last executing test programs: 18.167079145s ago: executing program 4 (id=194): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x2}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 15.679471946s ago: executing program 4 (id=201): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0x2, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 15.304051965s ago: executing program 4 (id=206): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300453b88400819151300000000000109022d0001000000000904ffff486bb22b000904fffffd00"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) 11.79804457s ago: executing program 2 (id=220): nanosleep(0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce0905"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="400d02000000e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.222147883s ago: executing program 4 (id=221): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 9.963338306s ago: executing program 0 (id=222): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528addb243700", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf253e00000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4", 0x27, 0x840, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774", 0xc}], 0x3, &(0x7f00000014c0)}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.962979036s ago: executing program 1 (id=223): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x2}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 9.372004908s ago: executing program 1 (id=225): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) accept4$inet(r0, 0x0, 0x0, 0x0) 8.849679445s ago: executing program 1 (id=227): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x480, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioprio_set$pid(0x3, 0x0, 0x0) r2 = io_uring_setup(0x476, 0x0) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x81, @mcast2, 0x2}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/65, 0x0, 0x9000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r4 = eventfd(0x42287084) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x0, r4}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x1000040000906, 0x12) 8.725255411s ago: executing program 0 (id=228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x4b) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="6459df536e39c72401df00e39f31561fde3bb80bac686827534cf60be8fdefc76c65", 0x22, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c) 8.708332352s ago: executing program 2 (id=229): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) prlimit64(r4, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xa8, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000240)) r11 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r11, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000008c0)={0x17, &(0x7f0000000000)=[{0x2c, '\x00', @st={0x4, [{0x1, @svalue}, {0x0, @uvalue=0x7}, {0x3, @svalue=0x200}, {0x1, @uvalue=0xc86}]}, 0x9f74}]}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 7.559057832s ago: executing program 2 (id=231): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000800)="7a923120d44a2a3e263c5943a5e190c6ae3e8d0456a67dd48681c4edb7a71568fd16f9e7533671c8b0cb0d1468b4922e5a255354ded0ba6ccfb58774c597e7703ed971e68d837319d28c453d1cb1eb6e3b16e3e5253bf7d51fccb55cb9bfb79f03b9eaf0e5790be8c6a3d8c7d200be95055eab7bf9e9f9255ba5fefe6e3e28ed832bc9c80127b2153f56fb0b6789e7065dec5358d9f3fd25d7edb979401ebd", 0x9f}], 0x1}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.491984126s ago: executing program 0 (id=232): r0 = socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r2}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r3}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b0001006272696467650000040002", @ANYRES32, @ANYRES8, @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x480b0) getuid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) 6.563500175s ago: executing program 4 (id=234): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x402, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x6, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0x5, 0x4a732f62, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x7, 0x3ff, 0x7]}, &(0x7f00000001c0)=0x44) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.612215778s ago: executing program 3 (id=235): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000"], 0x5c}, 0x1, 0x6c}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r6, &(0x7f0000002a00)) 4.611803527s ago: executing program 2 (id=236): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f", 0x70}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.327012702s ago: executing program 0 (id=237): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000080)=ANY=[]) r7 = socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x6, &(0x7f0000000000)=r8, 0x4) close(0x3) 4.309112713s ago: executing program 1 (id=238): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) accept4$inet(r0, 0x0, 0x0, 0x0) 2.723065717s ago: executing program 3 (id=239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2.646588231s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180900"/15, @ANYRES32=r0], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 2.442583131s ago: executing program 2 (id=241): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() getpid() sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1800}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffc, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.396300624s ago: executing program 1 (id=242): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) prlimit64(r4, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xa8, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000240)) r11 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r11, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000008c0)={0x17, &(0x7f0000000000)=[{0x2c, '\x00', @st={0x4, [{0x1, @svalue}, {0x0, @uvalue=0x7}, {0x3, @svalue=0x200}, {0x1, @uvalue=0xc86}]}, 0x9f74}]}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 2.395894594s ago: executing program 3 (id=243): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x3, 0x1ff, 0x0, 0x9, 0x40}, {0x9, 0x3e3d, 0x2, 0x7f}, {0x5, 0x4, 0x1, 0x9, 0x3}, {0x3, 0x3, 0x8, 0xfffffffffffffff8, 0x6}, {0x164, 0x80000000, 0x400, 0x401, 0x794}, {0x7fff, 0x7fffffffffffffff, 0x1, 0x8, 0x4}], 0x6, 0x28, 0x100, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x101, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x328, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2f0, 0x2, [@TCA_CGROUP_EMATCHES={0x2ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0x7, 0xc, 0x0, 0x200}}}, @TCF_EM_IPSET={0xfffffffffffffdd9, 0x3, 0x0, 0x0, {{0x41a, 0x8, 0x204}, {0x0, 0x3}}}, @TCF_EM_CONTAINER={0x0, 0x2, 0x0, 0x0, {{0x400, 0x0, 0x3}, "72bb9d44346c9fbe9dc634e4ac739faaa7cc82162c0eedc5b072310957c79a86ae791bee1df4386aecfc731235f0f91b0252cb92c3b3858b583a108f45eb66fe679a31542d4c282371d1232b0e3fc2a1d7c15d0f6c1839262623c39338c7d5131296c1761cdafdaaebdcab189269172c124a64070084a9d7558508e5108fb892aabe0243e6bd977f29a2c939bf8621bc38a9e4969047c52dbf2076276255b2b0"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0xf4ba}, {0xfffffffa, 0x1, 0x3, 0x4, 0x3, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xf}, {0x4, 0x81, 0x5, 0x1, 0xe, 0x2}}}, @TCF_EM_CMP={0x18, 0xb, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0x5856, 0x4, 0x0, 0x6, 0x0, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0xe, 0x0, 0xfdc}, "80a67d474c5935ba93d7159dda9152e09fe824c63d04ad42da7d71e7144dd420f78d1997156baa4b5750bc39066c9795fdc0385ed1d61d5c49ad764bfcbe2c94a4acc35ddff3d3d334a594fa4f47eacf6b5bcea6b9b79c5f59c526cf0cc64ca3454a6503b98723d82807d436a6dafe77e8f018b77d688418a4937c87c16d5a38662bb46e6fb34e4e4848a57bcde7394e7874fce986e290a5928f0fc1071c94389e204ce87af331bc0fec2b9f8a16a4"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x184}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x54}}]}, 0x376}}, 0x20040054) 1.932623908s ago: executing program 4 (id=244): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1, 0x8, 0x80, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000010bd28550000000000000109022400010000400609040001090300040009211d00ff01"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006"], 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3e, {0x9, 0x21, 0x0, 0xfe}}}, 0x0) 1.846649383s ago: executing program 1 (id=245): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) getpid() recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, 0x6, 0x1) 1.656307823s ago: executing program 0 (id=246): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7f, 0x1, 0x303, 0xfffffff1, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r1, 0x3}, 0x8) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100050000000000040001"], 0x24, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x134, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x120, 0x1, [@m_connmark={0xec, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x8, 0x7, 0xfffffffb}}}]}, {0x9e, 0x6, "1d2cdf40c7cea6b40950d64c2226aed5a3a89231473a0ce3568d7a2bffc429330b0415f6a8190b4b61d10a691941c8af83077f3a693ad1554cadb0707f85b5cdb377700cd832f2e912440ce1c9286d68358231c6b4aa3ea28d4c8bc4976760bbad03f0fbda167331bf8b95ceb79a34db2fc6b242b155579477706df179c382abb3958130fbc2126bb66bd106af77a1c222c3446ba45235892dee"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x134}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 1.167292409s ago: executing program 3 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.116457271s ago: executing program 2 (id=248): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x480, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioprio_set$pid(0x3, 0x0, 0x0) r2 = io_uring_setup(0x476, 