last executing test programs: 7.583323758s ago: executing program 2 (id=492): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x420, 0x3f4, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x1, 0x3, [0x8, 0x3c, 0x9, 0x9, 0x5, 0x9, 0x7ff, 0x5, 0x10000, 0x3, 0xc2c, 0x65e, 0x6, 0x7, 0x0, 0x51c, 0x6, 0x8, 0x7, 0x8, 0x5, 0x0, 0x20000, 0xf57a, 0x2, 0x9, 0x40, 0x1, 0x5, 0x8000, 0x3, 0x0, 0x3, 0x7, 0x0, 0xc6fa, 0x400, 0x7f, 0x4, 0x7f, 0x0, 0x80000001, 0x5, 0x10, 0x1, 0x5, 0x0, 0x0, 0x1, 0x9, 0x7, 0x6, 0x7, 0x2, 0x1, 0x8, 0x0, 0x8, 0xf1a, 0xfffff6b8, 0x9de6, 0x30, 0x7fffffff, 0xc], [0x3, 0xa, 0x3000, 0x40, 0x14, 0x8, 0x8, 0x1da3be4b, 0x2, 0x3fc0000, 0x4, 0x4, 0x0, 0x2, 0xfffffffc, 0x80000001, 0x401, 0x4421e391, 0xffffffff, 0xe04d, 0x5e4477ba, 0x8000, 0x9, 0x3, 0xfffffffd, 0x8, 0x81, 0xa52, 0xfffffffb, 0x1, 0xf, 0x6, 0x2, 0x6, 0x7fffffff, 0x8, 0xfffff000, 0xfffffffa, 0x200, 0x2a8f, 0x1, 0xc5ca, 0x0, 0x1, 0xf8000000, 0x10, 0x230, 0x9, 0x10001, 0x0, 0x7, 0x4, 0x1, 0xfffff518, 0x8, 0x5, 0x10001, 0xea, 0x2, 0x3, 0x756, 0x59a1, 0x6, 0xfff], [0x7, 0x101, 0x4, 0x2, 0x4, 0x8, 0x9, 0x5, 0x2a13, 0x0, 0x0, 0x80, 0xe, 0x1, 0xa49, 0x7f, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x80, 0xbf8, 0x7fffffff, 0x5, 0x100, 0x400, 0x0, 0xf172, 0x7467, 0x9, 0x5, 0x1, 0x9, 0x3, 0x6, 0x54d, 0x5, 0x7fff, 0x2, 0x7, 0x9, 0x6, 0xfffffa48, 0xbf01, 0x3ff, 0x3, 0x8, 0x8001, 0x397, 0xffffffff, 0x0, 0x3, 0x4, 0x8001, 0xf34, 0x1, 0x8, 0x5, 0x16, 0x0, 0x81, 0x1000], [0xc, 0x9039, 0x80, 0x3, 0x1, 0xb80, 0xa1, 0x10, 0x5, 0x0, 0x5, 0x7, 0x72, 0x6, 0x101, 0xffff, 0x5, 0xc12, 0x1, 0x6, 0x800, 0x6f68, 0x3015226a, 0x3, 0xd, 0x7, 0xa, 0x302d, 0x7fff, 0x2, 0x0, 0x7fffffff, 0x0, 0x5921, 0x2, 0xbf49, 0x2, 0x958, 0x1, 0x2, 0x5, 0x1c, 0x9, 0xa, 0x7, 0x0, 0xff, 0xf25, 0x8, 0xa6, 0x7, 0x4, 0x200000, 0x2, 0x5, 0x8, 0x6, 0x3, 0xc, 0x1, 0x4, 0x7, 0x3, 0x41]}}, 0x420}, 0x1, 0x0, 0x0, 0x9}, 0x804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000703af7346a7ae909e615000005000006060008006f750000090008"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x480d0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.226606836s ago: executing program 2 (id=500): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000200)=0xb) socket$igmp(0x2, 0x3, 0x2) 6.268245604s ago: executing program 2 (id=508): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, 0x0, &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) getpgrp(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x400c005) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 5.450188026s ago: executing program 2 (id=511): socket$kcm(0xa, 0x922000000003, 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x18, 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 5.405984088s ago: executing program 3 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003500)}}], 0x2, 0xc085) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) close(0x3) ftruncate(r4, 0x2000009) 5.344819651s ago: executing program 0 (id=513): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x9, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x10) 4.546674651s ago: executing program 3 (id=515): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0xc0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) process_vm_readv(0x0, &(0x7f0000002400), 0x0, &(0x7f0000008640), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0xef50548fe6ebd4d9, 0x40, 0x3f, @vifc_lcl_ifindex, @local}, 0x10) 4.338799622s ago: executing program 0 (id=516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 4.064077035s ago: executing program 3 (id=518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x7ff, 0x3, 0x30395056, 0x3, 0x2, 0x10001, 0x7, 0x100, 0x1, 0x2, 0x2, 0x6}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x10000, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000006400)={0x50, 0x0, 0x8000000000000001, {0x7, 0x29, 0x4, 0x4135ed2f1bdbbd72, 0x1, 0x2, 0x3, 0x800, 0x0, 0x0, 0x10, 0xfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.662401946s ago: executing program 1 (id=520): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.546272012s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f3879", 0x99) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.468924146s ago: executing program 4 (id=522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x20001, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xf523, 0x6}]}) 1.675756065s ago: executing program 0 (id=523): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x7, @loopback, 0x1000}, 0x1c) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="59bc70a415", 0x5}], 0x1) sendmmsg$sock(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) close_range(r0, 0xffffffffffffffff, 0x0) 1.628360548s ago: executing program 3 (id=524): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x2122) sendmsg$inet(r2, 0x0, 0x48844) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000001400000004", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002", @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.58681923s ago: executing program 1 (id=525): timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa00, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100)=0xbf5, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 1.566690151s ago: executing program 4 (id=526): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.380878181s ago: executing program 4 (id=527): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008c4000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000805000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000009000000008000000400000000000000", @ANYRES32, @ANYBLOB="000000000000be00"/20, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) 1.38059773s ago: executing program 0 (id=528): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffd, 0x2, 0x2, 0xfffffffffffffffd, 0x5, 0x1981, 0x2}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001040)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) setresuid(0x0, 0xee00, 0x0) r3 = gettid() kcmp(0x0, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r4 = timerfd_create(0x1, 0x800) read(r4, 0x0, 0x5a) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 1.224852568s ago: executing program 1 (id=529): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5affffffff1d765e6945c810ebfa0e81ceb3dc4c438e00110015af003afae76af649701250710481b7f21393a2977cc271b5cdcd28efab52e35904000000a88ab75b175cb3a7a9122f3f551f374c0d133cd0415b0436839a7b9b3f3668430e86897b53214565b378b24257c346d2b6b0c0e6a04f27f25fe956c74e6a5bd151eb4435c29b41", 0x85}], 0x1) 1.167701651s ago: executing program 1 (id=530): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f8", 0x59}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.126198254s ago: executing program 1 (id=531): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x7ff, 0x3, 0x30395056, 0x3, 0x2, 0x10001, 0x7, 0x100, 0x1, 0x2, 0x2, 0x6}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x10000, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000006400)={0x50, 0x0, 0x8000000000000001, {0x7, 0x29, 0x4, 0x4135ed2f1bdbbd72, 0x1, 0x2, 0x3, 0x800, 0x0, 0x0, 0x10, 0xfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.060916677s ago: executing program 2 (id=532): r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r1}) 1.032403268s ago: executing program 3 (id=533): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d010900500012"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r5, &(0x7f0000000b00), 0x91) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}]}}}]}, 0x4c}}, 0x0) 930.399443ms ago: executing program 2 (id=534): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/112, 0x70}], 0x1, 0x100, 0xbff) 480.961216ms ago: executing program 1 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f3879", 0x99) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 438.962248ms ago: executing program 0 (id=536): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x1, 0x2, 0x5, @SEQ_NOTEON=@note=0x2f, 0x7f, 0x7, 0x2}) 387.531551ms ago: executing program 4 (id=537): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 200.97786ms ago: executing program 4 (id=538): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040b"], 0xe) 160.9µs ago: executing program 0 (id=539): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="00000c040000070001", @ANYBLOB="c0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401a79"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=540): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x42, 0x100405, 0x10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 47.496430][ T4171] cgroup: Unknown subsys name 'net' [ 47.634484][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.897686][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.258151][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.334047][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 50.381260][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 50.417516][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.436260][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.444255][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.453096][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.461463][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.484499][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.493843][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.501795][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.571852][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.578920][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.587193][ T4194] device bridge_slave_0 entered promiscuous mode [ 