last executing test programs: 16.695781046s ago: executing program 0 (id=325): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) 15.090483415s ago: executing program 1 (id=326): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020400060e00000025bd7000fcdbdf2505000600000000000a004e2400000000fe880000000000000000000000000001020000000000000002000100000000000400030380ffffff050005003c0000000a000000000000050000000000000000000000000000000107000000000000008b1a965fb0b83d3577e20cb69965b1b07fd114c81ba89eb235d548"], 0x70}, 0x1, 0x7}, 0x4) landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) 15.090298975s ago: executing program 0 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 15.022213316s ago: executing program 0 (id=329): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, r2, 0x2000) mkdir(&(0x7f0000000240)='./my_sys\x00', 0x1b7) creat(0x0, 0x3) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0xc000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x401) 14.081679849s ago: executing program 1 (id=331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) 11.266468127s ago: executing program 0 (id=337): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) close(0x3) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 9.10439006s ago: executing program 3 (id=338): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) 9.103641049s ago: executing program 3 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x804) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 9.103536329s ago: executing program 4 (id=341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900), &(0x7f0000001100)=0x8) 9.10213808s ago: executing program 3 (id=342): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000004000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24004044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 8.580398032s ago: executing program 4 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x40, 0x0, 0x100, 0x0, 0x9e0146}) 7.608284786s ago: executing program 3 (id=344): socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(0x0, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040300) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0xffffffff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 6.023132555s ago: executing program 3 (id=345): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0x0, 0x7, 0x8, 0x2e, 0x2d, {0xffff945a, 0x1}, 0x3, 0xed}}) 6.022815644s ago: executing program 0 (id=346): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 5.603432134s ago: executing program 1 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_usbip_server_init(0x1) gettid() ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.98672872s ago: executing program 4 (id=348): socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @void, @val={0x3, 0x1, 0xe}, @void, @void, @val={0x5, 0x3, {0x7, 0xf3, 0xff}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0xda, 0x9d}}, @void, @void, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0xffffffff, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) 4.9726283s ago: executing program 0 (id=349): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002e4000/0x4000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) 4.822578864s ago: executing program 4 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, r1, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.759067025s ago: executing program 4 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRES64=r0], 0x38}}, 0x400c004) syz_emit_ethernet(0x36, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = msgget$private(0x0, 0x1f3) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x8000) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r3) msgrcv(r2, 0x0, 0x0, 0x3, 0x2800) msgrcv(r2, &(0x7f00000004c0)={0x0, ""/127}, 0x87, 0x3, 0x3800) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000200)=""/220) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x304) 2.861297231s ago: executing program 4 (id=357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) 2.46647511s ago: executing program 3 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x40, 0x0, 0x100, 0x0, 0x9e0146}) 2.260393685s ago: executing program 1 (id=359): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 1.974618912s ago: executing program 2 (id=360): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1.927830514s ago: executing program 1 (id=361): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xb069133b23928f78, 0x0) r2 = eventfd(0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) io_submit(0x0, 0x4, &(0x7f0000003a00)=[&(0x7f0000003640)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000002640)="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", 0xd7a, 0x7, 0x0, 0x3, r1}, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x8, 0x54d, r3, &(0x7f0000003680)="2450ce4d2fea29a61c194ec84e94b605beba3cf545be59e972207fbfeac6ddeba5393c5494cde6f39967d75a93c74cf0db9e91a1b03f059296ec0f6f381153a9d60a825b0b3e07ce98ae27ee6401eea574ba990fb8bc2636b6c6b550183e2889f70283c49667a0367bb80f1f10d227e291120b5da6d423231a85f9e38922e89de4a58642137ff5f9d77629603954d1182a4e53fdb3d8044b0aa467611c002c87d6bbcc476742fa9d9b4560c60805c3e4d2afcc9b0b9521ee", 0xb8, 0x5, 0x0, 0x2, r2}, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x3, 0xfffa, r0, &(0x7f00000037c0)="36b6206c4d0f40cce4d2efdab8cbee76af4dfb3fd085b42bcb751ec63fe60e6a053786faa1d3e54a88e62dfdae17fbfdfbf202eece8be23324ff4699cb159216b1a661572d86d68424ae07abe52a5c441628fb2e858f14db44c8eaa68b623acc707812b25cce392e40113baf7940dc912c7f8157e518", 0x76, 0x1, 0x0, 0x3, r1}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000003980), 0x0, 0x7f, 0x0, 0x3, r1}]) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xffffffffffffff61}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='file ?rivers/hid/hid-core.c line 2088 +', 0x27) io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000080)="bf03b1728e39cc1a485ea3acbfed67ba14b51984b4cf30351ab4b5cd896d0d1c28e1601d0ac6ce736b60f9b8566af1fc9ef67eb920f4aed4f56eaefc9d6d230b266fbc82175bf2672e3ec75dd331fc18c8838c403d58969fcf08b8bc43f2c45fb41dfcbf", 0x64, 0x6, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x10, r0, &(0x7f0000000300)="1b47ec6f8b6b91c34b0bb9dc334ff497837f766e595ea3ee2797363ce080258ff194174c15e5d4c3c62f0f965a89d75d64c740c5389faa88f5d399cd61183328797e6efc49f33103e190571a8ee37d3bc5917c1978c9147c7127c5bfc326a1d9377fc766bc0ef0fa35e8bfd07c31ccfbf76c05fd1feb6dbcb22a1bb5e74b36fe2cfcdf6e8ba7a61c0944ad7495b448c92de2fa9568ab6a05078c0262574e93dcae33763bfd3031e03a6a108499f67c32a42911046cb5be816737b4be48d2959e1b178453fa1a59cd9b79ecbf46f70008", 0xd0, 0x65bcfa0d, 0x0, 0x3, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000440)="c32a80ab14eb5041b2eff19b6dc6458667b380066626042641d7dbfabf59cef8eb10f0b1a6e140c23e53b5e10a65f5cc80f0da876ca67675a48ae55006814ce672e7447b6c486e70fddad58b801e25880aa2291cdad3afd899413e5740b8c6b55ee28e1de4ba00140810bfbf985320aa80d41879042721e96f5deaf84655149a87522b0337c6d184df57e49fa30782f627a3965e73b45175a5cfa4d4f8fb827387680ddee47e502b6920df9354c08172ccdae2240474fbb4e4b3684135ff873be91c37d58286848680f17083f8a6aa360dbae133d3e854fe4ff91968740ebdba988d904887a36aeb294296a8e4bba7e013ec0f90c3ddb4527786c8", 0xfb, 0x7fff, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xf, r0, &(0x7f0000000580)="022b86093ce0e4d45e3fd24256c2309d4e60dbd6a8e488bc053f81e2c478137e3ebc8565bb3204e2b7e279aadbeb4549ba04f680e62659def097f2d4e27914d2e517f88e507c7bc98e5cb23322646af6eb4b9a982310a8f197a2d83894641145d845671455a8e3b2dcc069527cc86c3136b123fddcc98e775c73172de5d5aac0f8979c61cf72320ffc93ca9bd8e16827b234fca5cbdcf66bb5c56d8c11c424c2d891bf5147f943f9b6064182b0063e1684c54c727eb8e1ce137eb504a611d579d9074bc25cab7a2a7f13ea679d97a40d52d63b18359fbf619907d36a52f4916f3a0a1c2ce53c69174857a2075e1f", 0xee, 0x9, 0x0, 0x1, r6}]) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x4, 0x4) 1.822342896s ago: executing program 2 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020", @ANYRES8=r0], 0x38}}, 0x0) 1.774440777s ago: executing program 1 (id=363): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fa030000c6000000002150c0"], 0x48}, 0x2}, 0x20000080) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = semget$private(0x0, 0x0, 0x1) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000440)) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/136) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x8c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x12c}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.742713178s ago: executing program 2 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, r1, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.68070464s ago: executing program 2 (id=365): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1.570458752s ago: executing program 2 (id=366): socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(0x0, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040300) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0xffffffff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 0s ago: executing program 2 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRES64=r0], 0x38}}, 0x400c004) syz_emit_ethernet(0x36, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = msgget$private(0x0, 0x1f3) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x8000) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r3) msgrcv(r2, &(0x7f00000004c0)={0x0, ""/127}, 0x87, 0x3, 0x3800) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000200)=""/220) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x304) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 31.440786][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.450751][ T3850] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. syzkaller login: [ 46.924632][ T4170] cgroup: Unknown subsys name 'net' [ 47.053593][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.308675][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.612644][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 49.628657][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 49.657047][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.751217][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.758286][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.767515][ T4191] device bridge_slave_0 entered promiscuous mode [ 49.781098][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.788145][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.795870][ T4191] device bridge_slave_1 entered promiscuous mode [ 49.817321][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.839144][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 