last executing test programs: 1m33.774569772s ago: executing program 4 (id=369): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m31.527797225s ago: executing program 4 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/icmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fanotify_init(0x10, 0x400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7fff}, 0xc) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1m31.125371671s ago: executing program 4 (id=378): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x4000032f}, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x1f10, &(0x7f00000003c0)={0x0, 0x19de, 0x400, 0x0, 0x212}, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m29.403428606s ago: executing program 4 (id=382): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000000200"}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1m27.348777256s ago: executing program 4 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) io_uring_enter(r4, 0x3516, 0x2, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x70}}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4044800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000340)) 1m26.38490086s ago: executing program 4 (id=387): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfde2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 1m11.081616555s ago: executing program 32 (id=387): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfde2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 11.036095268s ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x188, 0x30, 0x9, 0x0, 0x0, {}, [{0x174, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x188}}, 0x0) 10.837882971s ago: executing program 3 (id=587): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x40, 0x0) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0xee01, 0xee01, 0xee01]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=0x0], 0x0) 10.055903522s ago: executing program 5 (id=589): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 8.709325952s ago: executing program 2 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) fanotify_init(0x10, 0x400) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r8, 0x7fff}, 0xc) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 8.539540645s ago: executing program 5 (id=592): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1, 0x7, 0x9) 8.491788345s ago: executing program 1 (id=595): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 7.118721896s ago: executing program 0 (id=596): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 6.891802309s ago: executing program 1 (id=597): syz_emit_ethernet(0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd606ceae400080000fc00000000000000000000000000000000000000000000000000fffdac1e00010000050000000000097b1a9ffa87b3402561aab9a6b630bd2b6e964dda742358df947afae3d9d6"], 0x0) socket(0x22, 0x2, 0x4) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, 0x0}) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r5, 0x8, 0x0) 6.891100569s ago: executing program 2 (id=598): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff0026f3a5e74b44"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b900000001000100090000"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\a'], 0x20}}, 0x0) 6.851891969s ago: executing program 0 (id=599): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 6.79599301s ago: executing program 3 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x70}}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4044800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000340)) 5.230463553s ago: executing program 2 (id=601): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x700, 0x0) 5.215579073s ago: executing program 0 (id=602): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="9c38ee464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x2, 0x0, @private, @multicast1}, {0x1e, 0x4, 0x0, @remote}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xb, @pix_mp={0x38305343, 0x2, 0x20303159, 0x6, 0x1, [{0x4}, {0x4, 0x8073}, {0x3, 0x7}, {0x6, 0x4}, {0xfffffff9, 0x10000}, {0x1, 0x6}, {0x8, 0x8}, {0x2, 0x893a}], 0x66, 0x9, 0x2, 0x3, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_clone3(&(0x7f0000002340)={0x828080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.201584183s ago: executing program 3 (id=603): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd2(0x8004, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a7000000000800014000000500080002"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{r7, r8+60000000}, {r9, r10+10000000}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r12, 0x0, 0x0, 0x80800) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r13, 0x0, &(0x7f00000005c0)) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000001040104000000000000000005000000050001000300000089e1dab22290f395afe04ba808717612701fc5745b0ef8215e68feec835b6231ff6ba75105b9"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) 5.035951906s ago: executing program 5 (id=604): socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'wlan0\x00', @local}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x80000) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 5.024037246s ago: executing program 1 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x90) openat(0xffffffffffffff9c, 0x0, 0x123941, 0x1e3) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x5) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000380), 0x4) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x58) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20c411, 0x0) 4.269827347s ago: executing program 0 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000003000000"], 0x48) 4.249301507s ago: executing program 2 (id=607): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r5, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1800848, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_mmap}, {@cache_mmap}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x80, 0x8, 0x0, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xaa, [@private=0xa010100, @private=0xa010101, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x1c, 0x6, "e26c5d6f"}, @end, @timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x0, [{@multicast1, 0x3}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x144000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x30, 0x49, 0x800, 0x1, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r10, 0xfffff669}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x20000000) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) 2.093798859s ago: executing program 1 (id=608): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 2.04795494s ago: executing program 2 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) fanotify_init(0x10, 0x400) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000140)="4e6a106d0103a9f1ef1bd2d08e33610b226f5a0237ccfb2d91866182b2d688a219bbe96e170c9db53b8cc13c6384db08336648be95a44ac11e312d83ea0042064d1246575e3c53038fc7c3f1ed5ba5db77b86b") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r8, 0x7fff}, 0xc) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.672422286s ago: executing program 5 (id=610): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1.672062046s ago: executing program 0 (id=611): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x2, 0xf5}, 0x400, 0xe, 0x4}) 1.525645428s ago: executing program 3 (id=612): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6000004, 0x0, 0x0, 0x6, 0xfffffff9}]}) 1.327948891s ago: executing program 5 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x70}}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4044800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000340)) 970.788756ms ago: executing program 3 (id=614): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x7, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x5, 0x3, 0x0, 0x5]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) clock_gettime(0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000640)) connect$tipc(0xffffffffffffffff, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x22, 