50.597721][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.604886][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.612993][ T4197] device bridge_slave_0 entered promiscuous mode [ 50.621900][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.636661][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.644048][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.653144][ T4194] device bridge_slave_1 entered promiscuous mode [ 50.663019][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.670949][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.678721][ T4197] device bridge_slave_1 entered promiscuous mode [ 50.687345][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.753187][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.768753][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.780947][ T4189] team0: Port device team_slave_0 added [ 50.786977][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.794273][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.802046][ T4185] device bridge_slave_0 entered promiscuous mode [ 50.811744][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.821829][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.829034][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.837083][ T4186] device bridge_slave_0 entered promiscuous mode [ 50.846444][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.856862][ T4189] team0: Port device team_slave_1 added [ 50.863622][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.871279][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.880117][ T4185] device bridge_slave_1 entered promiscuous mode [ 50.892362][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.899727][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.907762][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.957424][ T4197] team0: Port device team_slave_0 added [ 50.964458][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.971564][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.997599][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.015979][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.023159][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.049664][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.063651][ T4194] team0: Port device team_slave_0 added [ 51.076012][ T4197] team0: Port device team_slave_1 added [ 51.084505][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.100136][ T4194] team0: Port device team_slave_1 added [ 51.107801][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.119626][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.137935][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.192270][ T4185] team0: Port device team_slave_0 added [ 51.205878][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.213129][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.239826][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.252115][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.259290][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.285745][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.304148][ T4185] team0: Port device team_slave_1 added [ 51.312947][ T4186] team0: Port device team_slave_0 added [ 51.319997][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.326962][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.354543][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.374052][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.381511][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.408484][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.423669][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.432118][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.448866][ T4186] team0: Port device team_slave_1 added [ 51.490288][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.497286][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.523469][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.575284][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.582314][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.608514][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.623276][ T4194] device hsr_slave_0 entered promiscuous mode [ 51.632978][ T4194] device hsr_slave_1 entered promiscuous mode [ 51.640357][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.648217][ T4194] Cannot create hsr debugfs directory [ 51.657547][ T4197] device hsr_slave_0 entered promiscuous mode [ 51.664542][ T4197] device hsr_slave_1 entered promiscuous mode [ 51.673838][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.682082][ T4197] Cannot create hsr debugfs directory [ 51.688423][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.695424][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.721641][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.737729][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.744768][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.770815][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.859776][ T4186] device hsr_slave_0 entered promiscuous mode [ 51.869644][ T4186] device hsr_slave_1 entered promiscuous mode [ 51.876363][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.884407][ T4186] Cannot create hsr debugfs directory [ 51.902859][ T4185] device hsr_slave_0 entered promiscuous mode [ 51.910665][ T4185] device hsr_slave_1 entered promiscuous mode [ 51.920273][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.930017][ T4185] Cannot create hsr debugfs directory [ 51.970580][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 51.983011][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 51.990499][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.049917][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 52.068671][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 52.214452][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.227530][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.243378][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.255916][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.305190][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.316521][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.337864][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.349010][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.426944][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.449996][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.464999][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.476865][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.497769][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.551669][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.566464][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.579501][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.594734][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.606749][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.620155][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.633099][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.677732][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.689803][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.701200][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.708887][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.718341][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.763643][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.775549][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.786759][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.795693][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.808193][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.826505][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.842390][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.864593][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.876893][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.890925][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.906084][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.923964][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.934646][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.945294][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.968275][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.978807][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.987758][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.996012][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.005023][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.014213][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.043000][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.063101][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.073614][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.082934][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.090640][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.101053][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.118034][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.131988][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.160422][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.169725][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.178237][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.187522][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.197280][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.205589][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.215011][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.230651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.257644][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.287841