49.853096][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.862332][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.869717][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.877228][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.888551][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.895666][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.903722][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.911094][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.918149][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.925881][ T4198] device bridge_slave_0 entered promiscuous mode [ 49.934033][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.941262][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.949076][ T4198] device bridge_slave_1 entered promiscuous mode [ 49.980111][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.008114][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.028538][ T4191] team0: Port device team_slave_0 added [ 50.044479][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.057447][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.068465][ T4191] team0: Port device team_slave_1 added [ 50.089645][ T4198] team0: Port device team_slave_0 added [ 50.106633][ T4198] team0: Port device team_slave_1 added [ 50.139753][ T4184] team0: Port device team_slave_0 added [ 50.152142][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.159221][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.185612][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.203082][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.210079][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.235986][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.247481][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.254451][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.280353][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.292594][ T4184] team0: Port device team_slave_1 added [ 50.298683][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.305755][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.331844][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.349635][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.356753][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.364419][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.387451][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.396070][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.403230][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.411882][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.437068][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.444102][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.470076][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.492182][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.507878][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.515088][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.541044][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.567031][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.581294][ T4191] device hsr_slave_0 entered promiscuous mode [ 50.588076][ T4191] device hsr_slave_1 entered promiscuous mode [ 50.618533][ T4198] device hsr_slave_0 entered promiscuous mode [ 50.625275][ T4198] device hsr_slave_1 entered promiscuous mode [ 50.631979][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.639775][ T4198] Cannot create hsr debugfs directory [ 50.681291][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.687833][ T4184] device hsr_slave_1 entered promiscuous mode [ 50.694698][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.702329][ T4184] Cannot create hsr debugfs directory [ 50.717316][ T4188] team0: Port device team_slave_0 added [ 50.745891][ T4188] team0: Port device team_slave_1 added [ 50.777703][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.785007][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.793287][ T4192] device bridge_slave_0 entered promiscuous mode [ 50.807646][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.816113][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.842079][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.855885][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.863439][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.889483][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.913936][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.921225][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.928858][ T4192] device bridge_slave_1 entered promiscuous mode [ 50.976704][ T4188] device hsr_slave_0 entered promiscuous mode [ 50.983642][ T4188] device hsr_slave_1 entered promiscuous mode [ 50.990422][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.997975][ T4188] Cannot create hsr debugfs directory [ 51.045309][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.062202][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.150908][ T4192] team0: Port device team_slave_0 added [ 51.168513][ T4192] team0: Port device team_slave_1 added [ 51.198594][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.205765][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.231753][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.252715][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.259760][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.285727][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.325217][ T4192] device hsr_slave_0 entered promiscuous mode [ 51.331894][ T4192] device hsr_slave_1 entered promiscuous mode [ 51.338364][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.347660][ T4192] Cannot create hsr debugfs directory [ 51.380522][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.390101][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 51.392359][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 51.396491][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 51.408391][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 51.420056][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.422314][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 51.438323][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.465024][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.507198][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.520307][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.528635][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.538717][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.594298][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.608184][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.617521][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.647173][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.685692][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.695668][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.707643][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.742221][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.749299][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.802072][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.817772][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.828213][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.837456][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.847689][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.859973][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.868530][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.879360][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.904881][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.913512][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.923245][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.933087][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.943308][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.950548][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.959524][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.970957][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.986799][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.997825][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.007178][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.018555][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.025622][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.066504][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.082207][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.091364][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.101062][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.108105][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.116076][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.124905][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.133544][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.140630][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.148188][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.156820][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.165369][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.173992][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.182111][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.190117][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.198852][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.208113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.217396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.246368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.254969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.267076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.275952][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.283049][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.292070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.311979][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.321763][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.330721][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.339911][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.348181][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.355242][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.367726][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.377974][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.386637][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.395462][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.403916][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.417159][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.426149][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.434797][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