0x3}, 0x3}}, 0x10) memfd_secret(0x0) 298.781066ms ago: executing program 0 (id=615): syz_emit_ethernet(0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd606ceae400080000fc00000000000000000000000000000000000000000000000000fffdac1e00010000050000000000097b1a9ffa87b3402561aab9a6b630bd2b6e964dda742358df947afae3d9d6"], 0x0) socket(0x22, 0x2, 0x4) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0x3, 0x0}) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r5, 0x8, 0x0) 288.368066ms ago: executing program 2 (id=616): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="9c38ee464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x2, 0x0, @private, @multicast1}, {0x1e, 0x4, 0x0, @remote}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xb, @pix_mp={0x38305343, 0x2, 0x20303159, 0x6, 0x1, [{0x4}, {0x4, 0x8073}, {0x3, 0x7}, {0x6, 0x4}, {0xfffffff9, 0x10000}, {0x1, 0x6}, {0x8, 0x8}, {0x2, 0x893a}], 0x66, 0x9, 0x2, 0x3, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_clone3(&(0x7f0000002340)={0x828080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 107.931459ms ago: executing program 1 (id=617): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x700, 0x0) 44.20582ms ago: executing program 1 (id=618): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000000000180000003b00000000000000ffffac280000950000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x263119c007d68c97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="f24907df1365a30500000090416b0202d6fd4229195a65ea3ddc3f4b70510842337a39e49174bc", @ANYRES16=r0, @ANYBLOB="a1ab0000000000000000320000000800170156000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, 0x0, &(0x7f0000000080)=r7}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, 0x0, 0x138) 0s ago: executing program 5 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x90) openat(0xffffffffffffff9c, 0x0, 0x123941, 0x1e3) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x5) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000380), 0x4) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x58) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20c411, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 51.150871][ T4170] cgroup: Unknown subsys name 'net' [ 51.309625][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.752378][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.155151][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.288312][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.319513][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.362498][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.404825][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.417574][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.424885][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.432986][ T4182] device bridge_slave_0 entered promiscuous mode [ 54.466531][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.473617][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.481592][ T4182] device bridge_slave_1 entered promiscuous mode [ 54.512854][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.520070][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.528139][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.563362][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.570526][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.578393][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.598646][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.605967][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.613711][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.630626][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.653231][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.660684][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.668466][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.683985][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.717985][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.729534][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.744665][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.751802][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.759771][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.794235][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.801650][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.810136][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.817294][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.824510][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.832191][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.841500][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.861309][ T4182] team0: Port device team_slave_0 added [ 54.874368][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.881428][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.889402][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.898638][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.910273][ T4185] team0: Port device team_slave_0 added [ 54.917334][ T4182] team0: Port device team_slave_1 added [ 54.924065][ T4185] team0: Port device team_slave_1 added [ 54.973312][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.997562][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.004678][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.030809][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.051663][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.062408][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.073489][ T4183] team0: Port device team_slave_0 added [ 55.080149][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.087154][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.113231][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.124851][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.131807][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.158493][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.185429][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.195632][ T4183] team0: Port device team_slave_1 added [ 55.212786][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.219923][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.246068][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.263197][ T4191] team0: Port device team_slave_0 added [ 55.285101][ T4184] team0: Port device team_slave_0 added [ 55.292821][ T4184] team0: Port device team_slave_1 added [ 55.303772][ T4191] team0: Port device team_slave_1 added [ 55.352074][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.359392][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.385482][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.397340][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.404572][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.431142][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.450354][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.457483][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.483523][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.502761][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.509729][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.535851][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.555355][ T4182] device hsr_slave_0 entered promiscuous mode [ 55.562181][ T4182] device hsr_slave_1 entered promiscuous mode [ 55.572407][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.579503][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.605763][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.636579][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.643680][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.670681][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.688712][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.695486][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.702798][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.710641][ T4185] Cannot create hsr debugfs directory [ 