113.998516][ T4826] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.060593][ T4826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.080060][ T4826] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 114.114673][ T4826] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.140047][ T4826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.166488][ T4826] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 114.216996][ T4826] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.254328][ T4826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.292134][ T4826] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 114.339895][ T4826] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.370259][ T4826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.385969][ T4826] usb 2-1: Product: syz [ 114.390592][ T4826] usb 2-1: Manufacturer: syz [ 114.397770][ T4826] usb 2-1: SerialNumber: syz [ 114.627160][ T4826] adutux 2-1:168.0: interrupt endpoints not found [ 114.674902][ T4826] usb 2-1: USB disconnect, device number 8 [ 115.991804][ T4826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.194973][ T4826] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 116.210212][ T4826] usb 2-1: config 0 has no interface number 0 [ 116.230015][ T4826] usb 2-1: config 0 interface 91 has no altsetting 0 [ 116.248988][ T4826] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 116.311599][ T4826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.366542][ T4826] usb 2-1: config 0 descriptor?? [ 116.889854][ T4826] usb 2-1: string descriptor 0 read error: -71 [ 116.906892][ T4826] usb 2-1: Found UVC 0.00 device (174f:5212) [ 116.932751][ T4826] usb 2-1: No valid video chain found. [ 116.948401][ T4826] usb 2-1: USB disconnect, device number 9 [ 116.991782][ T4310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.181807][ T4310] usb 5-1: Using ep0 maxpacket: 16 [ 117.190156][ T4310] usb 5-1: config 2 has an invalid interface number: 7 but max is 0 [ 117.229991][ T4310] usb 5-1: config 2 has no interface number 0 [ 117.246604][ T4310] usb 5-1: config 2 interface 7 has no altsetting 0 [ 117.297511][ T4310] usb 5-1: New USB device found, idVendor=05c6, idProduct=9034, bcdDevice=3d.54 [ 117.337168][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.352014][ T4310] usb 5-1: Product: syz [ 117.380712][ T4310] usb 5-1: Manufacturer: syz [ 117.403668][ T4310] usb 5-1: SerialNumber: syz [ 117.660644][ T4310] usb 5-1: USB disconnect, device number 4 [ 117.683388][ T4904] @0Ù: renamed from bond_slave_1 [ 118.372493][ T4914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.741906][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.959127][ T4321] usb 4-1: config 47 has no interfaces? [ 118.985325][ T4321] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 119.005469][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.060707][ T4321] usb 4-1: Product: syz [ 119.083805][ T4321] usb 4-1: Manufacturer: syz [ 119.117167][ T4321] usb 4-1: SerialNumber: syz [ 122.011826][ T4311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.267626][ T4311] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 122.301802][ T4311] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 122.346746][ T4311] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.401743][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.107223][ T4321] usb 4-1: USB disconnect, device number 6 [ 123.336220][ T4968] netlink: 'syz.2.197': attribute type 5 has an invalid length. [ 123.470318][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 123.711875][ T4321] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.905090][ T4321] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 123.921303][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.929964][ T4321] usb 2-1: Product: syz [ 123.937148][ T4321] usb 2-1: Manufacturer: syz [ 123.942189][ T4321] usb 2-1: SerialNumber: syz [ 124.571679][ T4321] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 124.645814][ T4321] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 124.738193][ T4321] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.772009][ T4321] lan78xx: probe of 