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.302878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.313249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.323093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.334041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.352346][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.375552][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.384304][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.395544][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.408119][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.417582][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.432021][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.455390][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.465231][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.473674][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.483718][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.500672][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.515276][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.525415][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.535503][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.545593][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.553886][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.563156][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.573253][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.582201][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.592383][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.603124][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.611086][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.620283][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.628105][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.637045][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.646772][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.671212][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.721462][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.734057][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.743659][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.753252][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.762753][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.770320][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.778755][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.788247][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.796862][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.804081][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.813486][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.822245][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.831210][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.838439][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.846591][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.856851][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.865597][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.872967][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.881989][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.890953][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.902042][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.910981][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.919797][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.928230][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.938186][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.947176][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.956144][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.965078][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.974622][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.984212][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.992882][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.001599][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.028676][ T4189] device veth0_vlan entered promiscuous mode [ 54.036097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.051120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.059575][ T1112] Bluetooth: hci0: command 0x041b tx timeout [ 54.059642][ T1112] Bluetooth: hci1: command 0x041b tx timeout [ 54.072117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.079228][ T1112] Bluetooth: hci2: command 0x041b tx timeout [ 54.086264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.095321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.109870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.118254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.132369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.140620][ T1112] Bluetooth: hci3: command 0x041b tx timeout [ 54.143390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.147464][ T1112] Bluetooth: hci4: command 0x041b tx timeout [ 54.155966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.180873][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.196483][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.207740][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.229711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.238930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.248142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.257303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.266614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.276618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.285581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.294826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.303981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.313220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.322078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.332496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.341738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.349465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.356946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.365388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.380644][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.394325][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.408090][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.454095][ T4189] device veth1_vlan entered promiscuous mode [ 54.467041][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.552134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.570072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.592536][ T4189] device veth0_macvtap entered promiscuous mode [ 54.604367][ T4189] device veth1_macvtap entered promiscuous mode [ 54.650276][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.657384][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.672317][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.689938][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.697450][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.735568][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.746964][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.772056][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.783585][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.810143][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.820701][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.830437][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.839789][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.855015][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.867109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.876073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.886162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.894101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.924394][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.934447][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.943823][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.953182][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.970066][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.980385][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.989034][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.999718][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.014963][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.023943][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.033850][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.042096][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.052461][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.061616][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.072948][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.088214][ T4185] device veth0_vlan entered promiscuous mode [ 55.098074][ T4197] device veth0_vlan entered promiscuous mode [ 55.105524][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.114673][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.127711][ T4194] device veth0_vlan entered promiscuous mode [ 55.151005][ T4185] device veth1_vlan entered promiscuous mode [ 55.161347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.170696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.180731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.190000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.197917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.216175][ T4197] device veth1_vlan entered promiscuous mode [ 55.263404][ T4194] device veth1_vlan entered promiscuous mode [ 