0x0) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x81, @mcast2, 0x2}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/65, 0x0, 0x9000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r4 = eventfd(0x42287084) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x0, r4}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x1000040000906, 0x12) 1.045603915s ago: executing program 3 (id=249): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x240, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}) pread64(r0, &(0x7f0000000180)=""/29, 0x1d, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) 0s ago: executing program 3 (id=250): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a09050b002000f84c090905aa46"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000000000)={0x0, 0x13, 0x2, "17c0"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 53.037344][ T4169] cgroup: Unknown subsys name 'net' [ 53.178424][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.647435][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.940189][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 56.083047][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.102057][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.110033][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.118769][ T4186] device bridge_slave_0 entered promiscuous mode [ 56.147952][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.156052][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.164575][ T4186] device bridge_slave_1 entered promiscuous mode [ 56.204385][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 56.238578][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 56.252551][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.264842][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.274158][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.281360][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.290460][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.323826][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.331117][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.339857][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.366787][ T4186] team0: Port device team_slave_0 added [ 56.380864][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 56.393955][ T4186] team0: Port device team_slave_1 added [ 56.424288][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.469051][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.497977][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.505339][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.531523][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.554484][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.561652][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.570126][ T4194] device bridge_slave_0 entered promiscuous mode [ 56.577568][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.584829][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.592919][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.600547][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.607594][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.633989][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.653247][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.660335][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.669018][ T4194] device bridge_slave_1 entered promiscuous mode [ 56.676047][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.683378][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.691069][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.717935][ T4190] team0: Port device team_slave_0 added [ 56.733545][ T4190] team0: Port device team_slave_1 added [ 56.746808][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.754036][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.761757][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.777498][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.784846][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.793287][ T4195] device bridge_slave_1 entered promiscuous mode [ 56.832926][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.852618][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.863411][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.889942][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.897354][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.905880][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.916995][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.927522][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.937028][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.944119][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.970129][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.982814][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.989759][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.015778][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.084156][ T4195] team0: Port device team_slave_0 added [ 57.107276][ T4185] team0: Port device team_slave_0 added [ 57.115542][ T4194] team0: Port device team_slave_0 added [ 57.122822][ T4185] team0: Port device team_slave_1 added [ 57.137672][ T4195] team0: Port device team_slave_1 added [ 57.146780][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.153791][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.160538][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.168328][ T4190] Cannot create hsr debugfs directory [ 57.188622][ T4194] team0: Port device team_slave_1 added [ 57.235781][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.242820][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.269401][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.281488][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.288766][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.314695][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.336803][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.343944][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.369946][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.384812][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.391774][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.418583][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.430769][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.438228][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.464527][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.483760][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.490820][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.516847][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.620476][ T4185] device hsr_slave_0 entered promiscuous mode [ 57.627344][ T4185] device hsr_slave_1 entered promiscuous mode [ 57.634125][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.641721][ T4185] Cannot create hsr debugfs directory [ 57.683100][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 57.705126][ T4194] device hsr_slave_0 entered promiscuous mode [ 57.711827][ T4194] device hsr_slave_1 entered promiscuous mode [ 57.718776][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.726554][ T4194] Cannot create hsr debugfs directory [ 57.736639][ T4195] device hsr_slave_0 entered promiscuous mode [ 57.743725][ T4195] device hsr_slave_1 entered promiscuous mode [ 57.750293][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.758052][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.761197][ T4195] Cannot create hsr debugfs directory [ 57.764221][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 57.832465][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 57.842581][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 57.965576][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.984330][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.994127][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.013655][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.068372][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.089578][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.104582][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.120984][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.160095][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.194094][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.204134][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.214474][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.257035][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.269578][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.282056][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.297507][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.347977][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.364064][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.377604][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.408592][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.417939][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.435462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.445731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.458754][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.479445][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.488591][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.498230][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.508061][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.515391][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.524306][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.538730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.547611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.556956][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.564142][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