2-1:1.0 failed with error -32 [ 124.988515][ T4826] usb 5-1: USB disconnect, device number 5 [ 125.111072][ T4987] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 125.121467][ T4987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 125.891805][ T34] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.993371][ T5002] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.082865][ T34] usb 3-1: Using ep0 maxpacket: 8 [ 126.094844][ T34] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 126.128795][ T34] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 126.155396][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.168520][ T34] usb 3-1: Product: syz [ 126.193459][ T34] usb 3-1: Manufacturer: syz [ 126.205948][ T34] usb 3-1: SerialNumber: syz [ 126.221481][ T34] usb 3-1: config 0 descriptor?? [ 126.260161][ T34] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 126.285160][ T34] usb 3-1: setting power ON [ 126.298369][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 126.317483][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.341466][ T34] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 126.377250][ T34] usb 3-1: media controller created [ 126.442694][ T4993] dvb-usb: bulk message failed: -22 (3/0) [ 126.449827][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.495441][ T34] usb 3-1: selecting invalid altsetting 6 [ 126.502336][ T34] usb 3-1: digital interface selection failed (-22) [ 126.510244][ T34] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 126.522186][ T34] usb 3-1: setting power OFF [ 126.528262][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 126.542151][ T34] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 126.577859][ T34] (NULL device *): no alternate interface [ 126.637213][ T34] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.678645][ T34] usb 3-1: USB disconnect, device number 5 [ 126.752124][ T7] usb 2-1: USB disconnect, device number 10 [ 127.291745][ T7] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 127.494614][ T7] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 127.517969][ T7] usb 2-1: config 0 has no interface number 0 [ 127.541024][ T7] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 127.570069][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.588998][ T7] usb 2-1: Product: syz [ 127.600042][ T7] usb 2-1: Manufacturer: syz [ 127.609492][ T7] usb 2-1: SerialNumber: syz [ 127.644330][ T7] usb 2-1: config 0 descriptor?? [ 128.152030][ T7] usb 2-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 128.364322][ T7] usb 2-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device [ 128.384036][ T7] usb 2-1: atusb_probe: initialization failed, error = -524 [ 128.401823][ T7] atusb: probe of 2-1:0.128 failed with error -524 [ 128.582044][ T4321] usb 2-1: USB disconnect, device number 11 [ 128.621748][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.821858][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 128.832301][ T7] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 128.881853][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.900259][ T7] usb 4-1: Product: syz [ 128.914449][ T7] usb 4-1: Manufacturer: syz [ 128.930794][ T7] usb 4-1: SerialNumber: syz [ 128.958558][ T7] r8152-cfgselector 4-1: config 0 descriptor?? [ 128.997266][ T26] audit: type=1800 audit(1757165660.269:30): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.220" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 129.661765][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.815643][ T5052] binder_alloc: 5051: pid 5051 spamming oneway? 