55.781190][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.788280][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.795301][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.802860][ T4191] Cannot create hsr debugfs directory [ 55.810753][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.817944][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.826139][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.833805][ T4184] Cannot create hsr debugfs directory [ 55.851327][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.858179][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.864942][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.872576][ T4183] Cannot create hsr debugfs directory [ 55.894963][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 55.902200][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 55.902227][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 55.974395][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 55.980524][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 56.169118][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.181117][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.190509][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.200575][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.266441][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.283829][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.299225][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.308574][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.352550][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.366903][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.390655][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.409144][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.428662][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.463617][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.478405][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.487344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.496998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.513077][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.530616][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.540686][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.566146][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.576293][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.586417][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.593575][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.602365][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.611561][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.620003][ T894] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.627073][ T894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.635552][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.644149][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.652646][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.661440][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.670204][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.679210][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.690794][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.700095][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.708444][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.730184][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.737951][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.769734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.779074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.790274][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.799652][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.809838][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.821304][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.831540][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.846190][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.858622][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.879156][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.911389][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.921254][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.930546][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.937652][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.947150][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.956445][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.965197][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.972262][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.981126][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.998237][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.016610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.044545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.060220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.069343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.083844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.104078][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.131364][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.143978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.153066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.161758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.169535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.178564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.187078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.195623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.206817][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.225709][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.237363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.246419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.263362][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.288370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.301931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.312152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.326753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.341132][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.348264][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.358287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.380035][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.392235][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.405229][ T894] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.412306][ T894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.421851][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.429778][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.438345][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.468683][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.497243][ T4182] device veth0_vlan entered promiscuous mode [ 57.513057][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.521842][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.530425][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.537512][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.546022][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.554742][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.563721][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.573049][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.582954][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.591826][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.600612][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.609511][ T894] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.616598][ T894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.624955][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.633189][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.641716][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.649276][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.657230][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.665815][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.674353][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.683428][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.700885][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.711923][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.733890][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.751153][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.770106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.783677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.801259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.811430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.825484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.841148][ T4182] device veth1_vlan entered promiscuous mode [ 57.853980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.867883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.877097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.899604][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.916109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.928762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.939194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.952732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.963303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.972487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.980034][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 57.980247][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 57.993050][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 58.024591][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.035302][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.043825][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.054611][ T4248] Bluetooth: hci3: command 0x041b tx timeout [ 58.060703][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 58.060710][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.076218][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.083272][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.091577][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.099926][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.108279][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.117611][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.127383][ T894] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.134463][ T894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.142201][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.150863][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.167731][ T4182] device veth0_macvtap entered promiscuous mode [ 58.180825][ T4182] device veth1_macvtap entered promiscuous mode [ 58.188166][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.200699][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.208971][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.217789][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.226486][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.237404][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.246419][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.255955][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.263361][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.274063][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.310323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.326667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.342076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.353192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.370912][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.384395][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.395748][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.405144][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.413840][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.423282][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.433306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.441793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.450309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.460925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.469754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.478626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.487658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.499217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.508432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.529484][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.548677][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.597373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.606855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.616196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.624591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.633043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.641475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.650376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.673969][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.699478][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.722091][ T4183] device veth0_vlan entered promiscuous mode [ 58.735847][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.751139][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.769838][ T4184] device veth0_vlan entered promiscuous mode [ 58.790989][ T4183] device veth1_vlan entered promiscuous mode [ 58.821369][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.828933][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.840873][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.848810][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.857000][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.865338][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.873601][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.881316][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.918996][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.929011][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.937620][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.950986][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.960395][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.975858][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.987127][ T4184] device veth1_vlan entered promiscuous mode [ 58.995015][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.003065][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.032221][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.052242][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.060147][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.062502][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.076053][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.084897][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.093261][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.103202][ T4183] device veth0_macvtap entered promiscuous mode [ 59.117203][ T4185] device veth0_vlan entered promiscuous mode [ 59.140989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.149274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.158068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.166785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.177833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.186758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.195404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.203113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.212172][ T4183] device veth1_macvtap entered promiscuous mode [ 59.223692][ T4185] device veth1_vlan entered promiscuous mode [ 59.249187][ T4184] device veth0_macvtap entered promiscuous mode [ 59.263053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.273729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.283069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.298308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.311479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.321414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.332292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.340796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.349278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.357533][ T4191] device veth0_vlan entered promiscuous mode [ 59.380843][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.393309][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.404704][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.419719][ T4191] device veth1_vlan entered promiscuous mode [ 59.439013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.455021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.471552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.481548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.497875][ T4293] overlayfs: overlapping lowerdir path [ 59.509596][ T4184] device veth1_macvtap entered promiscuous mode [ 59.541127][ T4185] device veth0_macvtap entered promiscuous mode [ 59.552882][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.572065][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.586272][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.594013][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.602645][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.612236][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.621611][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.631021][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.650365][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.660253][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.672372][ T4185] device veth1_macvtap entered promiscuous mode [ 59.687743][ T4191] device veth0_macvtap entered promiscuous mode [ 59.697688][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.709639][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.719825][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.729186][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.755461][ T4191] device veth1_macvtap entered promiscuous mode [ 59.765918][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.777030][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.787176][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.798615][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.809850][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.830535][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.842313][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.852238][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.862677][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.872576][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.883045][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.895959][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.903692][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.911406][ T4291] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.913686][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.928020][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.938439][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.947423][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.957770][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.966549][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.979121][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.991172][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.001178][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.012837][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.024091][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.042764][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.053437][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.054920][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 60.065534][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.075553][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 60.080263][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.090668][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 60.097215][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.112123][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.122262][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.132916][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.143333][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 60.148011][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.149904][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 60.166494][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.177358][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.187304][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.197837][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.210240][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.221660][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.232684][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.240216][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.249277][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.258005][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.267478][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.277564][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.286148][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.294947][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 60.306312][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.309095][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.328100][ T4291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.337703][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.337766][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.351315][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.360377][ T4291] usb 2-1: config 0 descriptor?? [ 60.368332][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.387397][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.395615][ T4295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.402544][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.416289][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.419478][ T4291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 60.431635][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.450141][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.460784][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.471012][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.481709][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.492969][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.503088][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.512753][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.521985][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.530763][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.554307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.563777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.592839][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.602474][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.611419][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.630468][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.720772][ T894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.729959][ T894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.749422][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.758017][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.800701][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.804737][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.811541][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.820029][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.833909][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.882969][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.892001][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.893399][ T894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.905990][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.919750][ T894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.931458][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.003798][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.003973][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.030273][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.050367][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.099056][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.106056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.111847][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.111892][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.112748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.372561][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.384206][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.394207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.404211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.414205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.421988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.424195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.427791][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.431576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.431656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.431770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.735398][ T4315] process 'syz.2.3' launched '/dev/fd/-1' with NULL argv: empty string added [ 62.040421][ T4314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.833531][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 62.834066][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 62.834709][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 62.835332][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 62.835748][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 62.893481][ T4248] usb 2-1: USB disconnect, device number 2 [ 63.181631][ T4304] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.289051][ T4309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 64.747349][ T4338] Zero length message leads to an empty skb [ 65.792301][ T4340] block device autoloading is deprecated and will be removed. [ 66.713862][ T4354] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 67.212911][ T4358] dlm: dev_write: no op 0 0 [ 67.319387][ T4354] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.677482][ T4393] ax25_connect(): syz.4.26 uses autobind, please contact jreuter@yaina.de [ 71.019179][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.025993][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.014270][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.274279][ T4265] usb 4-1: Using ep0 maxpacket: 8 [ 72.357947][ T4442] overlayfs: overlapping lowerdir path [ 73.236209][ T4265] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 73.276377][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.294682][ T4265] usb 4-1: Product: syz [ 73.298982][ T4265] usb 4-1: Manufacturer: syz [ 73.303623][ T4265] usb 4-1: SerialNumber: syz [ 73.323922][ T4265] usb 4-1: config 0 descriptor?? [ 73.366058][ T4265] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 74.115092][ T4265] gspca_sonixj: reg_r err -110 [ 74.119956][ T4265] sonixj: probe of 4-1:0.0 failed with error -110 [ 74.304928][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 76.058431][ T4487] overlayfs: overlapping lowerdir path [ 76.064193][ T1110] usb 4-1: USB disconnect, device number 2 [ 76.252107][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 76.296760][ T4503] 9pnet: Insufficient options for proto=fd [ 76.534295][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.575435][ T4291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.874331][ T4291] usb 3-1: Using ep0 maxpacket: 32 [ 77.164268][ T4265] usb 1-1: Using ep0 maxpacket: 32 [ 77.214512][ T4291] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 77.232053][ T1236] block nbd1: Attempted send on invalid socket [ 77.239142][ T1236] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.264375][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.264930][ T150] block nbd1: Attempted send on invalid socket [ 77.278709][ T150] blk_update_request: I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.289930][ T4265] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 77.300543][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 77.314221][ T150] block nbd1: Attempted send on invalid socket [ 77.320464][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.352109][ T4543] overlayfs: overlapping lowerdir path [ 77.353761][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 77.378225][ T4291] usb 3-1: Product: syz [ 77.385873][ T150] block nbd1: Attempted send on invalid socket [ 77.392053][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.403694][ T150] block nbd1: Attempted send on invalid socket [ 77.409918][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.423600][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 77.449346][ T150] block nbd1: Attempted send on invalid socket [ 77.455700][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.456070][ T4291] usb 3-1: Manufacturer: syz [ 77.467096][ T4265] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 77.480748][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 77.493647][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.501898][ T4265] usb 1-1: Product: syz [ 77.506185][ T4265] usb 1-1: Manufacturer: syz [ 77.510804][ T4265] usb 1-1: SerialNumber: syz [ 77.517658][ T4265] usb 1-1: config 0 descriptor?? [ 77.542591][ T4291] usb 3-1: SerialNumber: syz [ 77.555796][ T4265] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 77.563362][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 77.564965][ T4291] usb 3-1: config 0 descriptor?? [ 77.574372][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 77.587683][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 77.596261][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 77.604411][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 77.613202][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 77.622390][ T150] block nbd1: Attempted send on invalid socket [ 77.629486][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.644822][ T150] block nbd1: Attempted send on invalid socket [ 77.651007][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.662399][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 77.673076][ T4265] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 77.685729][ T4265] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 77.719433][ T1236] block nbd1: Attempted send on invalid socket [ 77.725743][ T1236] blk_update_request: I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.744534][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 77.760385][ T4265] usb 1-1: USB disconnect, device number 2 [ 77.768446][ T150] block nbd1: Attempted send on invalid socket [ 77.774666][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.799882][ T4291] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 77.802570][ T4265] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 77.862646][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 77.873243][ T4265] keyspan 1-1:0.0: device disconnected [ 77.931305][ T4540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 77.941220][ T4540] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 78.620716][ T4575] 9pnet: Insufficient options for proto=fd [ 78.837896][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 78.914138][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 79.142764][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 79.244392][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.494345][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 79.544256][ T4248] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.574329][ T4291] gspca_ov534_9: reg_r err -71 [ 79.622551][ T1110] usb 2-1: config 2 has an invalid interface number: 12 but max is 0 [ 79.646987][ T1110] usb 2-1: config 2 has no interface number 0 [ 79.653210][ T1110] usb 2-1: config 2 interface 12 has no altsetting 0 [ 79.660524][ T1110] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=1b.89 [ 79.669799][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.702179][ T4606] device netdevsim0 entered