.443226][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.455484][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.468655][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.481754][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.495342][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.503733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.513180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.522437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.530787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.538950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.556589][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.575147][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.588393][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.606749][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.615618][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.623593][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.631695][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.640284][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.648472][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.656936][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.665324][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.677482][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.688600][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.703887][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.714344][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.721455][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.735923][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.751915][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.773723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.786543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.797231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.819808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.836726][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.853610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.870409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.883029][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.907102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.917923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.926397][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.933450][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.941764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.955025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.964155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.973336][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.980422][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.008504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.017270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.026357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.041353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.048777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.063279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.071908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.081076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.089994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.098175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.106471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.115177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.124311][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.131383][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.139286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.149407][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.163601][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.176622][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.189217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.196980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.206540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.215351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.224446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.234271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.251438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.259830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.268282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.285912][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.296178][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.315243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.329795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.362860][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.378027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.387511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.428119][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.445808][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.458015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.468550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.469605][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 53.478614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.482976][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 53.496284][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 53.496412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.502949][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 53.516443][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 53.516568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.533235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.541673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.551295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.560028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.567652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.575528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.594897][ T4191] device veth0_vlan entered promiscuous mode [ 53.606943][ T4191] device veth1_vlan entered promiscuous mode [ 53.619516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.627582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.638450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.646655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.654586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.664961][ T4184] device veth0_vlan entered promiscuous mode [ 53.686862][ T4184] device veth1_vlan entered promiscuous mode [ 53.707904][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.728874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.752459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.764627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.776343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.785911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.795321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.803224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.811950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.822446][ T4198] device veth0_vlan entered promiscuous mode [ 53.838833][ T4191] device veth0_macvtap entered promiscuous mode [ 53.848139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.860305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.879775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.892969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.908689][ T4198] device veth1_vlan entered promiscuous mode [ 53.927506][ T4184] device veth0_macvtap entered promiscuous mode [ 53.941491][ T4191] device veth1_macvtap entered promiscuous mode [ 53.956196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.966445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.987157][ T4184] device veth1_macvtap entered promiscuous mode [ 54.006775][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.017600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.027911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.036383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.046087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.067789][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.078629][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.089862][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.108074][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.118767][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.131586][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.142542][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.153948][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.161950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.170107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.177504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.186202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.195836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.204659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.213226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.221910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.232093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.241048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.253924][ T4198] device veth0_macvtap entered promiscuous mode [ 54.266777][ T4198] device veth1_macvtap entered promiscuous mode [ 54.279631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.288326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.296993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.314332][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.323865][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.333121][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.342306][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.353714][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.365513][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374431][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.383165][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.401755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.416004][ T4192] device veth0_vlan entered promiscuous mode [ 54.425470][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.437123][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.447207][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.457859][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.470008][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.477521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.488687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.497164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.506196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.515847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.524508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.533513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.541289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.557375][ T4192] device veth1_vlan entered promiscuous mode [ 54.575876][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.588285][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.598554][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.609773][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.621498][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.639950][ T4192] device veth0_macvtap entered promiscuous mode [ 54.652383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.661952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.671235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.679927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.688414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.696952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.705452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.721149][ T4192] device veth1_macvtap entered promiscuous mode [ 54.733085][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.744780][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.754911][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.764522][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.779900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.788679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.797449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.829588][ T4188] device veth0_vlan entered promiscuous mode [ 54.851975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.862418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.877986][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.888736][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.898602][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.911258][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.921561][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.932204][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.943891][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.958759][ T4188] device veth1_vlan entered promiscuous mode [ 54.974464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.986371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.996446][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.004682][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.029149][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.039922][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.050610][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.061568][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.072199][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.083577][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.095278][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.110663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.118364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.127060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.144578][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.152918][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.174237][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.180039][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.186860][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.200709][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.208471][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.217548][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.244744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.253288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.261466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.272459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.292572][ T4188] device veth0_macvtap entered promiscuous mode [ 55.310573][ T4188] device veth1_macvtap entered promiscuous mode [ 55.378419][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.386507][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.388114][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.409468][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.419708][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.430560][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.431237][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.440634][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.456647][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.467863][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.478562][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.489520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.501491][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.516398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.524557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.533410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.541513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.549432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.557711][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 55.557946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.572391][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 55.578783][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 55.585241][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 55.592476][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.603654][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.613768][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 55.622977][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.634657][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.644839][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.660710][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.674022][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.687223][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.705433][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.785852][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.802142][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.811848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.820877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.832894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.847341][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.856657][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865531][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.876598][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.791787][ T4269] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.922727][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.965268][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.026355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.052672][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.076618][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.099334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.109629][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 57.141812][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.165997][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.313866][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.541129][ T4227] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 57.604431][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.693553][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 57.842028][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.886007][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.919622][ T4227] usb 3-1: config 0 descriptor?? [ 58.088921][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.106111][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 58.113581][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 58.119687][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 58.126966][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 58.281286][ T4289] kernel profiling enabled (shift: 23) [ 59.499036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.519025][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.529019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.539027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.549020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.559017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.569022][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.579020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.589019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.599017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.618987][ C0] sched: RT throttling activated [ 60.069239][ T4227] [drm:udl_init] *ERROR* Selecting channel failed [ 60.902405][ T4227] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 62.128037][ T4227] [drm] Initialized udl on minor 2 [ 62.166472][ T4227] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 62.266950][ T4227] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 62.274615][ T4299] tipc: Started in network mode [ 62.279756][ T4299] tipc: Node identity 4, cluster identity 4711 [ 62.285903][ T4299] tipc: Node number set to 4 [ 62.329470][ T4227] usb 3-1: USB disconnect, device number 2 [ 62.341696][ T1110] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 62.352156][ T1110] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 62.361578][ T1110] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 62.693638][ T4319] ubi0: attaching mtd0 [ 62.705140][ T4319] ubi0: scanning is finished [ 62.709903][ T4319] ubi0: empty MTD device detected [ 62.933445][ T4319] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.941198][ T4319] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.948494][ T4319] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.955653][ T4319] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 62.963203][ T4319] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.970125][ T4319] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.978526][ T4319] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1815630591 [ 62.988795][ T4319] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 63.033236][ T4320] ubi0: background thread "ubi_bgt0d" started, PID 4320 [ 63.110987][ T4318] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 63.437184][ T4330] process 'syz.3.15' launched './file2' with NULL argv: empty string added [ 64.000602][ T4318] ODEBUG: Out of memory. ODEBUG disabled [ 64.302313][ T4318] syz.4.14 (4318): drop_caches: 2 [ 66.339066][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.245330][ T4353] FAULT_INJECTION: forcing a failure. [ 68.245330][ T4353] name failslab, interval 1, probability 0, space 0, times 