.585513][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.594363][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.613827][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.624193][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.642009][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.652078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.660943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.695307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.703531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.712030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.721418][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.728575][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.737797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.747139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.755916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.764657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.773604][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.780662][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.788541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.797908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.806800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.816009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.824590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.832964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.854208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.871370][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.881769][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.911134][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.920879][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.930720][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.957217][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.983731][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.000039][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.011272][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.025718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.034724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.042630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.050768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.059159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.068256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.077717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.086331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.096535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.104991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.113851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.149910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.159903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.168714][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.175835][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.189479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.199354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.209272][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.216541][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.225848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.235724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.261228][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.280354][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.287439][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.300624][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.311198][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.329333][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.353816][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.366454][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.378671][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.391088][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.401506][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.418943][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.427972][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.435311][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.443454][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.452079][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.460994][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.468104][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.477156][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.485491][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.494122][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.503203][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.511714][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.520776][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.529621][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.541568][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.567400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.577660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.586618][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.593996][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.603106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.611736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.620394][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.627487][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.637734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.646517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.655968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.665533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.674547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.713451][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.731622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.740400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.751881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.761020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.762578][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 59.770220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.783228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.790762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.800858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.809753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.818494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.827504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.836579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.842772][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 59.844823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.850153][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 59.865034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.874509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.887303][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.902845][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.911234][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.924907][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.927580][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 59.935138][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.939387][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 59.959857][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.977364][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.986357][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.998122][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.008678][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.017815][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.029849][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.043027][ T4186] device veth0_vlan entered promiscuous mode [ 60.066613][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.082718][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.095109][ T4186] device veth1_vlan entered promiscuous mode [ 60.110657][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.120181][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.185715][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.201729][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.230925][ T4190] device veth0_vlan entered promiscuous mode [ 60.262708][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.271107][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.286678][ T4186] device veth0_macvtap entered promiscuous mode [ 60.301711][ T4190] device veth1_vlan entered promiscuous mode [ 60.311852][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.321967][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.330698][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.347102][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.359433][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.368612][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.381249][ T4186] device veth1_macvtap entered promiscuous mode [ 60.433122][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.440357][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.449934][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.458664][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.467008][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.475884][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.483974][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.497899][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.512123][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.525970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.539638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.573501][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.585227][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.595090][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.603263][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.616951][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.632919][ T4190] device veth0_macvtap entered promiscuous mode [ 60.646494][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.655938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.665385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.674646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.691126][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.701492][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.710983][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.721304][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.734314][ T4190] device veth1_macvtap entered promiscuous mode [ 60.784097][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.800883][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.819783][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.842079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.850675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.860795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.870433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.889670][ T4195] device veth0_vlan entered promiscuous mode [ 60.905949][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.920866][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.935338][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.946635][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.958660][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.972113][ T4195] device veth1_vlan entered promiscuous mode [ 61.004057][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.013737][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.022989][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.036443][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.047740][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.059006][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.090471][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.099450][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.108490][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.119289][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.135611][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.143894][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.152850][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.161795][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.170843][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.179941][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.194824][ T4185] device veth0_vlan entered promiscuous mode [ 61.207243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.219195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.227762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.236623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.245629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.256716][ T4194] device veth0_vlan entered promiscuous mode [ 61.287405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.297015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.305283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.315411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.323547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.331971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.360950][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.364209][ T4195] device veth0_macvtap entered promiscuous mode [ 61.375374][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.388381][ T4185] device veth1_vlan entered promiscuous mode [ 61.399329][ T4194] device veth1_vlan entered promiscuous mode [ 61.413834][ T4195] device veth1_macvtap entered promiscuous mode [ 61.420881][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.430803][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.440331][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.448767][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.457143][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.528115][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.545538][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.556477][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.567256][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.581340][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.611454][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.620608][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.629631][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.639765][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.649275][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.657768][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.673161][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.709859][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.739511][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.766686][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.784222][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.825226][ T4194] device veth0_macvtap entered promiscuous mode [ 61.833474][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.841611][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.850092][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 61.876898][ T4194] device veth1_macvtap entered promiscuous mode [ 61.902085][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.920940][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 61.927386][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 61.941226][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.951411][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.961925][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.979078][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.990778][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.004468][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.007595][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 62.013135][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.018967][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 62.026372][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.047857][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.070338][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.200169][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.261346][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.337004][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.388711][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.441165][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.506281][ T4185] device veth0_macvtap entered promiscuous mode [ 62.804499][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.822361][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.839598][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.848762][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.879510][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.901815][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.913471][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.925224][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.938206][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.956095][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.967574][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.978252][ T4185] device veth1_macvtap entered promiscuous mode [ 63.022551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.030827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.050478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.062106][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.076271][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.085801][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.095114][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.137206][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.151538][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.162605][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.175676][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.186387][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.197298][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.208058][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.219242][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.244185][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.261424][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.276375][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.289041][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.295312][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.328537][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.360626][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.389440][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.410489][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.431802][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.446141][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.458730][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.475099][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.492905][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.511889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.541547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.555242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.593662][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.613278][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.640577][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.666793][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.770947][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.799853][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.820856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.890318][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.913236][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 