1 buffers allocated for a total size of 4096 [ 129.861756][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 129.900713][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.000791][ T4321] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 130.086157][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.155578][ T4321] usb 5-1: config 0 descriptor?? [ 130.187007][ T4321] dw2102: su3000_identify_state [ 130.207527][ T4321] dvb-usb: found a 'TeVii S662' in warm state. [ 130.247693][ T4321] dw2102: su3000_power_ctrl: 1, initialized 0 [ 130.258634][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 130.293653][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.312887][ T4321] dvbdev: DVB: registering new adapter (TeVii S662) [ 130.322477][ T5057] tipc: Enabled bearer , priority 0 [ 130.336146][ T4321] usb 5-1: media controller created [ 130.366710][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.388105][ T4321] dw2102: i2c transfer failed. [ 130.401789][ T5045] dvb-usb: bulk message failed: -22 (5/0) [ 130.408143][ T5045] dw2102: i2c transfer failed. [ 130.422878][ T5058] tipc: Resetting bearer [ 130.437879][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.461874][ T4321] dw2102: i2c transfer failed. [ 130.487981][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.518149][ T5056] tipc: Disabling bearer [ 130.530960][ T4321] dw2102: i2c transfer failed. [ 130.570190][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.609025][ T4321] dw2102: i2c transfer failed. [ 130.632333][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.665911][ T4321] dw2102: i2c transfer failed. [ 130.691233][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 130.723112][ T4321] dw2102: i2c transfer failed. [ 130.735779][ T4321] dvb-usb: MAC address: 02:02:02:02:02:02 [ 130.773347][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.873264][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 130.909885][ T4321] dw2102: command 0x0e transfer failed. [ 130.943621][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 130.970787][ T4321] dw2102: command 0x0e transfer failed. [ 131.292713][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 131.304789][ T4321] dw2102: command 0x0e transfer failed. [ 131.318343][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 131.327069][ T4321] dw2102: command 0x0e transfer failed. [ 131.409141][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 131.425493][ T4321] dw2102: command 0x51 transfer failed. [ 131.431096][ T4321] dvb-usb: bulk message failed: -22 (5/0) [ 131.450754][ T4321] dw2102: i2c probe for address 0x68 failed. [ 131.727549][ T4321] dvb-usb: bulk message failed: -22 (5/0) [ 131.744490][ T4321] dw2102: i2c probe for address 0x69 failed. [ 131.756034][ T4321] dvb-usb: bulk message failed: -22 (5/0) [ 131.762882][ T4321] dw2102: i2c probe for address 0x6a failed. [ 131.768927][ T4321] dw2102: probing for demodulator failed. Is the external power switched on? [ 131.798633][ T4321] dvb-usb: no frontend was attached by 'TeVii S662' [ 132.291813][ T4321] rc_core: IR keymap rc-tt-1500 not found [ 132.297787][ T4321] Registered IR keymap rc-empty [ 132.341819][ T4321] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 132.395388][ T4321] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 132.439329][ T4321] dvb-usb: schedule remote query interval to 250 msecs. [ 132.482691][ T4321] dw2102: su3000_power_ctrl: 0, initialized 1 [ 132.537373][ T4321] dvb-usb: TeVii S662 successfully initialized and connected. [ 132.576031][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583630][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.636709][ T4321] usb 5-1: USB disconnect, device number 6 [ 132.827431][ T4321] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 133.618610][ T7] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.632379][ T7] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.651939][ T7] r8152-cfgselector 4-1: bad CDC descriptors [ 133.675197][ T5087] binder_alloc: 5085: pid 5085 spamming oneway? 1 buffers allocated for a total size of 4096 [ 133.676382][ T7] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.742316][ T5093] tipc: Started in network mode [ 133.747254][ T5093] tipc: Node identity d6deaff4c9c2, cluster identity 4711 [ 133.756960][ T7] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 133.883184][ T5093] tipc: Enabled bearer , priority 0 [ 133.949350][ T5093] tipc: Resetting bearer [ 134.081881][ T5092] tipc: Disabling bearer [ 136.311545][ T26] audit: type=1326 audit(1757165667.579:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 136.456411][ T26] audit: type=1326 audit(1757165667.579:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 136.503330][ T5135] [ 136.505717][ T5135] ====================================================== [ 136.512754][ T5135] WARNING: possible circular locking dependency detected [ 136.519809][ T5135] syzkaller #0 Not tainted [ 136.524232][ T5135] ------------------------------------------------------ [ 136.531239][ T5135] syz.0.248/5135 is trying to acquire lock: [ 136.537124][ T5135] ffff888058451450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 136.548539][ T5135] [ 136.548539][ T5135] but task is already holding lock: [ 136.555985][ T5135] ffff888058450130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 136.564972][ T5135] [ 136.564972][ T5135] which lock already depends on the new lock. [ 136.564972][ T5135] [ 136.575369][ T5135] [ 136.575369][ T5135] the existing dependency chain (in reverse order) is: [ 136.584381][ T5135] [ 136.584381][ T5135] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 136.592118][ T5135] lock_sock_nested+0x44/0x100 [ 136.597409][ T5135] smc_listen_out+0x109/0x3d0 [ 136.602610][ T5135] process_one_work+0x898/0x1160 [ 136.608069][ T5135] worker_thread+0xaa2/0x1250 [ 136.613276][ T5135] kthread+0x29d/0x330 [ 136.617886][ T5135] ret_from_fork+0x1f/0x30 [ 136.622919][ T5135] [ 136.622919][ T5135] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 136.633078][ T5135] __lock_acquire+0x2cf8/0x7c50 [ 136.638453][ T5135] lock_acquire+0x1b4/0x490 [ 136.643485][ T5135] __flush_work+0xed/0xa60 [ 136.648433][ T5135] __cancel_work_timer+0x3ac/0x520 [ 136.654096][ T5135] smc_clcsock_release+0x5c/0xe0 [ 136.659560][ T5135] __smc_release+0x661/0x7d0 [ 136.664687][ T5135] smc_close_non_accepted+0xd1/0x1f0 [ 136.670511][ T5135] smc_close_active+0xb00/0xea0 [ 136.675884][ T5135] __smc_release+0x8d/0x7d0 [ 136.680928][ T5135] smc_release+0x2ca/0x530 [ 136.685861][ T5135] sock_close+0xd5/0x240 [ 136.690632][ T5135] __fput+0x22c/0x920 [ 136.695153][ T5135] task_work_run+0x1ca/0x250 [ 136.700271][ T5135] exit_to_user_mode_loop+0xe6/0x110 [ 136.706084][ T5135] exit_to_user_mode_prepare+0xb1/0x140 [ 136.712159][ T5135] syscall_exit_to_user_mode+0x16/0x40 [ 136.718144][ T5135] do_syscall_64+0x58/0xa0 [ 136.723085][ T5135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.729508][ T5135] [ 136.729508][ T5135] other info that might help us debug this: [ 136.729508][ T5135] [ 136.739750][ T5135] Possible unsafe locking scenario: [ 136.739750][ T5135] [ 136.747196][ T5135] CPU0 CPU1 [ 136.752558][ T5135] ---- ---- [ 136.757935][ T5135] lock(sk_lock-AF_SMC/1); [ 136.762442][ T5135] lock((work_completion)(&new_smc->smc_listen_work)); [ 136.771913][ T5135] lock(sk_lock-AF_SMC/1); [ 136.778937][ T5135] lock((work_completion)(&new_smc->smc_listen_work)); [ 136.785873][ T5135] [ 136.785873][ T5135] *** DEADLOCK *** [ 136.785873][ T5135] [ 136.794017][ T5135] 2 locks held by syz.0.248/5135: [ 136.799036][ T5135] #0: ffff888073f99410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 136.809228][ T5135] #1: ffff888058450130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 136.818648][ T5135] [ 136.818648][ T5135] stack backtrace: [ 136.824544][ T5135] CPU: 1 PID: 5135 Comm: syz.0.248 Not tainted syzkaller #0 [ 136.831823][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.841903][ T5135] Call Trace: [ 136.845180][ T5135] [ 136.848109][ T5135] dump_stack_lvl+0x168/0x22e [ 136.852789][ T5135] ? load_image+0x3b0/0x3b0 [ 136.857306][ T5135] ? show_regs_print_info+0x12/0x12 [ 136.862507][ T5135] ? print_circular_bug+0x12b/0x1a0 [ 136.867715][ T5135] check_noncircular+0x274/0x310 [ 136.872662][ T5135] ? add_chain_block+0x940/0x940 [ 136.877600][ T5135] ? lockdep_lock+0xdc/0x1e0 [ 136.882212][ T5135] ? rcu_is_watching+0x11/0xa0 [ 136.886980][ T5135] ? lock_release+0xd4/0x910 [ 136.891573][ T5135] ? _find_first_zero_bit+0xcf/0x100 [ 136.896868][ T5135] __lock_acquire+0x2cf8/0x7c50 [ 136.901738][ T5135] ? __lock_acquire+0x7c50/0x7c50 [ 136.906780][ T5135] ? is_bpf_text_address+0x28b/0x2a0 [ 136.912069][ T5135] ? hlock_conflict+0x59/0x1f0 [ 136.916837][ T5135] ? verify_lock_unused+0x140/0x140 [ 136.922035][ T5135] ? __bfs+0x2a3/0x5c0 [ 136.926107][ T5135] ? check_path+0x40/0x40 [ 136.930452][ T5135] ? mark_lock+0x94/0x320 [ 136.934783][ T5135] ? __lock_acquire+0x13c0/0x7c50 [ 136.939816][ T5135] ? add_chain_block+0x940/0x940 [ 136.944759][ T5135] lock_acquire+0x1b4/0x490 [ 136.949290][ T5135] ? __flush_work+0xd4/0xa60 [ 136.953895][ T5135] ? __lock_acquire+0x13c0/0x7c50 [ 136.958921][ T5135] ? read_lock_is_recursive+0x10/0x10 [ 136.964295][ T5135] ? verify_lock_unused+0x140/0x140 [ 136.969502][ T5135] ? __flush_work+0xd4/0xa60 [ 136.974105][ T5135] __flush_work+0xed/0xa60 [ 136.978526][ T5135] ? __flush_work+0xd4/0xa60 [ 136.983124][ T5135] ? verify_lock_unused+0x140/0x140 [ 136.988322][ T5135] ? flush_work+0x20/0x20 [ 136.992658][ T5135] ? try_to_grab_pending+0xf1/0x840 [ 136.997857][ T5135] ? lockdep_hardirqs_off+0x70/0x100 [ 137.003143][ T5135] ? mark_lock+0x94/0x320 [ 137.007492][ T5135] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 137.013475][ T5135] ? lock_chain_count+0x20/0x20 [ 137.018327][ T5135] ? __cancel_work_timer+0x331/0x520 [ 137.023621][ T5135] __cancel_work_timer+0x3ac/0x520 [ 137.028739][ T5135] ? cancel_work_sync+0x20/0x20 [ 137.033613][ T5135] ? __smc_release+0x659/0x7d0 [ 137.038373][ T5135] ? __local_bh_enable_ip+0x12a/0x1b0 [ 137.043747][ T5135] ? lockdep_hardirqs_on+0x94/0x140 [ 137.048951][ T5135] ? __local_bh_enable_ip+0x12a/0x1b0 [ 137.054327][ T5135] ? _local_bh_enable+0xa0/0xa0 [ 137.059185][ T5135] smc_clcsock_release+0x5c/0xe0 [ 137.064123][ T5135] __smc_release+0x661/0x7d0 [ 137.068710][ T5135] ? do_raw_spin_unlock+0x11d/0x230 [ 137.073915][ T5135] smc_close_non_accepted+0xd1/0x1f0 [ 137.079199][ T5135] smc_close_active+0xb00/0xea0 [ 137.084052][ T5135] ? sock_no_sendpage_locked+0x160/0x160 [ 137.089781][ T5135] __smc_release+0x8d/0x7d0 [ 137.094278][ T5135] ? do_raw_spin_unlock+0x11d/0x230 [ 137.099483][ T5135] smc_release+0x2ca/0x530 [ 137.103896][ T5135] sock_close+0xd5/0x240 [ 137.108142][ T5135] ? sock_mmap+0x90/0x90 [ 137.112383][ T5135] __fput+0x22c/0x920 [ 137.116388][ T5135] task_work_run+0x1ca/0x250 [ 137.120990][ T5135] ? task_work_cancel+0x230/0x230 [ 137.126015][ T5135] ? __close_range+0x1c5/0x730 [ 137.130783][ T5135] ? exit_to_user_mode_loop+0x3b/0x110 [ 137.136245][ T5135] exit_to_user_mode_loop+0xe6/0x110 [ 137.141539][ T5135] exit_to_user_mode_prepare+0xb1/0x140 [ 137.147087][ T5135] syscall_exit_to_user_mode+0x16/0x40 [ 137.152549][ T5135] do_syscall_64+0x58/0xa0 [ 137.156962][ T5135] ? clear_bhb_loop+0x60/0xb0 [ 137.161660][ T5135] ? clear_bhb_loop+0x60/0xb0 [ 137.166363][ T5135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.172273][ T5135] RIP: 0033:0x7f9a6df8ebe9 [ 137.176713][ T5135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.196315][ T5135] RSP: 002b:00007f9a6eec3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 137.204728][ T5135] RAX: 0000000000000000 RBX: 00007f9a6e1c6090 RCX: 00007f9a6df8ebe9 [ 137.212696][ T5135] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 137.220666][ T5135] RBP: 00007f9a6e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.228633][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.236603][ T5135] R13: 00007f9a6e1c6128 R14: 00007f9a6e1c6090 R15: 00007fff306ed8e8 [ 137.244578][ T5135] [ 137.303713][ T26] audit: type=1326 audit(1757165667.579:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.325946][ T5137] binder_alloc: 5136: pid 5136 spamming oneway? 1 buffers allocated for a total size of 4096 [ 137.407986][ T26] audit: type=1326 audit(1757165667.579:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.490953][ T26] audit: type=1326 audit(1757165667.579:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.564039][ T26] audit: type=1326 audit(1757165667.579:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.648169][ T26] audit: type=1326 audit(1757165667.579:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.719138][ T26] audit: type=1326 audit(1757165667.579:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.753794][ T26] audit: type=1326 audit(1757165667.579:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000 [ 137.814784][ T26] audit: type=1326 audit(1757165667.579:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9a6df8ebe9 code=0x7ffc0000