1 [ 68.295213][ T4353] CPU: 1 PID: 4353 Comm: syz.2.25 Not tainted syzkaller #0 [ 68.302456][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.312532][ T4353] Call Trace: [ 68.315816][ T4353] [ 68.318754][ T4353] dump_stack_lvl+0x188/0x250 [ 68.323447][ T4353] ? show_regs_print_info+0x20/0x20 [ 68.328656][ T4353] ? load_image+0x410/0x410 [ 68.333169][ T4353] ? __might_sleep+0xf0/0xf0 [ 68.337766][ T4353] ? __lock_acquire+0x7d40/0x7d40 [ 68.342802][ T4353] should_fail+0x383/0x4b0 [ 68.347234][ T4353] should_failslab+0x5/0x20 [ 68.351875][ T4353] slab_pre_alloc_hook+0x51/0xc0 [ 68.356824][ T4353] kmem_cache_alloc_trace+0x47/0x290 [ 68.362110][ T4353] ? percpu_ref_init+0xc0/0x340 [ 68.366974][ T4353] ? rcu_lock_release+0x20/0x20 [ 68.371824][ T4353] percpu_ref_init+0xc0/0x340 [ 68.376515][ T4353] blkg_alloc+0xc6/0x640 [ 68.380778][ T4353] blkcg_init_queue+0x26/0x430 [ 68.385555][ T4353] blk_alloc_queue+0x427/0x580 [ 68.390335][ T4353] __blk_mq_alloc_disk+0x43/0x150 [ 68.395371][ T4353] ? loop_add+0x263/0x890 [ 68.399706][ T4353] loop_add+0x288/0x890 [ 68.403870][ T4353] loop_control_ioctl+0x124/0x550 [ 68.408901][ T4353] ? xor_init+0x60/0x60 [ 68.413071][ T4353] ? bpf_lsm_file_ioctl+0x5/0x10 [ 68.418013][ T4353] ? security_file_ioctl+0x7c/0xa0 [ 68.423132][ T4353] ? xor_init+0x60/0x60 [ 68.427291][ T4353] __se_sys_ioctl+0xfa/0x170 [ 68.431888][ T4353] do_syscall_64+0x4c/0xa0 [ 68.436304][ T4353] ? clear_bhb_loop+0x30/0x80 [ 68.440982][ T4353] ? clear_bhb_loop+0x30/0x80 [ 68.445665][ T4353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.451614][ T4353] RIP: 0033:0x7fa53c4421d9 [ 68.456034][ T4353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.475645][ T4353] RSP: 002b:00007fa53a69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.484067][ T4353] RAX: ffffffffffffffda RBX: 00007fa53c6c9fa0 RCX: 00007fa53c4421d9 [ 68.492040][ T4353] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 68.500018][ T4353] RBP: 00007fa53c4d9888 R08: 0000000000000000 R09: 0000000000000000 [ 68.507996][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.515966][ T4353] R13: 00007fa53c6ca038 R14: 00007fa53c6c9fa0 R15: 00007ffdd3351698 [ 68.523956][ T4353] [ 69.729490][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.153781][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.161247][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.083378][ T4382] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 72.124472][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 72.133982][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.142426][ T4382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 72.149161][ T4382] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.171692][ T4382] vhci_hcd vhci_hcd.0: Device attached [ 72.244181][ T4227] usb 1-1: can't set config #1, error -71 [ 72.251283][ T4389] tipc: Enabling of bearer rejected, failed to enable media [ 72.445118][ T4382] syz.0.31 (4382): drop_caches: 2 [ 72.962442][ T4396] using random self ethernet address [ 72.967969][ T4396] using random host ethernet address [ 73.535788][ T25] audit: type=1800 audit(1791540204.238:2): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.35" name="sub_compatible_id" dev="configfs" ino=32409 res=0 errno=0 [ 73.540436][ T26] usb 34-1: SetAddress Request (2) to port 0 [ 73.562438][ T4227] usb 1-1: USB disconnect, device number 2 [ 73.682721][ T26] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.705204][ T4403] FAULT_INJECTION: forcing a failure. [ 73.705204][ T4403] name failslab, interval 1, probability 0, space 0, times 0 [ 73.743628][ T4403] CPU: 0 PID: 4403 Comm: syz.1.37 Not tainted syzkaller #0 [ 73.750854][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.760910][ T4403] Call Trace: [ 73.764195][ T4403] [ 73.767121][ T4403] dump_stack_lvl+0x188/0x250 [ 73.771805][ T4403] ? show_regs_print_info+0x20/0x20 [ 73.777002][ T4403] ? load_image+0x410/0x410 [ 73.781512][ T4403] ? __might_sleep+0xf0/0xf0 [ 73.786108][ T4403] ? __lock_acquire+0x7d40/0x7d40 [ 73.791149][ T4403] should_fail+0x383/0x4b0 [ 73.795579][ T4403] should_failslab+0x5/0x20 [ 73.800085][ T4403] slab_pre_alloc_hook+0x51/0xc0 [ 73.805027][ T4403] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 73.810745][ T4403] ? blkg_alloc+0xa9/0x640 [ 73.815177][ T4403] blkg_alloc+0xa9/0x640 [ 73.819432][ T4403] blkcg_init_queue+0x26/0x430 [ 73.824207][ T4403] blk_alloc_queue+0x427/0x580 [ 73.828985][ T4403] __blk_mq_alloc_disk+0x43/0x150 [ 73.834014][ T4403] ? loop_add+0x263/0x890 [ 73.838347][ T4403] loop_add+0x288/0x890 [ 73.842509][ T4403] loop_control_ioctl+0x124/0x550 [ 73.847541][ T4403] ? xor_init+0x60/0x60 [ 73.851691][ T4403] ? bpf_lsm_file_ioctl+0x5/0x10 [ 73.856630][ T4403] ? security_file_ioctl+0x7c/0xa0 [ 73.861739][ T4403] ? xor_init+0x60/0x60 [ 73.865884][ T4403] __se_sys_ioctl+0xfa/0x170 [ 73.870477][ T4403] do_syscall_64+0x4c/0xa0 [ 73.874881][ T4403] ? clear_bhb_loop+0x30/0x80 [ 73.879551][ T4403] ? clear_bhb_loop+0x30/0x80 [ 73.884209][ T4403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.890096][ T4403] RIP: 0033:0x7fa13117c1d9 [ 73.894508][ T4403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.914090][ T4403] RSP: 002b:00007fa12f3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.922485][ T4403] RAX: ffffffffffffffda RBX: 00007fa131403fa0 RCX: 00007fa13117c1d9 [ 73.930442][ T4403] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 73.938405][ T4403] RBP: 00007fa131213888 R08: 0000000000000000 R09: 0000000000000000 [ 73.946358][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.954325][ T4403] R13: 00007fa131404038 R14: 00007fa131403fa0 R15: 00007ffe684f0238 [ 73.962292][ T4403] [ 74.558908][ T4410] tipc: Started in network mode [ 74.563890][ T4410] tipc: Node identity 4, cluster identity 4711 [ 74.570169][ T4410] tipc: Node number set to 4 [ 76.215032][ T4227] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.009460][ T4294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.199235][ T4227] usb 1-1: device descriptor read/all, error -71 [ 77.457182][ T4431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.859099][ T4294] usb 2-1: string descriptor 0 read error: -71 [ 79.865762][ T4294] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 79.899069][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 79.939498][ T4294] usb 2-1: can't set config #1, error -71 [ 79.965608][ T4294] usb 2-1: USB disconnect, device number 2 [ 80.640251][ T4461] overlayfs: failed to resolve './file0': -2 [ 81.393846][ T21] cfg80211: failed to load regulatory.db [ 82.654986][ T4294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.029352][ T4294] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.111302][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.225179][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.313698][ T4294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.469260][ T4294] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.495878][ T4294] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.519060][ T4294] usb 3-1: Manufacturer: syz [ 83.530164][ T4294] usb 3-1: config 0 descriptor?? [ 83.699097][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.049183][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.090968][ T4294] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 84.142261][ T4294] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 84.409751][ T4294] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 84.440784][ T4294] usb 3-1: USB disconnect, device number 4 [ 84.539073][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 84.653599][ T4496] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 84.985477][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 85.819142][ T1110] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 85.938694][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.029338][ T21] usb 2-1: Product: syz [ 86.079928][ T21] usb 2-1: Manufacturer: syz [ 86.195530][ T1110] usb 1-1: config 0 has no interface number 0 [ 86.207333][ T1110] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.217788][ T1110] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.388396][ T4495] fido_id[4495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 86.552381][ T4504] binder: 4503:4504 ioctl 4018620d 0 returned -22 [ 86.579288][ T1110] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 86.897168][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.922745][ T4485] fuse: Unknown parameter '0x0000000000000004' [ 87.115767][ T4485] fuse: Bad value for 'user_id' [ 87.753697][ T1110] usb 1-1: config 0 descriptor?? [ 87.765817][ T21] logitech-djreceiver 0003:046D:C52B.0002: hiddev0,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 87.779294][ T1110] usb 1-1: can't set config #0, error -71 [ 87.791268][ T1110] usb 1-1: USB disconnect, device number 5 [ 87.849921][ T21] logitech-djreceiver 0003:046D:C52B.0002: logi_dj_recv_send_report: unable to find dj report [ 87.897757][ T21] logitech-djreceiver 0003:046D:C52B.0002: logi_dj_recv_switch_to_dj_mode error:-19 [ 88.303838][ T4532] device vlan0 entered promiscuous mode [ 88.374031][ T4384] vhci_hcd: connection reset by peer [ 88.385657][ T1246] vhci_hcd: stop threads [ 88.396615][ T1246] vhci_hcd: release socket [ 88.526850][ T4535] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 88.529047][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.822835][ T26] usb 34-1: device descriptor read/8, error -110 [ 89.857405][ T1246] vhci_hcd: disconnect device [ 90.066646][ T4227] usb 2-1: USB disconnect, device number 3 [ 90.179178][ T4542] FAULT_INJECTION: forcing a failure. [ 90.179178][ T4542] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 90.206896][ T4544] device syzkaller0 entered promiscuous mode [ 90.215220][ T4545] Zero length message leads to an empty skb [ 90.224625][ T4544] tipc: Started in network mode [ 90.242361][ T4544] tipc: Node identity 4e87634de32d, cluster identity 4711 [ 90.250981][ T4542] CPU: 1 PID: 4542 Comm: syz.1.80 Not tainted syzkaller #0 [ 90.258192][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.268253][ T4542] Call Trace: [ 90.271532][ T4542] [ 90.274468][ T4542] dump_stack_lvl+0x188/0x250 [ 90.279160][ T4542] ? show_regs_print_info+0x20/0x20 [ 90.284369][ T4542] ? load_image+0x410/0x410 [ 90.288884][ T4542] ? __lock_acquire+0x7d40/0x7d40 [ 90.293936][ T4542] should_fail+0x383/0x4b0 [ 90.298372][ T4542] prepare_alloc_pages+0x1e3/0x5b0 [ 90.303507][ T4542] __alloc_pages+0x11b/0x480 [ 90.308110][ T4542] ? zone_statistics+0x170/0x170 [ 90.313063][ T4542] ? count_memcg_event_mm+0x324/0x370 [ 90.318442][ T4542] ? remove_device_exclusive_entry+0xac0/0xac0 [ 90.324609][ T4542] alloc_pages_vma+0x2bc/0x790 [ 90.329386][ T4542] handle_mm_fault+0x23be/0x4440 [ 90.334353][ T4542] ? get_page+0xe0/0xe0 [ 90.338515][ T4542] ? follow_page_mask+0xa51/0x12b0 [ 90.343616][ T4542] __get_user_pages+0x952/0x11e0 [ 90.348557][ T4542] ? populate_vma_page_range+0x290/0x290 [ 90.354183][ T4542] ? read_lock_is_recursive+0x10/0x10 [ 90.359553][ T4542] populate_vma_page_range+0x213/0x290 [ 90.365016][ T4542] __mm_populate+0x275/0x3b0 [ 90.369593][ T4542] ? check_vma_flags+0x470/0x470 [ 90.374521][ T4542] ? up_write+0x1b6/0x410 [ 90.378831][ T4542] do_mlock+0x49c/0x550 [ 90.382981][ T4542] __x64_sys_mlock+0x5c/0x70 [ 90.387552][ T4542] do_syscall_64+0x4c/0xa0 [ 90.391949][ T4542] ? clear_bhb_loop+0x30/0x80 [ 90.396604][ T4542] ? clear_bhb_loop+0x30/0x80 [ 90.401276][ T4542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.407149][ T4542] RIP: 0033:0x7fa13117c1d9 [ 90.411551][ T4542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.431157][ T4542] RSP: 002b:00007fa12f3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 90.439579][ T4542] RAX: ffffffffffffffda RBX: 00007fa131403fa0 RCX: 00007fa13117c1d9 [ 90.447533][ T4542] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 90.455484][ T4542] RBP: 00007fa131213888 R08: 0000000000000000 R09: 0000000000000000 [ 90.463448][ T4542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.471436][ T4542] R13: 00007fa131404038 R14: 00007fa131403fa0 R15: 00007ffe684f0238 [ 90.479403][ T4542] [ 90.484856][ T26] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 90.500686][ T26] usb usb34-port1: attempt power cycle [ 90.516917][ T4544] tipc: Enabled bearer , priority 0 [ 90.523936][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.539380][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 90.561616][ T4547] tipc: Resetting bearer [ 90.569542][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 90.594205][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 90.614249][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 90.629060][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.648285][ T21] usb 5-1: config 0 descriptor?? [ 90.672766][ T4543] tipc: Resetting bearer [ 90.715896][ T4543] tipc: Disabling bearer [ 90.869105][ T26] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 90.919083][ T21] hdpvr 5-1:0.0: firmware version 0x0 dated [ 90.927473][ T21] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 91.141820][ T4554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.83'. [ 91.152875][ T4553] tipc: Enabling of bearer rejected, failed to enable media [ 91.199291][ T26] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 91.221756][ T26] usb usb34-port1: unable to enumerate USB device [ 92.229381][ T25] audit: type=1800 audit(1791540222.878:3): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.84" name="sub_compatible_id" dev="configfs" ino=32609 res=0 errno=0 [ 92.648952][ T21] hdpvr 5-1:0.0: Could not setup controls [ 92.654842][ T21] hdpvr 5-1:0.0: registering videodev failed [ 93.200477][ T21] hdpvr: probe of 5-1:0.0 failed with error -71 [ 93.383222][ T21] usb 5-1: USB disconnect, device number 2 [ 95.021282][ T4576] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 9 (only 8 groups) [ 95.423230][ T4586] ======================================================= [ 95.423230][ T4586] WARNING: The mand mount option has been deprecated and [ 95.423230][ T4586] and is ignored by this kernel. Remove the mand [ 95.423230][ T4586] option from the mount to silence this warning. [ 95.423230][ T4586] ======================================================= [ 96.163869][ T4590] tipc: Enabling of bearer rejected, failed to enable media [ 98.209404][ T4608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.98'. [ 100.845473][ T25] audit: type=1800 audit(1791540232.058:4): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.110" name="UDC" dev="configfs" ino=34084 res=0 errno=0 [ 100.872883][ T4636] udc-core: couldn't find an available UDC or it's busy [ 100.896807][ T4634] device vlan0 entered promiscuous mode [ 100.958385][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.304502][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 101.592167][ T21] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 101.618344][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.639360][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.657391][ T21] usb 1-1: Product: syz [ 101.680935][ T21] usb 1-1: Manufacturer: syz [ 101.707083][ T21] usb 1-1: SerialNumber: syz [ 101.737095][ T21] usb 1-1: config 0 descriptor?? [ 101.748048][ T4649] tipc: Enabling of bearer rejected, failed to enable media [ 102.789075][ T25] audit: type=1800 audit(1791540233.428:5): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.114" name="sub_compatible_id" dev="configfs" ino=34853 res=0 errno=0 [ 102.790873][ T21] gspca_main: se401-2.14.0 probing 047d:5003 [ 103.704182][ T21] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 103.718969][ T4227] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 103.736866][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.761088][ T4227] usb 5-1: Product: syz [ 103.772849][ T4227] usb 5-1: Manufacturer: syz [ 104.016479][ T21] se401: probe of 1-1:0.0 failed with error -71 [ 104.027117][ T21] usb 1-1: USB disconnect, device number 6 [ 104.313599][ T4670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.331598][ T4646] fuse: Unknown parameter '0x0000000000000004' [ 104.408003][ T4646] fuse: Bad value for 'user_id' [ 104.625521][ T4227] logitech-djreceiver 0003:046D:C52B.0003: hiddev0,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 105.046025][ T4227] logitech-djreceiver 0003:046D:C52B.0003: logi_dj_recv_send_report: unable to find dj report [ 105.057027][ T4227] logitech-djreceiver 0003:046D:C52B.0003: logi_dj_recv_switch_to_dj_mode error:-19 [ 105.078660][ T4227] usb 5-1: USB disconnect, device number 3 [ 105.113006][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.815814][ T4691] fido_id[4691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.857384][ T4685] [U]  [ 107.602236][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 107.602236][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 107.688110][ T4226] usb 2-1: device descriptor read/all, error -71 [ 107.988190][ T4714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'. [ 109.532214][ T4731] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 111.366414][ T4745] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 111.372954][ T4745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.380550][ T4745] vhci_hcd vhci_hcd.0: Device attached [ 111.913562][ T4227] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 113.284910][ T4747] vhci_hcd: connection reset by peer [ 113.290791][ T1246] vhci_hcd: stop threads [ 113.295069][ T1246] vhci_hcd: release socket [ 113.323161][ T1246] vhci_hcd: disconnect device [ 114.303197][ T4778] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 115.726904][ T4806] device vlan0 entered promiscuous mode [ 117.338538][ T4807] ISOFS: Unable to identify CD-ROM format. [ 118.515127][ T4227] vhci_hcd: vhci_device speed not set [ 119.661271][ T4827] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 122.513768][ T4853] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 123.421368][ T4853] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 123.488316][ T4858] device vlan0 entered promiscuous mode [ 123.579447][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 123.671345][ T4865] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 125.079173][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.658970][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 126.675529][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.684087][ T7] usb 1-1: Product: syz [ 126.692425][ T7] usb 1-1: Manufacturer: syz [ 127.147072][ T4294] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.386957][ T7] usbhid 1-1:1.0: can't add hid device: -71 [ 127.394449][ T7] usbhid: probe of 1-1:1.0 failed with error -71 [ 127.408280][ T25] audit: type=1326 audit(1791540258.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.458260][ T7] usb 1-1: USB disconnect, device number 7 [ 127.480008][ T25] audit: type=1326 audit(1791540258.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.554988][ T25] audit: type=1326 audit(1791540258.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401c89fa0e code=0x7ffc0000 [ 127.613476][ T25] audit: type=1326 audit(1791540258.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.622495][ T4294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.638647][ T25] audit: type=1326 audit(1791540258.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.674981][ T4294] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 127.699273][ T25] audit: type=1326 audit(1791540258.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.704993][ T4294] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 127.746731][ T4294] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 127.769799][ T4294] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.796671][ T4294] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.819469][ T4898] infiniband syz0: set active [ 127.827982][ T25] audit: type=1326 audit(1791540258.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.862526][ T4898] infiniband syz0: added team_slave_0 [ 127.878852][ T4294] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 127.955779][ T25] audit: type=1326 audit(1791540258.