promiscuous mode [ 79.924294][ T4291] gspca_ov534_9: Unknown sensor 0000 [ 79.924376][ T4291] ov534_9: probe of 3-1:0.0 failed with error -22 [ 79.994325][ T1110] usb 2-1: string descriptor 0 read error: -71 [ 80.065393][ T4248] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 80.121700][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 80.230811][ T4248] usb 1-1: Product: syz [ 80.275808][ T4248] usb 1-1: SerialNumber: syz [ 80.395703][ T4248] usb 1-1: config 0 descriptor?? [ 80.764647][ T4248] ldusb 1-1:0.0: Interrupt in endpoint not found [ 80.784698][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.870641][ T4248] usb 1-1: USB disconnect, device number 3 [ 81.084374][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 81.214753][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.256472][ T1325] cfg80211: failed to load regulatory.db [ 81.310108][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.566060][ T4265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.784571][ T4265] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 81.910227][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.146629][ T4265] usb 4-1: config 0 descriptor?? [ 82.427816][ T1110] usb 2-1: USB disconnect, device number 3 [ 83.776941][ T4291] usb 3-1: USB disconnect, device number 2 [ 84.024726][ T4265] usbhid 4-1:0.0: can't add hid device: -71 [ 84.030991][ T4265] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.053079][ T4635] fuse: Bad value for 'fd' [ 84.203731][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 84.396911][ T4641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.91'. [ 84.852121][ T4265] usb 4-1: USB disconnect, device number 3 [ 85.796154][ T1325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.841881][ T4664] Unknown options in mask 5 [ 86.295096][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 86.554448][ T1325] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 86.583186][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.660794][ T1325] usb 1-1: config 0 descriptor?? [ 86.925792][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 87.526962][ T4681] fuse: Bad value for 'fd' [ 87.809140][ T1325] lenovo 0003:17EF:6067.0001: unknown main item tag 0x0 [ 88.267694][ T1325] lenovo 0003:17EF:6067.0001: item fetching failed at offset 3/5 [ 88.276447][ T1325] lenovo 0003:17EF:6067.0001: hid_parse failed [ 88.282647][ T1325] lenovo: probe of 0003:17EF:6067.0001 failed with error -22 [ 88.293976][ T1325] usb 1-1: USB disconnect, device number 4 [ 89.070875][ T4688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 89.556264][ T4685] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.936313][ T4724] fuse: Unknown parameter 'group_i00000000000000000000' [ 92.000373][ T4724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.120'. [ 94.473075][ T4749] tipc: Enabling of bearer rejected, failed to enable media [ 95.961286][ T4766] fuse: Bad value for 'fd' [ 99.434239][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.874283][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 100.253872][ T1236] nbd_handle_cmd: 2 callbacks suppressed [ 100.253928][ T1236] block nbd3: Attempted send on invalid socket [ 100.267543][ T1236] print_req_error: 2 callbacks suppressed [ 100.267573][ T1236] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 100.286827][ T1236] gfs2: error 10 reading superblock [ 100.944522][ T4233] usb 5-1: unable to read config index 0 descriptor/all [ 100.951740][ T4233] usb 5-1: can't read configurations, error -71 [ 101.909708][ T4832] fuse: Unknown parameter 'fd0x0000000000000003' [ 107.661932][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 107.769176][ T4910] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[4910] [ 108.784326][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.345155][ T1107] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 109.442678][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.647898][ T1107] usb 2-1: config 0 has no interface number 0 [ 109.861900][ T1107] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 109.874671][ T1107] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.902142][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 110.070322][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.194239][ T4291] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.495653][ T1110] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 110.505701][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 110.589139][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.684890][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.750531][ T1110] usb 1-1: config 0 descriptor?? [ 110.759336][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.782938][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.814192][ T4291] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.840547][ T1107] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 110.850165][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.858830][ T1107] usb 2-1: Product: syz [ 110.863035][ T1107] usb 2-1: Manufacturer: syz [ 110.867753][ T1107] usb 2-1: SerialNumber: syz [ 110.868100][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.888908][ T1107] usb 2-1: config 0 descriptor?? [ 110.905212][ T4291] usb 5-1: config 0 descriptor?? [ 111.204461][ T4195] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 111.275018][ T4291] usbhid 5-1:0.0: can't add hid device: -71 [ 111.294696][ T1110] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 111.305436][ T4291] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.317714][ T1110] hackrf 1-1:0.0: Could not detect board [ 111.343673][ T1110] hackrf: probe of 1-1:0.0 failed with error -71 [ 111.385700][ T4291] usb 5-1: USB disconnect, device number 4 [ 111.451186][ T1110] usb 1-1: USB disconnect, device number 5 [ 111.574982][ T4195] usb 4-1: config 8 has an invalid interface number: 139 but max is 1 [ 111.590591][ T4195] usb 4-1: config 8 has no interface number 1 [ 111.743476][ T4195] usb 4-1: config 8 interface 139 has no altsetting 0 [ 111.878762][ T4195] usb 4-1: config 8 interface 0 has no altsetting 0 [ 111.887476][ T1107] usb 2-1: USB disconnect, device number 4 [ 112.080671][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 112.124421][ T4195] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=1b.34 [ 112.137866][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.148639][ T4195] usb 4-1: Product: syz [ 112.152911][ T4195] usb 4-1: Manufacturer: syz [ 112.161013][ T4195] usb 4-1: SerialNumber: syz [ 112.242214][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.198'. [ 112.259307][ T4961] netlink: 'syz.0.198': attribute type 7 has an invalid length. [ 112.267621][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 112.281039][ T4961] device erspan0 entered promiscuous mode [ 112.291278][ T4961] device batadv_slave_1 entered promiscuous mode [ 112.308380][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 113.345735][ T4195] ati_remote_probe: Unexpected endpoint_in [ 113.434099][ T4195] ati_remote_probe: Unexpected desc.bNumEndpoints [ 113.971146][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062283000: rx timeout, send abort [ 113.981174][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062283000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.995741][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062283800: rx timeout, send abort [ 114.003981][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062282800: rx timeout, send abort [ 114.434567][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062282800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.449198][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062283800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.522187][ T4195] usb 4-1: USB disconnect, device number 4 [ 114.729852][ T4991] comedi comedi0: fl512: I/O port conflict (0x1,16) [ 115.084286][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.444714][ T13] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 