63.919407][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.958209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.999872][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.008284][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 64.014869][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 64.075808][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.097439][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.104836][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.133993][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.144538][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.179558][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.196265][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 64.202727][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 64.233250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.254270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.323586][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.352732][ T4256] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.391290][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.012712][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.024237][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 65.257826][ T4256] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.303697][ T4280] ======================================================= [ 65.303697][ T4280] WARNING: The mand mount option has been deprecated and [ 65.303697][ T4280] and is ignored by this kernel. Remove the mand [ 65.303697][ T4280] option from the mount to silence this warning. [ 65.303697][ T4280] ======================================================= [ 66.172347][ T4256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.207785][ T4256] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 66.963292][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.189266][ T4284] can: request_module (can-proto-4) failed. [ 67.410429][ T4256] usb 4-1: config 0 descriptor?? [ 68.679681][ T4256] usb 4-1: can't set config #0, error -71 [ 68.708064][ T4256] usb 4-1: USB disconnect, device number 2 [ 69.472237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.492223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.502220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.512221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.522217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.532218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.542215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.552215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.562214][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.572214][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.752191][ C0] sched: RT throttling activated [ 70.661091][ T4312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12'. [ 71.475584][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.482464][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.552473][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.560079][ T4256] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.769580][ T26] audit: type=1326 audit(1777352052.341:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185c54dd9 code=0x7ffc0000 [ 72.831269][ T4320] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 73.218478][ T26] audit: type=1326 audit(1777352052.341:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185c54dd9 code=0x7ffc0000 [ 73.240602][ T26] audit: type=1326 audit(1777352052.341:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2185c54dd9 code=0x7ffc0000 [ 73.262685][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 74.042338][ T4227] usb 1-1: unable to read config index 0 descriptor/all [ 74.059185][ T4227] usb 1-1: can't read configurations, error -71 [ 74.127872][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.422259][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.497859][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 74.598457][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.621456][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.648805][ T4224] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.692372][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 74.850189][ T13] usb 5-1: config 0 has no interfaces? [ 74.856288][ T13] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 74.873684][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.912447][ T4224] usb 3-1: Using ep0 maxpacket: 32 [ 74.913860][ T13] usb 5-1: config 0 descriptor?? [ 74.946198][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 75.832552][ T4224] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 75.926743][ T4224] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.951018][ T4224] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 75.965031][ T23] cfg80211: failed to load regulatory.db [ 75.977696][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.005233][ T4224] usb 3-1: config 0 descriptor?? [ 77.068995][ T4224] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 77.251106][ T23] usb 5-1: USB disconnect, device number 2 [ 77.342937][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 77.393722][ T4379] fuse: Unknown parameter 'grou00000000000000000000' [ 77.500189][ T4224] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71 [ 77.560488][ T4224] usb 3-1: USB disconnect, device number 2 [ 77.766015][ T4395] fido_id[4395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 79.239617][ T4419] comedi comedi0: Minor 3 could not be opened [ 79.544192][ T4431] Zero length message leads to an empty skb [ 79.927748][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 80.845982][ T4444] fuse: Unknown parameter 'grou00000000000000000000' [ 80.882510][ T4225] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.263377][ T4225] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 81.752476][ T4225] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.882535][ T4225] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 81.891735][ T4225] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 81.929559][ T4459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 81.938737][ T4459] unsupported nlmsg_type 40 [ 81.943948][ T4225] usb 2-1: Manufacturer: syz [ 81.948687][ T4225] usb 2-1: SerialNumber: syz [ 82.245143][ T4225] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 82.327669][ T4225] usb 2-1: USB disconnect, device number 2 [ 82.522393][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.332382][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 83.502466][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.513913][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.532894][ T4227] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 83.579724][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.689621][ T4227] usb 1-1: config 0 descriptor?? [ 83.713331][ T4478] device syzkaller0 entered promiscuous mode [ 84.194348][ T4227] hid-generic 0003:057E:200E.0002: item fetching failed at offset 3/5 [ 84.223112][ T4227] hid-generic: probe of 0003:057E:200E.0002 failed with error -22 [ 84.396511][ T4465] udc-core: couldn't find an available UDC or it's busy [ 84.423047][ T4465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.882905][ T4503] Option ' /msr' to dns_resolver key: bad/missing value [ 85.112782][ T4225] usb 1-1: USB disconnect, device number 4 [ 85.150167][ T4491] sctp: failed to load transform for md5: -2 [ 85.195654][ T4494] sctp: failed to load transform for md5: -2 [ 85.450265][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.550946][ T4527] fuse: Unknown parameter 'grou00000000000000000000' [ 85.816012][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.232659][ T21] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.255146][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.332368][ T21] usb 1-1: config 0 descriptor?? [ 86.383943][ T21] cp210x 1-1:0.0: cp210x converter detected [ 86.483143][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.592488][ T21] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 86.600405][ T21] cp210x 1-1:0.0: querying part number failed [ 86.658485][ T21] usb 1-1: cp210x converter now attached to ttyUSB0 [ 86.754836][ T4225] usb 3-1: Using ep0 maxpacket: 8 [ 86.892500][ T4225] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 87.102575][ T4225] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 87.120646][ T4225] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 87.171634][ T4225] usb 3-1: Product: syz [ 87.190050][ T4225] usb 3-1: Manufacturer: syz [ 87.209662][ T4225] usb 3-1: SerialNumber: syz [ 87.603175][ T4225] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 87.617971][ T4225] visor: probe of 3-1:1.0 failed with error -110 [ 87.628189][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.749749][ T4541] Bluetooth: hci5: Frame reassembly failed (-90) [ 88.252468][ T4225] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.284317][ T4577] process 'syz.1.61' launched './file0' with NULL argv: empty string added [ 88.452722][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.522305][ T4225] usb 4-1: Using ep0 maxpacket: 16 [ 88.652616][ T4225] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 88.661118][ T4225] usb 4-1: config 1 has no interface number 0 [ 88.668858][ T4225] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.680570][ T4225] usb 4-1: config 1 interface 19 has no altsetting 0 [ 88.680709][ T4256] usb 1-1: USB disconnect, device number 5 [ 88.772445][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 