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 127.986845][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.107137][ T4294] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 128.130119][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.172305][ T25] audit: type=1326 audit(1791540258.730:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 128.204504][ T4294] usb 4-1: Product: syz [ 128.265586][ T4294] usb 4-1: Manufacturer: syz [ 128.272612][ T4898] RDS/IB: syz0: added [ 128.292392][ T4294] usb 4-1: SerialNumber: syz [ 128.363202][ T4898] smc: adding ib device syz0 with port count 1 [ 128.385910][ T25] audit: type=1326 audit(1791540258.730:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.0.197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401c8df1d9 code=0x7ffc0000 [ 128.414752][ T4886] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.430335][ T4886] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.465149][ T4898] smc: ib device syz0 port 1 has pnetid [ 128.479979][ T4886] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.534971][ T4294] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 128.563480][ T4294] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 128.642934][ T4294] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 128.699453][ T4294] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 128.799041][ T4294] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 128.953772][ T4294] usb 4-1: USB disconnect, device number 2 [ 129.191396][ T4294] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 129.290901][ T4294] keyspan 4-1:1.0: device disconnected [ 129.976771][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.478718][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.696766][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.707069][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.716944][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.731560][ T7] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 130.740800][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.773429][ T7] usb 1-1: can't set config #1, error -71 [ 130.781858][ T7] usb 1-1: USB disconnect, device number 8 [ 130.826484][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 130.925450][ T4930] device macvlan2 entered promiscuous mode [ 130.942820][ T4930] device bond1 entered promiscuous mode [ 130.975834][ T4930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.015209][ T4930] device bond1 left promiscuous mode [ 131.147234][ T1107] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 131.156537][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.164629][ T1107] usb 4-1: Product: syz [ 131.170682][ T1107] usb 4-1: Manufacturer: syz [ 131.668677][ T4942] ip_tables: iptables: counters copy to user failed while replacing table [ 131.890364][ T4919] fuse: Unknown parameter '0x0000000000000004' [ 131.907620][ T4919] fuse: Bad value for 'user_id' [ 131.917257][ T4194] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.967783][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974091][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.057557][ T1107] usbhid 4-1:1.0: can't add hid device: -71 [ 133.086380][ T1107] usbhid: probe of 4-1:1.0 failed with error -71 [ 133.371138][ T1107] usb 4-1: USB disconnect, device number 3 [ 133.523271][ T4194] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.563162][ T4194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.603796][ T4194] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.811504][ T4194] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 133.811532][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.811551][ T4194] usb 2-1: Product: syz [ 133.811564][ T4194] usb 2-1: Manufacturer: syz [ 133.811578][ T4194] usb 2-1: SerialNumber: syz [ 133.826861][ T4939] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.847742][ T4194] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 133.847799][ T4194] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 133.847826][ T4194] usbserial_generic 2-1:1.0: generic converter detected [ 133.849782][ T4194] usb 2-1: generic converter now attached to ttyUSB0 [ 134.208472][ T7] usb 2-1: USB disconnect, device number 6 [ 134.224174][ T7] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 134.378949][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 134.584956][ T7] usbserial_generic 2-1:1.0: device disconnected [ 135.307114][ T4997] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 135.816423][ T4227] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.938582][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 136.975699][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.992903][ T4227] usb 1-1: Product: syz [ 137.011465][ T4227] usb 1-1: Manufacturer: syz [ 137.276284][ T4194] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.477388][ T5005] fuse: Unknown parameter '0x0000000000000004' [ 137.485190][ T5005] fuse: Bad value for 'user_id' [ 137.566345][ T4194] usb 5-1: Using ep0 maxpacket: 32 [ 137.576379][ T4227] usbhid 1-1:1.0: can't add hid device: -71 [ 137.586799][ T4227] usbhid: probe of 1-1:1.0 failed with error -71 [ 137.615188][ T4227] usb 1-1: USB disconnect, device number 9 [ 138.446412][ T4194] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.597117][ T4194] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 138.621732][ T4194] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 138.728197][ T4194] usb 5-1: config 14 has no interface number 0 [ 138.789119][ T4194] usb 5-1: config 14 has no interface number 1 [ 138.848030][ T4194] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 139.593145][ T5050] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 140.358906][ T4194] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 140.371077][ T4194] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 140.383205][ T4194] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.396774][ T4194] usb 5-1: config 14 interface 57 has no altsetting 0 [ 140.404666][ T4194] usb 5-1: config 14 interface 228 has no altsetting 0 [ 140.536177][ T4194] usb 5-1: string descriptor 0 read error: -71 [ 140.652722][ T4194] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 140.662363][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.696395][ T4194] usb 5-1: can't set config #14, error -71 [ 140.736926][ T4194] usb 5-1: USB disconnect, device number 4 [ 140.838967][ T5062] overlayfs: unrecognized mount option "/file0" or missing value [ 142.459657][ T5078] binder: 5077:5078 ioctl 4018620d 0 returned -22 [ 142.507989][ T5080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 143.597656][ T5080] CIFS: Attempting to mount \\127.0.0.1\share [ 143.635705][ T5080] CIFS: VFS: No username specified [ 144.236991][ T5093] tipc: Started in network mode [ 144.241955][ T5093] tipc: Node identity 4, cluster identity 4711 [ 144.248262][ T5093] tipc: Node number set to 4 [ 147.536019][ T5133] overlayfs: failed to resolve './file0': -2 [ 151.290026][ T25] kauditd_printk_skb: 26 callbacks suppressed [ 151.290039][ T25] audit: type=1326 audit(1791540282.511:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 151.397246][ T25] audit: type=1326 audit(1791540282.551:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 151.424038][ T5180] ima: policy update completed [ 151.464314][ T25] audit: type=1326 audit(1791540282.561:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 152.505125][ T25] audit: type=1326 audit(1791540282.561:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 152.575819][ T25] audit: type=1326 audit(1791540282.561:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 152.669789][ T25] audit: type=1326 audit(1791540282.571:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13113ca0e code=0x7ffc0000 [ 152.694441][ T25] audit: type=1326 audit(1791540282.571:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13113ca0e code=0x7ffc0000 [ 152.719035][ T25] audit: type=1326 audit(1791540282.571:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 152.743197][ T25] audit: type=1326 audit(1791540282.571:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 152.800546][ T5190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.297'. [ 152.805444][ T25] audit: type=1326 audit(1791540282.571:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.1.291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa13117c1d9 code=0x7ffc0000 [ 153.335491][ T4227] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.993849][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.320082][ T25] kauditd_printk_skb: 36 callbacks suppressed [ 156.320096][ T25] audit: type=1800 audit(1791540287.541:88): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50667 res=0 errno=0 [ 156.438565][ T5215] overlayfs: failed to resolve './file0': -2 [ 156.996726][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.117424][ T4227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.173040][ T25] audit: type=1800 audit(1791540287.541:89): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50667 res=0 errno=0 [ 157.227615][ T4227] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.275158][ T4227] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 157.294778][ T25] audit: type=1800 audit(1791540287.541:90): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50667 res=0 errno=0 [ 157.332940][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.400412][ T4227] usb 2-1: can't set config #1, error -71 [ 157.409561][ T25] audit: type=1800 audit(1791540288.631:91): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144654 res=0 errno=0 [ 157.434642][ T4227] usb 2-1: USB disconnect, device number 7 [ 157.521696][ T25] audit: type=1800 audit(1791540288.631:92): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144654 res=0 errno=0 [ 158.092609][ T5230] tipc: Started in network mode [ 158.098095][ T5230] tipc: Node identity 4, cluster identity 4711 [ 158.104308][ T5230] tipc: Node number set to 4 [ 159.583008][ T25] audit: type=1800 audit(1791540288.631:93): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144654 res=0 errno=0 [ 159.602602][ T25] audit: type=1800 audit(1791540288.631:94): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144694 res=0 errno=0 [ 159.716108][ T25] audit: type=1800 audit(1791540288.631:95): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144661 res=0 errno=0 [ 159.758339][ T25] audit: type=1800 audit(1791540288.631:96): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144662 res=0 errno=0 [ 160.326419][ T25] audit: type=1800 audit(1791540288.641:97): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144654 res=0 errno=0 [ 161.335137][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 161.335151][ T25] audit: type=1800 audit(1791540292.542:107): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144821 res=0 errno=0 [ 161.666566][ T25] audit: type=1800 audit(1791540292.542:108): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144821 res=0 errno=0 [ 163.052265][ T25] audit: type=1800 audit(1791540292.542:109): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144821 res=0 errno=0 [ 163.162561][ T25] audit: type=1800 audit(1791540294.382:110): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.315" name="remove" dev="sysfs" ino=140499 res=0 errno=0 [ 163.335877][ T25] audit: type=1800 audit(1791540294.412:111): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.315" name="rescan" dev="sysfs" ino=1395 res=0 errno=0 [ 163.961860][ T5276] netlink: 64 bytes leftover after parsing attributes in process `syz.0.309'. [ 166.454675][ T5290] tipc: Cannot configure node identity twice [ 167.158356][ T25] audit: type=1800 audit(1791540298.382:112): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=69916 res=0 errno=0 [ 168.298733][ T25] audit: type=1800 