55.305223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.314851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.324925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.335053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.343568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.353027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.366387][ T4185] device veth0_macvtap entered promiscuous mode [ 55.382365][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.386665][ T4197] device veth0_macvtap entered promiscuous mode [ 55.408973][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.412869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.427827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.437767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.446980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.456764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.468959][ T4197] device veth1_macvtap entered promiscuous mode [ 55.497538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.506897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.515781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.526867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.535614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.548810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.557818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.566091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.579587][ T4185] device veth1_macvtap entered promiscuous mode [ 55.590599][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.608660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.617577][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.624901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.627045][ T4186] device veth0_vlan entered promiscuous mode [ 55.651306][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.662921][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.674717][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.685607][ T4194] device veth0_macvtap entered promiscuous mode [ 55.696732][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.705286][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.714725][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.723646][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.741989][ T4186] device veth1_vlan entered promiscuous mode [ 55.754794][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.765855][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.783275][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.793778][ T4194] device veth1_macvtap entered promiscuous mode [ 55.812968][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.826696][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.837011][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.848206][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.860516][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.876829][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.885630][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.897064][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.906371][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.915377][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.927009][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.937548][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.946525][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.955648][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.977916][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.996417][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.010394][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.026026][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.037972][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.058394][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.075964][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.086755][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.105005][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.117181][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.133322][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.143942][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 56.155580][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 56.163587][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.177176][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 56.221334][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.230729][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.239670][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 56.240804][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.245919][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 56.254714][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.269303][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.318204][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.420508][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.462679][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.514709][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.598249][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.677958][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.726450][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.775442][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.786167][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.796739][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.807707][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.818586][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.830924][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.839865][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848567][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.857743][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.868057][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.884233][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.972664][ T4186] device veth0_macvtap entered promiscuous mode [ 57.028646][ T4186] device veth1_macvtap entered promiscuous mode [ 57.096274][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.107672][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129812][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.143921][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.154381][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.164878][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.175147][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.186002][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.197993][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.319502][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.336571][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.424507][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.438049][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.501122][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.512366][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.523069][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.535874][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.546900][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.570895][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.612241][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.823030][ T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.838131][ T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.862913][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.892720][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.901646][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.913162][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.922625][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.938481][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948277][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.021572][ T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.045821][ T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.069969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.092339][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.100327][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.125957][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.126839][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.151086][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.167142][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.210688][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 58.218490][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.227097][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.229445][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 58.288348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.324654][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.338580][ T2344] Bluetooth: hci3: command 0x0419 tx timeout [ 58.345063][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.355095][ T2344] Bluetooth: hci4: command 0x0419 tx timeout [ 58.366026][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.373756][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.388608][ T2344] Bluetooth: hci0: command 0x0419 tx timeout [ 58.402758][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.418525][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.457118][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.469786][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.477967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.609558][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 59.470076][ T7] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 59.479111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.495763][ T7] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 