88.892909][ T4225] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 88.902940][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.917720][ T4225] usb 4-1: Product: syz [ 88.918874][ T4256] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.922070][ T4225] usb 4-1: Manufacturer: syz [ 88.934960][ T23] usb 5-1: config 8 has an invalid interface number: 97 but max is 0 [ 88.943263][ T23] usb 5-1: config 8 has no interface number 0 [ 88.949646][ T23] usb 5-1: config 8 interface 97 has no altsetting 0 [ 88.956713][ T4225] usb 4-1: SerialNumber: syz [ 88.957573][ T4256] cp210x 1-1:0.0: device disconnected [ 89.922449][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 89.984024][ T4504] Bluetooth: hci5: Frame reassembly failed (-84) [ 90.109574][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 90.225665][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.245506][ T4225] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 90.258409][ T23] usb 5-1: Product: syz [ 90.282386][ T4460] usb 4-1: Failed to submit usb control message: -71 [ 90.299784][ T23] usb 5-1: Manufacturer: syz [ 90.316168][ T4460] usb 4-1: unable to send the bmi data to the device: -71 [ 90.341483][ T4460] usb 4-1: unable to get target info from device [ 90.349066][ T4460] usb 4-1: could not get target info (-71) [ 90.358573][ T4225] usb 4-1: USB disconnect, device number 4 [ 90.362072][ T4460] usb 4-1: could not probe fw (-71) [ 90.372301][ T23] usb 5-1: SerialNumber: syz [ 90.635815][ T4600] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 90.717867][ T23] hub 5-1:8.97: bad descriptor, ignoring hub [ 90.728235][ T23] hub: probe of 5-1:8.97 failed with error -5 [ 91.018517][ T23] sierra 5-1:8.97: Sierra USB modem converter detected [ 91.219332][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 91.457100][ T23] usb 5-1: USB disconnect, device number 3 [ 91.510304][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 91.588774][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 91.602819][ T23] sierra 5-1:8.97: device disconnected [ 91.674694][ T4608] fuse: Unknown parameter 'group_i00000000000000000000' [ 92.022271][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.376953][ T4256] Bluetooth: hci5: command 0x1001 tx timeout [ 92.384634][ T146] Bluetooth: hci5: sending frame failed (-49) [ 92.802421][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 92.842433][ T1111] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.932380][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 93.042754][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.152588][ T23] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.161694][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.182564][ T23] usb 5-1: Product: syz [ 93.186793][ T23] usb 5-1: Manufacturer: syz [ 93.191373][ T23] usb 5-1: SerialNumber: syz [ 93.214630][ T23] usb 5-1: config 0 descriptor?? [ 93.222755][ T1111] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 93.239733][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.267659][ T1111] usb 1-1: config 0 descriptor?? [ 93.312453][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 93.313407][ T1111] cp210x 1-1:0.0: cp210x converter detected [ 93.517239][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.538209][ T4226] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.764238][ T4226] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 93.777666][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.798564][ T4226] usb 2-1: Product: syz [ 93.821223][ T4226] usb 2-1: Manufacturer: syz [ 93.832232][ T4226] usb 2-1: SerialNumber: syz [ 93.864184][ T4226] usb 2-1: config 0 descriptor?? [ 94.366204][ T4226] usb 2-1: USB disconnect, device number 3 [ 94.382679][ T1111] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 94.390297][ T1111] cp210x 1-1:0.0: querying part number failed [ 94.401996][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 94.638107][ T4226] usb 5-1: USB disconnect, device number 4 [ 94.753338][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 94.770737][ T4634] netlink: 412 bytes leftover after parsing attributes in process `syz.4.83'. [ 95.038903][ T1111] usb 1-1: cp210x converter now attached to ttyUSB0 [ 95.106593][ T4638] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 95.252353][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.382463][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.502425][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 95.599770][ T4590] usb 1-1: USB disconnect, device number 6 [ 95.622628][ T23] usb 2-1: config 8 has an invalid interface number: 97 but max is 0 [ 95.631886][ T4590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.632261][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 95.646755][ T23] usb 2-1: config 8 has no interface number 0 [ 95.673592][ T23] usb 2-1: config 8 interface 97 has no altsetting 0 [ 95.680761][ T4590] cp210x 1-1:0.0: device disconnected [ 95.704712][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 95.743359][ T4647] fuse: Unknown parameter 'group_i00000000000000000000' [ 95.812472][ T1111] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 95.820941][ T1111] usb 4-1: config 1 has no interface number 0 [ 95.843071][ T1111] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.872520][ T1111] usb 4-1: config 1 interface 19 has no altsetting 0 [ 95.882841][ T23] usb 2-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 95.898575][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.908639][ T23] usb 2-1: Product: syz [ 95.919915][ T23] usb 2-1: Manufacturer: syz [ 95.926542][ T23] usb 2-1: SerialNumber: syz [ 96.062705][ T1111] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 96.072626][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.080955][ T1111] usb 4-1: Product: syz [ 96.085407][ T1111] usb 4-1: Manufacturer: syz [ 96.090153][ T1111] usb 4-1: SerialNumber: syz [ 96.198438][ T1111] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 96.252655][ T23] hub 2-1:8.97: bad descriptor, ignoring hub [ 96.259626][ T23] hub: probe of 2-1:8.97 failed with error -5 [ 96.266719][ T23] sierra 2-1:8.97: Sierra USB modem converter detected [ 96.278037][ T4666] device wg1 entered promiscuous mode [ 96.295868][ T23] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 96.382509][ T4227] usb 4-1: USB disconnect, device number 5 [ 96.392489][ T4460] usb 4-1: Failed to submit usb control message: -71 [ 96.405334][ T23] usb 2-1: USB disconnect, device number 4 [ 96.416107][ T4460] usb 4-1: unable to send the bmi data to the device: -71 [ 96.429628][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 96.441643][ T4460] usb 4-1: unable to get target info from device [ 96.456696][ T23] sierra 2-1:8.97: device disconnected [ 96.466473][ T4460] usb 4-1: could not get target info (-71) [ 96.500790][ T4460] usb 4-1: could not probe fw (-71) [ 98.661817][ T4225] usb 3-1: USB disconnect, device number 3 [ 98.672485][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 99.065520][ T4256] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.154335][ T4675] netlink: 412 bytes leftover after parsing attributes in process `syz.1.97'. [ 99.605847][ T4690] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 99.922390][ T4590] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.299435][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 100.432553][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.571805][ T4694] can: request_module (can-proto-4) failed. [ 100.652879][ T4590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.743257][ T4590] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.770434][ T4590] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 100.782415][ T4590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.864961][ T4590] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 100.914386][ T4590] usb 3-1: no configuration chosen from 1 choice [ 101.199544][ T4256] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.234848][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.243832][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.243862][ T4256] usb 4-1: Product: syz [ 101.254492][ T4256] usb 4-1: config 0 descriptor?? [ 101.542851][ T4256] usb 4-1: can't set config #0, error -71 [ 101.709848][ T4256] usb 4-1: USB disconnect, device number 6 [ 101.910065][ T4710] fuse: Unknown parameter 'group_i00000000000000000000' [ 102.342491][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.402918][ T4224] usb 3-1: USB disconnect, device number 4 [ 103.722478][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 104.232608][ T13] usb 1-1: config 8 has an invalid interface number: 97 but max is 0 [ 104.285521][ T13] usb 1-1: config 8 has no interface number 0 [ 104.366841][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 104.374787][ T13] usb 1-1: config 8 interface 97 has no altsetting 0 [ 104.376442][ T4728] netlink: 412 bytes leftover after parsing attributes in process `syz.1.110'. [ 104.750147][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.774232][ T13] usb 1-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 105.316837][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.005657][ T13] usb 1-1: Product: syz [ 106.009902][ T13] usb 1-1: Manufacturer: syz [ 106.015674][ T13] usb 1-1: SerialNumber: syz [ 106.042448][ T13] usb 1-1: can't set config #8, error -71 [ 106.079534][ T13] usb 1-1: USB disconnect, device number 7 [ 107.291086][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.338234][ T4752] fuse: Unknown parameter 'group_id00000000000000000000' [ 107.596487][ T4756] autofs4:pid:4756:autofs_fill_super: called with bogus options [ 108.842905][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 108.866715][ T4768] netlink: 412 bytes leftover after parsing attributes