audit(1791540298.392:113): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=69916 res=0 errno=0 [ 168.319285][ T25] audit: type=1800 audit(1791540298.392:114): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=69916 res=0 errno=0 [ 168.339272][ T25] audit: type=1800 audit(1791540298.392:115): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=69916 res=0 errno=0 [ 168.359080][ T25] audit: type=1800 audit(1791540298.402:116): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:13" name="/sbin/modprobe" dev="sda1" ino=1312 res=0 errno=0 [ 168.672664][ T5307] tmpfs: Bad value for 'mpol' [ 168.755498][ T25] audit: type=1800 audit(1791540299.982:117): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.326" name="remove" dev="sysfs" ino=140499 res=0 errno=0 [ 168.926472][ T25] audit: type=1800 audit(1791540300.022:118): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.326" name="rescan" dev="sysfs" ino=1395 res=0 errno=0 [ 170.191123][ T5324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.332'. [ 172.216661][ T5335] device vlan0 entered promiscuous mode [ 175.624231][ T5356] Bluetooth: hci2: command 0x0406 tx timeout [ 176.640909][ T5362] tipc: Cannot configure node identity twice [ 177.682564][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 177.704028][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 178.754925][ T25] audit: type=1800 audit(1791540309.983:119): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.347" name="attach" dev="sysfs" ino=52222 res=0 errno=0 [ 178.824427][ T25] audit: type=1800 audit(1791540310.023:120): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:11" name="/sbin/modprobe" dev="sda1" ino=1312 res=0 errno=0 [ 178.905881][ T4239] infiniband syz0: set active [ 178.917909][ T25] audit: type=1800 audit(1791540310.033:121): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:11" name="/sbin/modprobe" dev="sda1" ino=1312 res=0 errno=0 [ 183.738047][ T25] audit: type=1800 audit(1791540314.963:122): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40746 res=0 errno=0 [ 183.813355][ T25] audit: type=1800 audit(1791540314.993:123): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 183.846047][ T5418] [ 183.848410][ T5418] ====================================================== [ 183.855417][ T5418] WARNING: possible circular locking dependency detected [ 183.862450][ T5418] syzkaller #0 Not tainted [ 183.866852][ T5418] ------------------------------------------------------ [ 183.873664][ T25] audit: type=1800 audit(1791540314.993:124): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40775 res=0 errno=0 [ 183.873851][ T5418] syz.1.363/5418 is trying to acquire lock: [ 183.899179][ T5418] ffff888063a5cf98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 183.909648][ T5418] [ 183.909648][ T5418] but task is already holding lock: [ 183.917012][ T5418] ffff888063a5d3f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 183.926316][ T5418] [ 183.926316][ T5418] which lock already depends on the new lock. [ 183.926316][ T5418] [ 183.936710][ T5418] [ 183.936710][ T5418] the existing dependency chain (in reverse order) is: [ 183.945716][ T5418] [ 183.945716][ T5418] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 183.953377][ T5418] __mutex_lock_common+0x1e5/0x2400 [ 183.959098][ T5418] mutex_lock_nested+0x17/0x20 [ 183.959151][ T25] audit: type=1800 audit(1791540314.993:125): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40775 res=0 errno=0 [ 183.964380][ T5418] hci_dev_do_close+0x5f/0x1020 [ 183.964403][ T5418] hci_rfkill_set_block+0x101/0x180 [ 183.964418][ T5418] rfkill_set_block+0x1c1/0x3c0 [ 184.000247][ T5418] rfkill_fop_write+0x453/0x560 [ 184.005631][ T5418] vfs_write+0x304/0xd70 [ 184.010393][ T5418] ksys_write+0x153/0x260 [ 184.015239][ T5418] do_syscall_64+0x4c/0xa0 [ 184.020176][ T5418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.026596][ T5418] [ 184.026596][ T5418] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 184.034588][ T5418] __mutex_lock_common+0x1e5/0x2400 [ 184.040306][ T5418] mutex_lock_nested+0x17/0x20 [ 184.045589][ T5418] rfkill_register+0x2f/0x970 [ 184.050783][ T5418] hci_register_dev+0x459/0x980 [ 184.056158][ T5418] vhci_create_device+0x32e/0x5c0 [ 184.061702][ T5418] vhci_write+0x389/0x440 [ 184.066549][ T5418] vfs_write+0x748/0xd70 [ 184.071314][ T5418] ksys_write+0x153/0x260 [ 184.076161][ T5418] do_syscall_64+0x4c/0xa0 [ 184.081091][ T5418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.082298][ T25] audit: type=1800 audit(1791540314.993:126): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40775 res=0 errno=0 [ 184.087500][ T5418] [ 184.087500][ T5418] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 184.087526][ T5418] __mutex_lock_common+0x1e5/0x2400 [ 184.120418][ T5418] mutex_lock_nested+0x17/0x20 [ 184.125715][ T5418] vhci_send_frame+0x88/0x100 [ 184.130909][ T5418] hci_send_frame+0x1a9/0x2e0 [ 184.136103][ T5418] hci_tx_work+0x9b5/0x16d0 [ 184.141129][ T5418] process_one_work+0x867/0xff0 [ 184.146499][ T5418] worker_thread+0xad7/0x12a0 [ 184.151697][ T5418] kthread+0x42e/0x520 [ 184.156277][ T5418] ret_from_fork+0x1f/0x30 [ 184.161207][ T5418] [ 184.161207][ T5418] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 184.170410][ T5418] __lock_acquire+0x38f7/0x7d40 [ 184.175786][ T5418] lock_acquire+0x19f/0x400 [ 184.180825][ T5418] __flush_work+0x116/0x210 [ 184.185846][ T5418] hci_dev_do_close+0x201/0x1020 [ 184.191305][ T5418] hci_rfkill_set_block+0x101/0x180 [ 184.197021][ T5418] rfkill_set_block+0x1c1/0x3c0 [ 184.202393][ T5418] rfkill_fop_write+0x453/0x560 [ 184.203023][ T25] audit: type=1800 audit(1791540315.003:127): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40746 res=0 errno=0 [ 184.207757][ T5418] vfs_write+0x304/0xd70 [ 184.207773][ T5418] ksys_write+0x153/0x260 [ 184.207786][ T5418] do_syscall_64+0x4c/0xa0 [ 184.241690][ T5418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.248126][ T5418] [ 184.248126][ T5418] other info that might help us debug this: [ 184.248126][ T5418] [ 184.258343][ T5418] Chain exists of: [ 184.258343][ T5418] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 184.258343][ T5418] [ 184.273283][ T5418] Possible unsafe locking scenario: [ 184.273283][ T5418] [ 184.280726][ T5418] CPU0 CPU1 [ 184.286085][ T5418] ---- ---- [ 184.291441][ T5418] lock(&hdev->req_lock); [ 184.291770][ T25] audit: type=1800 audit(1791540315.003:128): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=40746 res=0 errno=0 [ 184.295848][ T5418] lock(rfkill_global_mutex); [ 184.295861][ T5418] lock(&hdev->req_lock); [ 184.295873][ T5418] lock((work_completion)(&hdev->tx_work)); [ 184.335428][ T5418] [ 184.335428][ T5418] *** DEADLOCK *** [ 184.335428][ T5418] [ 184.343569][ T5418] 2 locks held by syz.1.363/5418: [ 184.348585][ T5418] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 184.358702][ T5418] #1: ffff888063a5d3f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 184.368457][ T5418] [ 184.368457][ T5418] stack backtrace: [ 184.370020][ T25] audit: type=1800 audit(1791540315.023:129): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 184.374350][ T5418] CPU: 0 PID: 5418 Comm: syz.1.363 Not tainted syzkaller #0 [ 184.403378][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.413435][ T5418] Call Trace: [ 184.416713][ T5418] [ 184.419636][ T5418] dump_stack_lvl+0x188/0x250 [ 184.424312][ T5418] ? load_image+0x410/0x410 [ 184.428806][ T5418] ? show_regs_print_info+0x20/0x20 [ 184.429739][ T25] audit: type=1800 audit(1791540315.033:130): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43254 res=0 errno=0 [ 184.434000][ T5418] ? print_circular_bug+0x12b/0x1a0 [ 184.434020][ T5418] check_noncircular+0x2f8/0x400 [ 184.463535][ T5418] ? look_up_lock_class+0x71/0x110 [ 184.468650][ T5418] ? print_deadlock_bug+0x5d0/0x5d0 [ 184.473852][ T5418] ? lockdep_lock+0xf1/0x1f0 [ 184.478450][ T5418] ? mark_lock+0x94/0x320 [ 184.482773][ T5418] ? _find_first_zero_bit+0xd1/0xf0 [ 184.482827][ T25] audit: type=1800 audit(1791540315.033:131): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43254 res=0 errno=0 [ 184.487962][ T5418] __lock_acquire+0x38f7/0x7d40 [ 184.487990][ T5418] ? mark_lock+0x94/0x320 [ 184.488005][ T5418] ? verify_lock_unused+0x140/0x140 [ 184.521725][ T5418] ? __lock_acquire+0x12df/0x7d40 [ 184.526757][ T5418] ? start_flush_work+0x784/0x830 [ 184.531783][ T5418] lock_acquire+0x19f/0x400 [ 184.535604][ T25] audit: type=1800 audit(1791540315.033:132): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43254 res=0 errno=0 [ 184.536278][ T5418] ? __flush_work+0xfa/0x210 [ 184.560268][ T5418] ? verify_lock_unused+0x140/0x140 [ 184.565472][ T5418] ? read_lock_is_recursive+0x10/0x10 [ 184.570853][ T5418] __flush_work+0x116/0x210 [ 184.575358][ T5418] ? __flush_work+0xfa/0x210 [ 184.579945][ T5418] ? flush_work+0x20/0x20 [ 184.584273][ T5418] ? rcu_lock_release+0x5/0x20 [ 184.589037][ T5418] ? __lock_acquire+0x7d40/0x7d40 [ 184.594065][ T5418] hci_dev_do_close+0x201/0x1020 [ 184.599003][ T5418] hci_rfkill_set_block+0x101/0x180 [ 184.604196][ T5418] ? rcu_lock_release+0x20/0x20 [ 184.609044][ T5418] rfkill_set_block+0x1c1/0x3c0 [ 184.613900][ T5418] rfkill_fop_write+0x453/0x560 [ 184.618751][ T5418] ? rfkill_fop_read+0x560/0x560 [ 184.623691][ T5418] ? common_file_perm+0x160/0x1c0 [ 184.628715][ T5418] ? fsnotify_perm+0x5d/0x560 [ 184.633401][ T5418] ? security_file_permission+0x75/0xa0 [ 184.638948][ T5418] ? rfkill_fop_read+0x560/0x560 [ 184.643887][ T5418] vfs_write+0x304/0xd70 [ 184.648135][ T5418] ? lockdep_hardirqs_on+0x94/0x140 [ 184.653339][ T5418] ? file_end_write+0x250/0x250 [ 184.658193][ T5418] ? __context_tracking_exit+0x4c/0x80 [ 184.663654][ T5418] ? __fdget_pos+0x1e2/0x370 [ 184.668246][ T5418] ksys_write+0x153/0x260 [ 184.672576][ T5418] ? __ia32_sys_read+0x80/0x80 [ 184.677329][ T5418] ? lockdep_hardirqs_on+0x94/0x140 [ 184.682516][ T5418] do_syscall_64+0x4c/0xa0 [ 184.686918][ T5418] ? clear_bhb_loop+0x30/0x80 [ 184.691578][ T5418] ? clear_bhb_loop+0x30/0x80 [ 184.696233][ T5418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.702106][ T5418] RIP: 0033:0x7fa13117c1d9 [ 184.706506][ T5418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.726090][ T5418] RSP: 002b:00007fa12f3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.734496][ T5418] RAX: ffffffffffffffda RBX: 00007fa131403fa0 RCX: 00007fa13117c1d9 [ 184.742447][ T5418] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 184.750397][ T5418] RBP: 00007fa131213888 R08: 0000000000000000 R09: 0000000000000000 [ 184.758351][ T5418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.766302][ T5418] R13: 00007fa131404038 R14: 00007fa131403fa0 R15: 00007ffe684f0238 [ 184.774259][ T5418]