59.512038][ T7] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 59.521882][ T7] usb 3-1: config 150 has no interface number 0 [ 59.528513][ T7] usb 3-1: config 150 interface 204 has no altsetting 0 [ 59.529100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.559092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 59.819085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.839081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.849081][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.859114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.879087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.889086][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.899084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.520083][ T4312] ubi31: attaching mtd0 [ 60.535870][ T4312] ubi31: scanning is finished [ 60.540939][ T4312] ubi31: empty MTD device detected [ 61.396542][ T4312] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 61.616067][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.700081][ T7] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 61.794884][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.805764][ T7] usb 3-1: Product: syz [ 61.850907][ T7] usb 3-1: can't set config #150, error -71 [ 62.186573][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 62.363946][ T7] usb 3-1: USB disconnect, device number 2 [ 62.492051][ T4231] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 62.517400][ T4231] usb 1-1: config 0 has no interface number 0 [ 62.542721][ T4231] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.182945][ T4231] usb 1-1: string descriptor 0 read error: -71 [ 63.191179][ T4231] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 63.201766][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.213283][ T4231] usb 1-1: config 0 descriptor?? [ 63.239261][ T4231] usb 1-1: can't set config #0, error -71 [ 63.253165][ T4231] usb 1-1: USB disconnect, device number 2 [ 64.672547][ T4378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.779353][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.639208][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 65.769550][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.800231][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.816141][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.833403][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.854082][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.859219][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.877920][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.897826][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.914837][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.184608][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 66.187192][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.193706][ T23] usbtmc 2-1:16.0: can't read capabilities [ 66.687372][ T23] usb 2-1: USB disconnect, device number 2 [ 66.998615][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 67.009249][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 67.070533][ T7] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 67.149012][ T4410] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.208095][ T26] audit: type=1326 audit(1776877216.881:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.232170][ T26] audit: type=1326 audit(1776877216.881:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.262558][ T26] audit: type=1326 audit(1776877216.881:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.286862][ T26] audit: type=1326 audit(1776877216.891:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.287280][ T4262] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 68.335275][ T26] audit: type=1326 audit(1776877216.891:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.364965][ T26] audit: type=1326 audit(1776877216.891:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.397314][ T26] audit: type=1326 audit(1776877216.891:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.425241][ T26] audit: type=1326 audit(1776877216.891:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.453544][ T26] audit: type=1326 audit(1776877216.891:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.482006][ T26] audit: type=1326 audit(1776877216.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135fd58819 code=0x7ffc0000 [ 68.599456][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 68.638089][ T7] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 68.650277][ T7] usb 5-1: Product: syz [ 68.654611][ T7] usb 5-1: Manufacturer: syz [ 68.820156][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 68.980844][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 69.139264][ T7] r8152-cfgselector 5-1: can't set config #0, error -71 [ 69.159270][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 69.174613][ T7] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 69.229756][ T4262] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 69.290217][ T4445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.319864][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.394431][ T4444] netlink: 'syz.4.57': attribute type 3 has an invalid length. [ 69.430068][ T4262] usb 3-1: Product: syz [ 69.500223][ T4262] usb 3-1: Manufacturer: syz [ 69.577271][ T4262] usb 3-1: SerialNumber: syz [ 69.731648][ T4262] usb 3-1: config 0 descriptor?? [ 69.829842][ T4327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.883227][ T4262] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 70.099723][ T4451] netlink: 'syz.0.61': attribute type 9 has an invalid length. [ 70.119202][ T4327] usb 4-1: Using ep0 maxpacket: 8 [ 70.168500][ T4451] netlink: 92 bytes leftover after parsing attributes in process `syz.0.61'. [ 70.169853][ T4427] udc-core: couldn't find an available UDC or it's busy [ 70.198474][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.260552][ T4228] usb 3-1: USB disconnect, device number 3 [ 70.299473][ T4327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.363114][ T4456] Zero length message leads to an empty skb [ 70.389491][ T4327] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 70.418291][ T4327] usb 4-1: config 117 has no interface number 0 [ 70.442756][ T4327] usb 4-1: config 117 interface 163 has no altsetting 0 [ 70.660198][ T4327] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 70.669767][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.678359][ T4327] usb 4-1: Product: syz [ 70.685569][ T4327] usb 4-1: Manufacturer: syz [ 70.691462][ T4327] usb 4-1: SerialNumber: syz [ 71.573835][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.582965][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.780015][ T7] usb 4-1: USB disconnect, device number 2 [ 71.839544][ T7] f81534a_ctrl 4-1:117.163: failed to set register 0x116: -19 [ 72.076975][ T7] f81534a_ctrl 4-1:117.163: failed to enable ports: -19 [ 72.239327][ T4484] netlink: 148 bytes leftover after parsing attributes in process `syz.4.71'. [ 72.279380][ T4484] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 73.512134][ T4501] overlayfs: failed to resolve './file0': -2 [ 74.654381][ T4528] device ipvlan2 entered promiscuous mode [ 74.890558][ T4533] process 'syz.4.91' launched './file0' with NULL argv: empty string added [ 75.846125][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 75.857485][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 75.865148][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 75.875645][ T4201] Workqueue: hci1 hci_rx_work [ 75.880548][ T4201] Call Trace: [ 75.884014][ T4201] [ 75.887034][ T4201] dump_stack_lvl+0x188/0x250 [ 75.891740][ T4201] ? show_regs_print_info+0x20/0x20 [ 75.897121][ T4201] ? load_image+0x400/0x400 [ 75.902122][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 75.907430][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 75.912145][ T4201] ? process_one_work+0x85f/0x1010 [ 75.917380][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 75.922755][ T4201] kobject_add_internal+0x6e0/0xd90 [ 75.927952][ T4201] kobject_add+0x160/0x230 [ 75.932372][ T4201] ? kobject_init+0x1d0/0x1d0 [ 75.937230][ T4201] ? klist_children_get+0x50/0x50 [ 75.942253][ T4201] ? get_device_parent+0x121/0x3f0 [ 75.947496][ T4201] device_add+0x483/0xfb0 [ 75.951857][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 75.957063][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 75.962467][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 75.967669][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 75.973213][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 75.978053][ T4201] ? hci_event_packet+0x37b/0x1370 [ 75.983151][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 75.988394][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 75.994656][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 76.000635][ T4201] ? mark_lock+0x94/0x320 [ 76.005108][ T4201] ? mutex_unlock+0x10/0x10 [ 76.009622][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 76.015776][ T4201] ? lock_chain_count+0x20/0x20 [ 76.020828][ T4201] ? __rwlock_init+0x140/0x140 [ 76.025584][ T4201] hci_event_packet+0xe48/0x1370 [ 76.030597][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 76.035820][ T4201] ? rcu_lock_release+0x20/0x20 [ 76.040667][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 76.046162][ T4201] hci_rx_work+0x255/0xa10 [ 76.050678][ T4201] process_one_work+0x85f/0x1010 [ 76.055652][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 76.061483][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 76.066778][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 