in process `syz.1.123'. [ 109.278552][ T4772] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 109.285385][ T4772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.304971][ T4772] vhci_hcd vhci_hcd.0: Device attached [ 109.406540][ T4777] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.293855][ T4227] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 110.313098][ T4224] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.537501][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 111.142309][ T4224] usb 3-1: Using ep0 maxpacket: 8 [ 111.233076][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 111.272412][ T4224] usb 3-1: config 0 has no interfaces? [ 111.393216][ T4787] fuse: Unknown parameter 'group_id00000000000000000000' [ 112.134231][ T4224] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.254200][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.267725][ T4773] vhci_hcd: connection reset by peer [ 112.359608][ T4793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.130'. [ 113.109392][ T4797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 113.112307][ T4275] vhci_hcd: stop threads [ 113.191488][ T4224] usb 3-1: config 0 descriptor?? [ 113.211515][ T4275] vhci_hcd: release socket [ 113.218721][ T4275] vhci_hcd: disconnect device [ 114.187443][ T4805] netlink: 160 bytes leftover after parsing attributes in process `syz.4.133'. [ 114.422475][ T4224] usb 3-1: can't set config #0, error -71 [ 114.621223][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 114.643894][ T4224] usb 3-1: USB disconnect, device number 5 [ 116.576512][ T4827] Cannot find add_set index 0 as target [ 116.652428][ T4227] vhci_hcd: vhci_device speed not set [ 116.659060][ T4832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 116.665630][ T4832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.732585][ T4832] vhci_hcd vhci_hcd.0: Device attached [ 116.802949][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 117.156669][ T4256] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.283259][ T13] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 117.552360][ T4256] usb 4-1: Using ep0 maxpacket: 8 [ 117.772618][ T4256] usb 4-1: config 0 has no interfaces? [ 117.778180][ T4256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.922956][ T4850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'. [ 119.547237][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.559209][ T4256] usb 4-1: config 0 descriptor?? [ 119.620008][ T4854] netlink: 160 bytes leftover after parsing attributes in process `syz.4.146'. [ 119.837303][ T4853] usb 4-1: USB disconnect, device number 7 [ 119.962356][ T4833] vhci_hcd: connection reset by peer [ 119.986175][ T4371] vhci_hcd: stop threads [ 119.991648][ T4371] vhci_hcd: release socket [ 121.095627][ T4371] vhci_hcd: disconnect device [ 122.472630][ T13] vhci_hcd: vhci_device speed not set [ 124.252202][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 124.495732][ T4899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 125.866929][ T4906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 125.873506][ T4906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.882556][ T4906] vhci_hcd vhci_hcd.0: Device attached [ 126.162255][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.394205][ T4226] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 126.592381][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 126.722667][ T13] usb 1-1: config 0 has no interfaces? [ 126.728277][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.768568][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.804598][ T13] usb 1-1: config 0 descriptor?? [ 127.714771][ T4907] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 127.737518][ T154] vhci_hcd: stop threads [ 127.752592][ T154] vhci_hcd: release socket [ 127.773669][ T154] vhci_hcd: disconnect device [ 127.991820][ T13] usb 1-1: USB disconnect, device number 8 [ 129.571519][ T4912] ODEBUG: Out of memory. ODEBUG disabled [ 131.395044][ T4963] block device autoloading is deprecated and will be removed. [ 132.510251][ T4226] vhci_hcd: vhci_device speed not set [ 132.653906][ T4977] device syzkaller0 entered promiscuous mode [ 133.483090][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.489428][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.678593][ T5032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.196'. [ 137.589615][ T5038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 137.989542][ T5049] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 138.257749][ T150] block nbd1: Attempted send on invalid socket [ 138.285870][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.322301][ T5063] vxfs: unable to read disk superblock at 1 [ 138.329248][ T150] block nbd1: Attempted send on invalid socket [ 138.335492][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.346544][ T5063] vxfs: unable to read disk superblock at 8 [ 138.352594][ T5063] vxfs: can't find superblock. [ 138.612341][ T4256] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.860090][ T5072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.210'. [ 139.662307][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.852268][ T4256] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 139.860723][ T4256] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 139.874305][ T13] usb 4-1: device descriptor read/64, error -71 [ 139.889130][ T4256] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.903339][ T4256] usb 5-1: config 0 has no interface number 0 [ 139.909575][ T4256] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 139.928564][ T4256] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 139.944291][ T4256] usb 5-1: config 0 interface 255 has no altsetting 0 [ 139.951253][ T4256] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 139.969677][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.982858][ T4256] usb 5-1: config 0 descriptor?? [ 140.023616][ T4256] usb-storage 5-1:0.255: USB Mass Storage device detected [ 140.039787][ T4256] usb-storage 5-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 140.169398][ T5082] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.911621][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.141180][ T4224] usb 5-1: USB disconnect, device number 5 [ 141.222407][ T13] usb 4-1: device descriptor read/64, error -71 [ 141.406511][ T13] usb usb4-port1: attempt power cycle [ 142.430906][ T4224] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.192392][ T4224] usb 3-1: Using ep0 maxpacket: 32 [ 143.363505][ T4224] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.593559][ T4224] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 143.602573][ T4224] usb 3-1: config 7 has no interface number 0 [ 143.608726][ T4224] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 38 [ 143.619137][ T4224] usb 3-1: config 7 interface 187 has no altsetting 0 [ 143.728008][ T264] block nbd3: Attempted send on invalid socket [ 143.734765][ T264] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.747184][ T5128] vxfs: unable to read disk superblock at 1 [ 143.755413][ T264] block nbd3: Attempted send on invalid socket [ 143.762249][ T264] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.797371][ T5128] vxfs: unable to read disk superblock at 8 [ 143.803345][ T5128] vxfs: can't find superblock. [ 144.113605][ T5131] netlink: 160 bytes leftover after parsing attributes in process `syz.1.225'. [ 144.372533][ T4224] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 144.403190][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.449989][ T4224] usb 3-1: Product: syz [ 144.480401][ T4224] usb 3-1: Manufacturer: syz [ 144.520818][ T4224] usb 3-1: SerialNumber: syz [ 144.562701][ T4224] usb 3-1: can't set config #7, error -71 [ 144.572628][ T4224] usb 3-1: USB disconnect, device number 6 [ 144.906484][ T5146] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.991884][ T5172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 150.519519][ T5175] netlink: 160 bytes leftover after parsing attributes in process `syz.1.238'. [ 151.421773][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 151.717163][ T5187] netlink: 412 bytes leftover after parsing attributes in process `syz.3.243'. [ 152.002375][ T4590] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.140794][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 152.225360][ T4225] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.255718][ T4590] usb 5-1: Using ep0 maxpacket: 16 [ 152.410672][ T4590] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.421524][ T4590] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 152.435175][ T4590] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.441873][ T4590] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 152.451354][ T4590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.482242][ T4225] usb 1-1: Using ep0 maxpacket: 8 [ 152.551483][ T4590] usb 5-1: config 0 descriptor?? [ 152.642606][ T4225] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 152.738799][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.762655][ T4590] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 153.132244][ T4225] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.172402][ T4225] pvrusb2: ********** [ 153.196691][ T4225] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 153.286978][ T4225] pvrusb2: Important functionality might not be entirely working. [ 153.316578][ T4225] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 153.351754][ T4225] pvrusb2: ********** [ 153.449181][ T5201] [ 153.451669][ T5201] ====================================================== [ 153.458897][ T5201] WARNING: possible circular locking dependency detected [ 153.465947][ T4590] usb 5-1: USB disconnect, device number 6 [ 153.466022][ T5201] syzkaller #0 Not tainted [ 153.476265][ T5201] ------------------------------------------------------ [ 153.483299][ T5201] syz.0.246/5201 is trying to acquire lock: [ 153.489215][ T5201] ffff888025058c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 153.500405][ T5201] [ 153.500405][ T5201] but task is already holding lock: [ 153.507801][ T5201] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 153.517499][ T5201] [ 153.517499][ T5201] which lock already depends on the new lock. [ 153.517499][ T5201] [ 153.527924][ T5201] [ 153.527924][ T5201] the existing dependency chain (in reverse order) is: [ 153.536959][ T5201] [ 153.536959][ T5201] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 153.544990][ T5201] __mutex_lock_common+0x1e3/0x2400 [ 153.550744][ T5201] mutex_lock_nested+0x17/0x20 [ 153.556063][ T5201] rfkill_register+0x33/0x980 [ 153.561304][ T5201] hci_register_dev+0x452/0x970 [ 153.566721][ T5201] vhci_create_device+0x32c/0x5c0 [ 153.572494][ T5201] vhci_write+0x391/0x450 [ 153.577469][ T5201] vfs_write+0x745/0xd60 [ 153.582263][ T5201] ksys_write+0x152/0x260 [ 153.587139][ T5201] do_syscall_64+0x4c/0xa0 [ 153.592101][ T5201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.598544][ T5201] [ 153.598544][ T5201] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 153.606415][ T5201] __mutex_lock_common+0x1e3/0x2400 [ 153.612300][ T5201] mutex_lock_nested+0x17/0x20 [ 153.617714][ T5201] vhci_send_frame+0x88/0x100 [ 153.623020][ T5201] hci_send_frame+0x1a9/0x2e0 [ 153.628428][ T5201] hci_tx_work+0x9f9/0x1710 [ 153.633480][ T5201] process_one_work+0x85f/0x1010 [ 153.638953][ T5201] worker_thread+0xaa6/0x1290 [ 153.644172][ T5201] kthread+0x436/0x520 [ 153.648793][ T5201] ret_from_fork+0x1f/0x30 [ 153.653375][ T4226] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 153.653841][ T5201] [ 153.653841][ T5201] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 153.671351][ T5201] __flush_work+0x116/0x210 [ 153.676642][ T5201] hci_dev_do_open+0xc58/0x1270 [ 153.682055][ T5201] hci_power_on+0x1c1/0x610 [ 153.687276][ T5201] process_one_work+0x85f/0x1010 [ 153.692775][ T5201] worker_thread+0xaa6/0x1290 [ 153.698198][ T5201] kthread+0x436/0x520 [ 153.702804][ T5201] ret_from_fork+0x1f/0x30 [ 153.707765][ T5201] [ 153.707765][ T5201] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 153.715720][ T5201] __mutex_lock_common+0x1e3/0x2400 [ 153.721467][ T5201] mutex_lock_nested+0x17/0x20 [ 153.726801][ T5201] bg_scan_update+0x44/0x3b0 [ 153.732129][ T5201] process_one_work+0x85f/0x1010 [ 153.737608][ T5201] worker_thread+0xaa6/0x1290 [ 153.742914][ T5201] kthread+0x436/0x520 [ 153.747521][ T5201] ret_from_fork+0x1f/0x30 [ 153.752480][ T5201] [ 153.752480][ T5201] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 153.762567][ T5201] __lock_acquire+0x2c42/0x7d10 [ 153.767973][ T5201] lock_acquire+0x19e/0x400 [ 153.773026][ T5201] __flush_work+0x116/0x210 [ 153.778071][ T5201] __cancel_work_timer+0x3f4/0x560 [ 153.783849][ T5201] hci_request_cancel_all+0xcc/0x300 [ 153.789689][ T5201] hci_dev_do_close+0x4e/0x1030 [ 153.795213][ T5201] hci_rfkill_set_block+0x10a/0x190 [ 153.800971][ T5201] rfkill_set_block+0x1c9/0x3d0 [ 153.806378][ T5201] rfkill_fop_write+0x452/0x560 [ 153.811884][ T5201] vfs_write+0x30b/0xd60 [ 153.816667][ T5201] ksys_write+0x152/0x260 [ 153.821541][ T5201] do_syscall_64+0x4c/0xa0 [ 153.826497][ T5201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.832933][ T5201] [ 153.832933][ T5201] other info that might help us debug this: [ 153.832933][ T5201] [ 153.843289][ T5201] Chain exists of: [ 153.843289][ T5201] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 153.843289][ T5201] [ 153.859042][ T5201] Possible unsafe locking scenario: [ 153.859042][ T5201] [ 153.866598][ T5201] CPU0 CPU1 [ 153.871974][ T5201] ---- ---- [ 153.877354][ T5201] lock(rfkill_global_mutex); [ 153.882144][ T5201] lock(&data->open_mutex); [ 153.889274][ T5201] lock(rfkill_global_mutex); [ 153.896580][ T5201] lock((work_completion)(&hdev->bg_scan_update)); [ 153.903194][ T5201] [ 153.903194][ T5201] *** DEADLOCK *** [ 153.903194][ T5201] [ 153.911357][ T5201] 1 lock held by syz.0.246/5201: [ 153.916325][ T5201] #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 153.926446][ T5201] [ 153.926446][ T5201] stack backtrace: [ 153.932373][ T5201] CPU: 0 PID: 5201 Comm: syz.0.246 Not tainted syzkaller #0 [ 153.939660][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.949807][ T5201] Call Trace: [ 153.953091][ T5201] [ 153.956110][ T5201] dump_stack_lvl+0x188/0x250 [ 153.960814][ T5201] ? load_image+0x400/0x400 [ 153.965325][ T5201] ? show_regs_print_info+0x20/0x20 [ 153.970711][ T5201] ? print_circular_bug+0x12b/0x1a0 [ 153.975913][ T5201] check_noncircular+0x296/0x330 [ 153.980852][ T5201] ? look_up_lock_class+0x71/0x110 [ 153.985964][ T5201] ? add_chain_block+0x940/0x940 [ 153.990986][ T5201] ? lockdep_lock+0xf1/0x1f0 [ 153.995586][ T5201] ? __lock_acquire+0x12e8/0x7d10 [ 154.000626][ T5201] ? mark_lock+0x94/0x320 [ 154.004962][ T5201] __lock_acquire+0x2c42/0x7d10 [ 154.009832][ T5201] ? verify_lock_unused+0x140/0x140 [ 154.015641][ T5201] ? mark_lock+0x94/0x320 [ 154.020065][ T5201] lock_acquire+0x19e/0x400 [ 154.024578][ T5201] ? __flush_work+0xfa/0x210 [ 154.029177][ T5201] ? __lock_acquire+0x7d10/0x7d10 [ 154.034205][ T5201] ? read_lock_is_recursive+0x10/0x10 [ 154.039580][ T5201] ? start_flush_work+0x776/0x820 [ 154.044604][ T5201] __flush_work+0x116/0x210 [ 154.049109][ T5201] ? __flush_work+0xfa/0x210 [ 154.053716][ T5201] ? flush_work+0x20/0x20 [ 154.058074][ T5201] ? try_to_grab_pending+0xfa/0x7f0 [ 154.063271][ T5201] ? mark_lock+0x94/0x320 [ 154.067601][ T5201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 154.073612][ T5201] ? lock_chain_count+0x20/0x20 [ 154.078464][ T5201] ? mark_lock+0x94/0x320 [ 154.082802][ T5201] ? __cancel_work_timer+0x36a/0x560 [ 154.088091][ T5201] __cancel_work_timer+0x3f4/0x560 [ 154.093212][ T5201] ? cancel_work_sync+0x20/0x20 [ 154.098059][ T5201] ? __cancel_work+0x1f9/0x2e0 [ 154.102828][ T5201] ? lockdep_hardirqs_on+0x94/0x140 [ 154.108140][ T5201] ? __cancel_work+0x27b/0x2e0 [ 154.112912][ T5201] ? cancel_work+0x20/0x20 [ 154.117331][ T5201] ? lock_chain_count+0x20/0x20 [ 154.122189][ T5201] hci_request_cancel_all+0xcc/0x300 [ 154.127481][ T5201] hci_dev_do_close+0x4e/0x1030 [ 154.132334][ T5201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.138228][ T5201] ? _raw_spin_unlock+0x40/0x40 [ 154.143086][ T5201] hci_rfkill_set_block+0x10a/0x190 [ 154.148286][ T5201] ? rcu_lock_release+0x20/0x20 [ 154.153138][ T5201] rfkill_set_block+0x1c9/0x3d0 [ 154.157998][ T5201] rfkill_fop_write+0x452/0x560 [ 154.162851][ T5201] ? rfkill_fop_read+0x520/0x520 [ 154.167791][ T5201] ? common_file_perm+0x140/0x1c0 [ 154.172818][ T5201] ? fsnotify_perm+0x5d/0x560 [ 154.177497][ T5201] ? security_file_permission+0x75/0xa0 [ 154.183042][ T5201] ? rfkill_fop_read+0x520/0x520 [ 154.187986][ T5201] vfs_write+0x30b/0xd60 [ 154.192229][ T5201] ? file_end_write+0x250/0x250 [ 154.197080][ T5201] ? __fget_files+0x40f/0x480 [ 154.201768][ T5201] ? __fdget_pos+0x1e2/0x370 [ 154.206355][ T5201] ? ksys_write+0x71/0x260 [ 154.210876][ T5201] ksys_write+0x152/0x260 [ 154.215206][ T5201] ? __ia32_sys_read+0x80/0x80 [ 154.219976][ T5201] ? lockdep_hardirqs_on+0x94/0x140 [ 154.225187][ T5201] do_syscall_64+0x4c/0xa0 [ 154.229777][ T5201] ? clear_bhb_loop+0x30/0x80 [ 154.234455][ T5201] ? clear_bhb_loop+0x30/0x80 [ 154.239135][ T5201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.245039][ T5201] RIP: 0033:0x7fc3d15f5dd9 [ 154.249661][ T5201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.269440][ T5201] RSP: 002b:00007fc3cf84f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.277863][ T5201] RAX: ffffffffffffffda RBX: 00007fc3d186efa0 RCX: 00007fc3d15f5dd9 [ 154.285836][ T5201] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 154.293806][ T5201] RBP: 00007fc3d168bd69 R08: 0000000000000000 R09: 0000000000000000 [ 154.301783][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.309850][ T5201] R13: 00007fc3d186f038 R14: 00007fc3d186efa0 R15: 00007ffcf673c498 [ 154.317829][ T5201] [ 154.402406][ T4226] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 154.416275][ T4226] usb 4-1: config 246 has no interface number 0 [ 154.423463][ T4226] usb 4-1: config 246 interface 166 altsetting 118 has an invalid endpoint with address 0xAA, skipping [ 154.444255][ T4226] usb 4-1: config 246 interface 166 has no altsetting 0 [ 154.602392][ T4226] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 154.617850][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.626273][ T4226] usb 4-1: Product: syz [ 154.630460][ T4226] usb 4-1: Manufacturer: syz [ 154.637230][ T4226] usb 4-1: SerialNumber: syz [ 154.723192][ T2424] pvrusb2: Invalid write control endpoint [ 154.734343][ T4225] usb 1-1: USB disconnect, device number 9 [ 154.777867][ T2424] pvrusb2: Invalid write control endpoint [ 154.784957][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.806107][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.819334][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.837017][ T2424] pvrusb2: Device being rendered inoperable [ 154.848702][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.870380][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.888649][ T2424] pvrusb2: Attached sub-driver cx25840 [ 154.894478][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.906142][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.342471][ T4226] usb 4-1: Limiting number of CPorts to U8_MAX [ 155.349241][ T4226] usb 4-1: Unknown endpoint type found, address 0x0b [ 155.356558][ T4226] usb 4-1: Not enough endpoints found in device, aborting! [ 155.551207][ T4225] usb 4-1: USB disconnect, device number 11