76.071884][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 76.077615][ T4201] ? wq_worker_running+0x97/0x170 [ 76.082652][ T4201] worker_thread+0xaa6/0x1290 [ 76.087330][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 76.092521][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 76.098410][ T4201] kthread+0x436/0x520 [ 76.102661][ T4201] ? rcu_lock_release+0x20/0x20 [ 76.108110][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 76.112689][ T4201] ret_from_fork+0x1f/0x30 [ 76.117370][ T4201] [ 76.142210][ T4201] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.160568][ T4201] Bluetooth: hci1: failed to register connection device [ 76.740932][ T21] cfg80211: failed to load regulatory.db [ 77.164074][ T4579] device macsec1 entered promiscuous mode [ 77.189597][ T4579] device virt_wifi0 entered promiscuous mode [ 77.955956][ T4586] capability: warning: `syz.0.108' uses 32-bit capabilities (legacy support in use) [ 78.611032][ T4231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 78.660806][ T4231] Bluetooth: hci0: Injecting HCI hardware error event [ 78.788030][ T4192] Bluetooth: hci0: hardware error 0x00 [ 79.214151][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.276845][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.295358][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.343740][ T4606] device bridge_slave_0 left promiscuous mode [ 79.357726][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.517439][ T4617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'. [ 80.249027][ T4606] device bridge_slave_1 left promiscuous mode [ 80.274792][ T4621] comedi: No check for data length of config insn id 8 is implemented [ 80.304883][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.312258][ T4621] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 80.335497][ T4621] comedi: Assuming n=86 is correct [ 80.424702][ T4606] bond0: (slave bond_slave_0): Releasing backup interface [ 80.504645][ T4606] bond0: (slave bond_slave_1): Releasing backup interface [ 81.336462][ T4606] team0: Port device team_slave_0 removed [ 81.623479][ T4606] team0: Port device team_slave_1 removed [ 81.838726][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.877051][ T4636] ODEBUG: Out of memory. ODEBUG disabled [ 81.894819][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.910911][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.922945][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.951897][ T4609] netlink: 'syz.4.115': attribute type 2 has an invalid length. [ 82.028301][ T4636] syz.0.123 (4636): drop_caches: 2 [ 82.119212][ T2344] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.251177][ T4644] PKCS7: Unknown OID: [4] 0.0 [ 82.256534][ T4644] PKCS7: Only support pkcs7_signedData type [ 82.291438][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 82.509511][ T2344] usb 4-1: config 0 has no interfaces? [ 82.517990][ T2344] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 82.532059][ T2344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.621801][ T2344] usb 4-1: config 0 descriptor?? [ 82.990205][ T2344] usb 4-1: USB disconnect, device number 3 [ 84.149140][ T2344] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 84.329553][ T4262] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.989735][ T2344] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 85.046107][ T2344] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.159569][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.320065][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.331093][ T4262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.369319][ T2344] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 85.380930][ T2344] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 85.389770][ T2344] usb 3-1: Manufacturer: syz [ 85.394612][ T2344] usb 3-1: SerialNumber: syz [ 85.499245][ T4262] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 85.509521][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.519988][ T4262] usb 1-1: Product: syz [ 85.524774][ T4262] usb 1-1: Manufacturer: syz [ 85.530582][ T4262] usb 1-1: SerialNumber: syz [ 85.572028][ T4262] usb 1-1: selecting invalid altsetting 1 [ 85.579772][ T4262] usb 1-1: unit 6 not found! [ 85.599276][ T23] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 85.682018][ T2344] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 85.696906][ T2344] usb 3-1: USB disconnect, device number 4 [ 85.709224][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.779516][ T4262] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 85.807142][ T4262] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 85.826981][ T4262] usb 1-1: USB disconnect, device number 3 [ 85.989317][ T23] usb 5-1: No LPM exit latency info found, disabling LPM. [ 86.029748][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.079564][ T23] usb 5-1: config 1 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 86.090795][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 86.101157][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x5F, skipping [ 86.111901][ T4230] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 86.121328][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.133086][ T4230] usb 4-1: config 0 descriptor?? [ 86.190857][ T4704] ======================================================= [ 86.190857][ T4704] WARNING: The mand mount option has been deprecated and [ 86.190857][ T4704] and is ignored by this kernel. Remove the mand [ 86.190857][ T4704] option from the mount to silence this warning. [ 86.190857][ T4704] ======================================================= [ 86.914122][ T4704] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.940520][ T4230] ath6kl: Failed to submit usb control message: -71 [ 86.947322][ T4230] ath6kl: unable to send the bmi data to the device: -71 [ 86.973553][ T4230] ath6kl: Unable to send get target info: -71 [ 86.998942][ T4230] ath6kl: Failed to init ath6kl core: -71 [ 87.039916][ T4230] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 87.058602][ T4230] usb 4-1: USB disconnect, device number 4 [ 87.079260][ T23] usb 5-1: string descriptor 0 read error: -22 [ 87.098346][ T23] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 87.163661][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.251763][ T4698] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 87.650244][ T23] usbhid 5-1:1.0: can't add hid device: -71 [ 87.657678][ T23] usbhid: probe of 5-1:1.0 failed with error -71 [ 87.790381][ T23] usb 5-1: USB disconnect, device number 3 [ 90.599339][ T2344] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.759185][ T4754] device syzkaller0 entered promiscuous mode [ 90.782993][ T4754] 0: reclassify loop, rule prio 0, protocol 800 [ 90.985310][ T2344] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 91.281125][ T2344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.495788][ T2344] usb 4-1: config 0 descriptor?? [ 91.578614][ T2344] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 92.620219][ T2344] gspca_sunplus: reg_w_riv err -110 [ 92.625608][ T2344] sunplus: probe of 4-1:0.0 failed with error -110 [ 92.809532][ T4784] hub 8-0:1.0: USB hub found [ 92.816545][ T4784] hub 8-0:1.0: 1 port detected [ 93.558940][ T2344] usb 4-1: USB disconnect, device number 5 [ 94.506669][ T4808] device syzkaller0 entered promiscuous mode [ 94.545040][ T4808] 0: reclassify loop, rule prio 0, protocol 800 [ 95.935835][ T4833] mip6: mip6_destopt_init_state: spi is not 0: 2 [ 97.619272][ T4832] ubi31: attaching mtd0 [ 97.624012][ T4832] ubi31: scanning is finished [ 97.759777][ T4832] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 97.767522][ T4832] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 97.775767][ T4832] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 97.782945][ T4832] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 97.790603][ T4832] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 97.797604][ T4832] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 97.805905][ T4832] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4096994670 [ 97.816416][ T4832] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 97.863013][ T4836] ubi31: background thread "ubi_bgt31d" started, PID 4836 [ 102.406685][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 103.539231][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.449266][ T4262] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.479019][ T4262] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 104.513012][ T4262] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 104.533170][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.544420][ T4904] device syzkaller0 entered promiscuous mode [ 104.572901][ T4904] 0: reclassify loop, rule prio 0, protocol 800 [ 104.585295][ T4262] usb 2-1: config 0 descriptor?? [ 104.819417][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 105.390422][ T4917] PKCS7: Unknown OID: [4] 0.0 [ 105.395147][ T4917] PKCS7: Only support pkcs7_signedData type [ 105.407094][ T4917] netlink: 452 bytes leftover after parsing attributes in process `syz.4.214'. [ 105.429467][ T4262] Bluetooth: Can't get state to change to load configuration err [ 105.582472][ T4262] Bluetooth: Loading sysconfig file failed [ 105.593528][ T4262] ath3k: probe of 2-1:0.0 failed with error -16 [ 105.677233][ T4262] usb 2-1: USB disconnect, device number 3 [ 108.039560][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 110.380681][ T4973] ptrace attach of "./syz-executor exec"[4974] was attempted by "./syz-executor exec"[4973] [ 116.259493][ T5004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 117.567139][ T5029] PKCS7: Unknown OID: [4] 0.0 [ 117.572033][ T5029] PKCS7: Only support pkcs7_signedData type [ 117.601668][ T5029] netlink: 452 bytes leftover after parsing attributes in process `syz.0.245'. [ 118.049258][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.449204][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.521120][ T4231] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.390076][ T4231] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.499208][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 119.559149][ T4231] usb 4-1: SerialNumber: syz [ 119.949450][ T4231] usb 4-1: 0:2 : does not exist [ 119.954473][ T4231] usb 4-1: unit 5 not found! [ 119.985129][ T4231] usb 4-1: USB disconnect, device number 6 [ 121.069184][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.579919][ T4262] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 121.595008][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 121.646801][ T4262] usb 5-1: Product: syz [ 121.656394][ T4262] usb 5-1: config 0 descriptor?? [ 121.712887][ T4262] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 121.725477][ T4262] usb 5-1: Detected FT232H [ 121.969247][ T4262] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 121.990335][ T4262] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 122.010096][ T4262] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 122.040405][ T4262] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.089815][ T4262] usb 5-1: USB disconnect, device number 4 [ 122.099216][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.143995][ T4262] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.199956][ T4262] ftdi_sio 5-1:0.0: device disconnected [ 122.336933][ T5099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 122.472244][ T5101] input: syz0 as /devices/virtual/input/input6 [ 122.480898][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.523443][ T23] usb 1-1: config 0 has no interface number 0 [ 122.529101][ T4327] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.689423][ T23] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 122.715045][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.735466][ T23] usb 1-1: Product: syz [ 122.744451][ T23] usb 1-1: Manufacturer: syz [ 122.749352][ T23] usb 1-1: SerialNumber: syz [ 122.779216][ T23] usb 1-1: config 0 descriptor?? [ 123.144292][ T4327] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 123.149210][ T23] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 123.236569][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.251600][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 123.260084][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.260926][ T23] usb 1-1: media controller created [ 123.386755][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.461971][ T4327] usb 3-1: config 0 descriptor?? [ 123.511025][ T4327] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 123.658439][ T4229] kernel write not supported for file bpf-prog (pid: 4229 comm: kworker/1:5) [ 123.959242][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.249432][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 124.399516][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 124.488095][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 124.569336][ T4327] gspca_cpia1: usb_control_msg 03, error -71 [ 124.589221][ T4327] gspca_cpia1: usb_control_msg 01, error -71 [ 124.595264][ T4327] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 124.639314][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 124.712375][ T4327] usb 3-1: USB disconnect, device number 5 [ 124.856517][ T4262] usb 1-1: USB disconnect, device number 4 [ 124.919504][ T4231] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 124.939478][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.985699][ T4231] usb 4-1: Product: syz [ 125.004535][ T4231] usb 4-1: Manufacturer: syz [ 125.028780][ T4231] usb 4-1: SerialNumber: syz [ 125.050335][ T4231] usb 4-1: config 0 descriptor?? [ 126.671158][ T5154] block device autoloading is deprecated and will be removed. [ 126.684633][ T4327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.279778][ T4327] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 127.322748][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.428587][ T4327] usb 3-1: Product: syz [ 127.466138][ T4327] usb 3-1: Manufacturer: syz [ 127.509946][ T4327] usb 3-1: SerialNumber: syz [ 127.626109][ T4327] usb 3-1: config 0 descriptor?? [ 127.923711][ T4230] usb 4-1: USB disconnect, device number 7 [ 127.969959][ T5177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.299'. [ 128.017949][ T4327] usb 3-1: USB disconnect, device number 6 [ 128.041643][ T5185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.299'. [ 128.244304][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.954779][ T5197] fuse: Bad value for 'fd' [ 129.559125][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.829440][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 129.949719][ T4230] usb 4-1: config 108 has an invalid interface number: 53 but max is 0 [ 129.992310][ T4230] usb 4-1: config 108 has no interface number 0 [ 130.089901][ T4230] usb 4-1: config 108 interface 53 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 130.271006][ T4230] usb 4-1: config 108 interface 53 has no altsetting 0 [ 131.569446][ T4230] usb 4-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=be.51 [ 131.578923][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.593160][ T4230] usb 4-1: Product: syz [ 131.597514][ T4230] usb 4-1: Manufacturer: syz [ 131.603650][ T4230] usb 4-1: SerialNumber: syz [ 131.799166][ T4262] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.199400][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.223329][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.339853][ T4262] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.393306][ T4262] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 132.417569][ T4262] usb 2-1: Manufacturer: syz [ 132.517410][ T4262] usb 2-1: config 0 descriptor?? [ 132.631971][ T5252] loop8: detected capacity change from 0 to 8 [ 132.654877][ T4179] Dev loop8: unable to read RDB block 8 [ 132.672899][ T4179] loop8: unable to read partition table [ 133.014876][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022528][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.029319][ T4230] asix: probe of 4-1:108.53 failed with error -22 [ 133.280678][ T4179] loop8: partition table beyond EOD, truncated [ 133.500388][ T4230] usb 4-1: USB disconnect, device number 8 [ 133.512572][ T5252] Dev loop8: unable to read RDB block 8 [ 133.519883][ T5252] loop8: unable to read partition table [ 133.525823][ T5252] loop8: partition table beyond EOD, truncated [ 133.569197][ T5252] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 133.715941][ T5227] udc-core: couldn't find an available UDC or it's busy [ 133.730819][ T5227] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.989222][ T4262] usbhid 2-1:0.0: can't add hid device: -71 [ 133.995431][ T4262] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.681681][ T4262] usb 2-1: USB disconnect, device number 4 [ 142.451209][ T5405] syz.0.382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.959279][ T5452] ubi: mtd0 is already attached to ubi31 [ 147.019026][ C0] sched: RT throttling activated [ 147.923697][ T5503] ubi: mtd0 is already attached to ubi31 [ 148.929988][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 150.558363][ T5532] ubi: mtd0 is already attached to ubi31 [ 153.632212][ T5578] netlink: 344 bytes leftover after parsing attributes in process `syz.0.444'. [ 153.910633][ T5609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 153.944848][ T5603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.131233][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 154.406837][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.470'. [ 154.650409][ T5656] netlink: 'syz.3.480': attribute type 37 has an invalid length. [ 154.665978][ T5654] netlink: 188 bytes leftover after parsing attributes in process `syz.4.479'. [ 154.863175][ T5668] device syzkaller0 entered promiscuous mode [ 154.962368][ T5674] netlink: 68 bytes leftover after parsing attributes in process `syz.4.488'. [ 155.236058][ T5691] netlink: 'syz.2.492': attribute type 8 has an invalid length. [ 155.300844][ T5691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.492'. [ 155.322419][ T5691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.492'. [ 156.334301][ T5719] syz.1.506 uses obsolete (PF_INET,SOCK_PACKET) [ 156.718747][ T5725] ubi: mtd0 is already attached to ubi31 [ 160.205199][ T5829] syz.1.520[5829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.205295][ T5829] syz.1.520[5829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.153793][ T5839] netlink: 'syz.3.524': attribute type 39 has an invalid length. [ 161.827594][ T5875] loop6: detected capacity change from 0 to 7 [ 161.871993][ T5130] Dev loop6: unable to read RDB block 7 [ 161.919868][ T5130] loop6: unable to read partition table [ 161.931112][ T5130] loop6: partition table beyond EOD, truncated [ 162.185100][ T5875] Dev loop6: unable to read RDB block 7 [ 162.224529][ T5875] loop6: unable to read partition table [ 162.273324][ T5875] loop6: partition table beyond EOD, truncated [ 162.355993][ T5888] PKCS7: Unknown OID: [4] 0.0 [ 162.360754][ T5888] PKCS7: Only support pkcs7_signedData type [ 162.369351][ T5888] netlink: 452 bytes leftover after parsing attributes in process `syz.3.533'. [ 162.432128][ T5875] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 162.730594][ T5874] [ 162.733042][ T5874] ====================================================== [ 162.740067][ T5874] WARNING: possible circular locking dependency detected [ 162.747234][ T5874] syzkaller #0 Not tainted [ 162.751851][ T5874] ------------------------------------------------------ [ 162.758870][ T5874] syz.2.534/5874 is trying to acquire lock: [ 162.764972][ T5874] ffff888077aa6938 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 162.775583][ T5874] [ 162.775583][ T5874] but task is already holding lock: [ 162.783598][ T5874] ffff8881472e5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 162.793553][ T5874] [ 162.793553][ T5874] which lock already depends on the new lock. [ 162.793553][ T5874] [ 162.805109][ T5874] [ 162.805109][ T5874] the existing dependency chain (in reverse order) is: [ 162.814680][ T5874] [ 162.814680][ T5874] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 162.822557][ T5874] __mutex_lock_common+0x1e3/0x2400 [ 162.828642][ T5874] mutex_lock_killable_nested+0x17/0x20 [ 162.834770][ T5874] lo_open+0x6a/0x100 [ 162.839622][ T5874] blkdev_get_whole+0x90/0x390 [ 162.846872][ T5874] blkdev_get_by_dev+0x2d0/0xa60 [ 162.852909][ T5874] blkdev_open+0x12d/0x2c0 [ 162.858071][ T5874] do_dentry_open+0x7ff/0xf80 [ 162.863569][ T5874] path_openat+0x26f5/0x2fa0 [ 162.868989][ T5874] do_filp_open+0x1e2/0x410 [ 162.874976][ T5874] do_sys_openat2+0x150/0x4b0 [ 162.880588][ T5874] __x64_sys_openat+0x135/0x160 [ 162.886622][ T5874] do_syscall_64+0x4c/0xa0 [ 162.893630][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.900090][ T5874] [ 162.900090][ T5874] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 162.909081][ T5874] __mutex_lock_common+0x1e3/0x2400 [ 162.915803][ T5874] mutex_lock_nested+0x17/0x20 [ 162.921481][ T5874] blkdev_get_by_dev+0x157/0xa60 [ 162.928212][ T5874] swsusp_check+0xa1/0x2b0 [ 162.933841][ T5874] software_resume+0xc6/0x3b0 [ 162.939654][ T5874] resume_store+0xe4/0x130 [ 162.945157][ T5874] kernfs_fop_write_iter+0x379/0x4c0 [ 162.951192][ T5874] vfs_write+0x745/0xd60 [ 162.956167][ T5874] ksys_write+0x152/0x260 [ 162.961053][ T5874] do_syscall_64+0x4c/0xa0 [ 162.966286][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.973259][ T5874] [ 162.973259][ T5874] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 162.982088][ T5874] __mutex_lock_common+0x1e3/0x2400 [ 162.988163][ T5874] mutex_lock_nested+0x17/0x20 [ 162.994071][ T5874] software_resume+0x7c/0x3b0 [ 162.999343][ T5874] resume_store+0xe4/0x130 [ 163.004624][ T5874] kernfs_fop_write_iter+0x379/0x4c0 [ 163.010562][ T5874] vfs_write+0x745/0xd60 [ 163.015777][ T5874] ksys_write+0x152/0x260 [ 163.020844][ T5874] do_syscall_64+0x4c/0xa0 [ 163.025989][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.032691][ T5874] [ 163.032691][ T5874] -> #3 (&of->mutex){+.+.}-{3:3}: [ 163.039963][ T5874] __mutex_lock_common+0x1e3/0x2400 [ 163.046472][ T5874] mutex_lock_nested+0x17/0x20 [ 163.053709][ T5874] kernfs_seq_start+0x51/0x3c0 [ 163.059619][ T5874] seq_read_iter+0x3c4/0xd50 [ 163.064932][ T5874] vfs_read+0x759/0xd60 [ 163.070248][ T5874] ksys_read+0x152/0x260 [ 163.075103][ T5874] do_syscall_64+0x4c/0xa0 [ 163.080084][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.087810][ T5874] [ 163.087810][ T5874] -> #2 (&p->lock){+.+.}-{3:3}: [ 163.095063][ T5874] __mutex_lock_common+0x1e3/0x2400 [ 163.101018][ T5874] mutex_lock_nested+0x17/0x20 [ 163.106730][ T5874] seq_read_iter+0xad/0xd50 [ 163.112738][ T5874] do_iter_readv_writev+0x47e/0x5f0 [ 163.122177][ T5874] do_iter_read+0x20b/0x7c0 [ 163.129958][ T5874] loop_process_work+0x16dd/0x24a0 [ 163.136623][ T5874] process_one_work+0x85f/0x1010 [ 163.142779][ T5874] worker_thread+0xaa6/0x1290 [ 163.149923][ T5874] kthread+0x436/0x520 [ 163.155217][ T5874] ret_from_fork+0x1f/0x30 [ 163.160962][ T5874] [ 163.160962][ T5874] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 163.171434][ T5874] process_one_work+0x7bb/0x1010 [ 163.178101][ T5874] worker_thread+0xaa6/0x1290 [ 163.183493][ T5874] kthread+0x436/0x520 [ 163.188713][ T5874] ret_from_fork+0x1f/0x30 [ 163.194373][ T5874] [ 163.194373][ T5874] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 163.202686][ T5874] __lock_acquire+0x2c42/0x7d10 [ 163.208105][ T5874] lock_acquire+0x19e/0x400 [ 163.213223][ T5874] flush_workqueue+0x16c/0x13d0 [ 163.219191][ T5874] drain_workqueue+0xcf/0x380 [ 163.224423][ T5874] destroy_workqueue+0x7b/0xb20 [ 163.229908][ T5874] __loop_clr_fd+0x234/0xb90 [ 163.235023][ T5874] blkdev_put+0x53f/0x7d0 [ 163.240025][ T5874] blkdev_close+0x76/0xa0 [ 163.244915][ T5874] __fput+0x234/0x930 [ 163.249599][ T5874] task_work_run+0x125/0x1a0 [ 163.254799][ T5874] exit_to_user_mode_loop+0x10f/0x130 [ 163.260961][ T5874] exit_to_user_mode_prepare+0xee/0x180 [ 163.267329][ T5874] syscall_exit_to_user_mode+0x16/0x40 [ 163.273454][ T5874] do_syscall_64+0x58/0xa0 [ 163.278422][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.285008][ T5874] [ 163.285008][ T5874] other info that might help us debug this: [ 163.285008][ T5874] [ 163.295425][ T5874] Chain exists of: [ 163.295425][ T5874] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 163.295425][ T5874] [ 163.309268][ T5874] Possible unsafe locking scenario: [ 163.309268][ T5874] [ 163.317016][ T5874] CPU0 CPU1 [ 163.322903][ T5874] ---- ---- [ 163.328270][ T5874] lock(&lo->lo_mutex); [ 163.332510][ T5874] lock(&disk->open_mutex); [ 163.339711][ T5874] lock(&lo->lo_mutex); [ 163.346488][ T5874] lock((wq_completion)loop6); [ 163.351556][ T5874] [ 163.351556][ T5874] *** DEADLOCK *** [ 163.351556][ T5874] [ 163.359691][ T5874] 2 locks held by syz.2.534/5874: [ 163.364827][ T5874] #0: ffff888020617d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 163.374951][ T5874] #1: ffff8881472e5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 163.386089][ T5874] [ 163.386089][ T5874] stack backtrace: [ 163.392945][ T5874] CPU: 1 PID: 5874 Comm: syz.2.534 Not tainted syzkaller #0 [ 163.400623][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.411658][ T5874] Call Trace: [ 163.415754][ T5874] [ 163.418816][ T5874] dump_stack_lvl+0x188/0x250 [ 163.423670][ T5874] ? load_image+0x400/0x400 [ 163.428606][ T5874] ? show_regs_print_info+0x20/0x20 [ 163.434000][ T5874] ? print_circular_bug+0x12b/0x1a0 [ 163.439500][ T5874] check_noncircular+0x296/0x330 [ 163.444462][ T5874] ? add_chain_block+0x940/0x940 [ 163.449690][ T5874] ? lockdep_lock+0xf1/0x1f0 [ 163.454508][ T5874] ? mark_lock+0x94/0x320 [ 163.459221][ T5874] __lock_acquire+0x2c42/0x7d10 [ 163.465599][ T5874] ? __lock_acquire+0x13bc/0x7d10 [ 163.472635][ T5874] ? verify_lock_unused+0x140/0x140 [ 163.478504][ T5874] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 163.485454][ T5874] ? verify_lock_unused+0x140/0x140 [ 163.490703][ T5874] ? memset+0x1e/0x40 [ 163.494822][ T5874] lock_acquire+0x19e/0x400 [ 163.499522][ T5874] ? flush_workqueue+0x150/0x13d0 [ 163.504844][ T5874] ? __mutex_trylock_common+0x155/0x260 [ 163.510945][ T5874] ? read_lock_is_recursive+0x10/0x10 [ 163.517509][ T5874] ? __init_swait_queue_head+0xa5/0x150 [ 163.523727][ T5874] flush_workqueue+0x16c/0x13d0 [ 163.529613][ T5874] ? flush_workqueue+0x150/0x13d0 [ 163.535001][ T5874] ? __lock_acquire+0x7d10/0x7d10 [ 163.540150][ T5874] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 163.546736][ T5874] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 163.552727][ T5874] ? rcu_work_rcufn+0x120/0x120 [ 163.558418][ T5874] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 163.564236][ T5874] ? finish_wait+0xc0/0x1d0 [ 163.569066][ T5874] drain_workqueue+0xcf/0x380 [ 163.574020][ T5874] destroy_workqueue+0x7b/0xb20 [ 163.578959][ T5874] __loop_clr_fd+0x234/0xb90 [ 163.583743][ T5874] ? lo_release+0x172/0x1f0 [ 163.588505][ T5874] ? lo_open+0x100/0x100 [ 163.592904][ T5874] blkdev_put+0x53f/0x7d0 [ 163.597518][ T5874] blkdev_close+0x76/0xa0 [ 163.602735][ T5874] ? blkdev_open+0x2c0/0x2c0 [ 163.607331][ T5874] __fput+0x234/0x930 [ 163.611675][ T5874] task_work_run+0x125/0x1a0 [ 163.616849][ T5874] exit_to_user_mode_loop+0x10f/0x130 [ 163.622521][ T5874] exit_to_user_mode_prepare+0xee/0x180 [ 163.628089][ T5874] syscall_exit_to_user_mode+0x16/0x40 [ 163.633548][ T5874] do_syscall_64+0x58/0xa0 [ 163.638047][ T5874] ? clear_bhb_loop+0x30/0x80 [ 163.642855][ T5874] ? clear_bhb_loop+0x30/0x80 [ 163.647724][ T5874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.653798][ T5874] RIP: 0033:0x7fb3d6e96819 [ 163.658311][ T5874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.681057][ T5874] RSP: 002b:00007ffc2aa40598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 163.689570][ T5874] RAX: 0000000000000000 RBX: 00007fb3d7111da0 RCX: 00007fb3d6e96819 [ 163.697683][ T5874] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 163.706313][ T5874] RBP: 00007fb3d7111da0 R08: 00007fb3d7110038 R09: 0000000000000000 [ 163.714580][ T5874] R10: 00000000003ffd9c R11: 0000000000000246 R12: 0000000000027b22 [ 163.723518][ T5874] R13: 00007fb3d711009c R14: 0000000000027894 R15: 00007fb3d7110090 [ 163.731578][ T5874] [ 163.909155][ T4174] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.149231][ T4174] usb 1-1: Using ep0 maxpacket: 32 [ 164.269275][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.280242][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.290578][ T4174] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.299686][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.308608][ T4174] usb 1-1: config 0 descriptor?? [ 164.350148][ T4174] hub 1-1:0.0: USB hub found [ 164.569214][ T4174] hub 1-1:0.0: 1 port detected [ 165.219180][ T23] hub 1-1:0.0: activate --> -90 [ 165.640402][ T4262] usb 1-1: USB disconnect, device number 5