115.488660][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.649567][ T13] usb 3-1: config 0 descriptor?? [ 116.076536][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 116.225252][ T13] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 116.241230][ T13] hackrf 3-1:0.0: Could not detect board [ 116.287085][ T13] hackrf: probe of 3-1:0.0 failed with error -71 [ 116.449217][ T13] usb 3-1: USB disconnect, device number 3 [ 117.274236][ T4195] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.594330][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f632800: rx timeout, send abort [ 118.602676][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f632800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.617147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f630400: rx timeout, send abort [ 118.625441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f607400: rx timeout, send abort [ 118.634630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f607400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.649087][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f630400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.454284][ T4195] usb 5-1: Using ep0 maxpacket: 8 [ 119.678406][ T4195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.688723][ T4195] usb 5-1: config 0 has no interfaces? [ 119.694617][ T4195] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 119.703753][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.715425][ T4195] usb 5-1: config 0 descriptor?? [ 119.969326][ T4195] usb 5-1: USB disconnect, device number 5 [ 120.071833][ T5037] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 120.292023][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.359789][ T5037] team0: Port device bond0 added [ 120.377033][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 120.664246][ T4195] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.670163][ T5037] syz.0.223 (5037) used greatest stack depth: 20256 bytes left [ 123.204330][ T4195] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 123.213385][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.277009][ T4195] usb 3-1: config 0 descriptor?? [ 123.494988][ T4195] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 123.529179][ T4195] hackrf 3-1:0.0: Could not detect board [ 124.210231][ T4195] hackrf: probe of 3-1:0.0 failed with error -71 [ 124.303906][ T4195] usb 3-1: USB disconnect, device number 4 [ 124.314729][ T5084] vivid-003: disconnect [ 124.427464][ T5084] capability: warning: `syz.4.239' uses deprecated v2 capabilities in a way that may be insecure [ 124.447479][ T5083] vivid-003: reconnect [ 125.682508][ T5096] fuse: Bad value for 'fd' [ 126.237013][ T26] audit: type=1326 audit(1751961553.495:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.0.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3d4c7929 code=0x0 [ 126.645249][ T5107] fuse: Bad value for 'rootmode' [ 127.314417][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.843107][ T4316] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 127.858393][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.907568][ T4316] usb 2-1: config 0 descriptor?? [ 128.814353][ T4316] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 128.824710][ T4316] hackrf 2-1:0.0: Could not detect board [ 128.843902][ T4316] hackrf: probe of 2-1:0.0 failed with error -71 [ 129.910014][ T4316] usb 2-1: USB disconnect, device number 5 [ 131.850726][ T5154] fuse: Unknown parameter 'use00000000000000000000' [ 132.456039][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.462365][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.623406][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 132.734088][ T894] nci: nci_ntf_packet: unknown ntf opcode 0x92b [ 133.564609][ T4316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.985390][ T4316] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 133.995319][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.044389][ T4316] usb 2-1: config 0 descriptor?? [ 134.278233][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 134.296589][ T5180] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.305954][ T5180] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.314712][ T5180] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.323508][ T5180] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.544357][ T4316] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 134.551888][ T4316] hackrf 2-1:0.0: Could not detect board [ 135.204533][ T4316] hackrf: probe of 2-1:0.0 failed with error -71 [ 135.212918][ T4316] usb 2-1: USB disconnect, device number 6 [ 135.255152][ T5178] sctp: [Deprecated]: syz.3.268 (pid 5178) Use of int in max_burst socket option deprecated. [ 135.255152][ T5178] Use struct sctp_assoc_value instead [ 135.502583][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 136.466933][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 136.470965][ T5205] fuse: Unknown parameter 'use00000000000000000000' [ 138.843816][ T5234] mkiss: ax0: crc mode is auto. [ 138.974103][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 139.048072][ T5236] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.048072][ T5236] program syz.3.283 not setting count and/or reply_len properly [ 139.144395][ T4265] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.534915][ T4265] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 139.577730][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.651825][ T4265] usb 5-1: config 0 descriptor?? [ 139.911854][ T5247] fuse: Unknown parameter 'use00000000000000000000' [ 140.767579][ T4265] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 140.795295][ T4265] hackrf 5-1:0.0: Could not detect board [ 140.801224][ T4265] hackrf: probe of 5-1:0.0 failed with error -71 [ 140.810988][ T4265] usb 5-1: USB disconnect, device number 6 [ 142.117917][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 142.194059][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880272b2800: rx timeout, send abort [ 142.230375][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880272b2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.244778][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880272b0c00: rx timeout, send abort [ 142.253027][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023422000: rx timeout, send abort [ 142.290124][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023422000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.304577][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880272b0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.823779][ T5291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.112915][ T5296] fuse: Unknown parameter 'user_i00000000000000000000' [ 145.939097][ T1325] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.594376][ T1325] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 147.199976][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.214757][ T1325] usb 5-1: config 0 descriptor?? [ 147.954689][ T1325] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 147.974110][ T1325] hackrf 5-1:0.0: Could not detect board [ 147.984800][ T1325] hackrf: probe of 5-1:0.0 failed with error -71 [ 148.043087][ T1325] usb 5-1: USB disconnect, device number 7 [ 149.928525][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025828c00: rx timeout, send abort [ 149.937511][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025828c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.951944][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025828000: rx timeout, send abort [ 149.960197][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025829000: rx timeout, send abort [ 149.969450][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025829000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.983940][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025828000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.112487][ T5341] fuse: Unknown parameter 'user_i00000000000000000000' [ 153.260066][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 153.544560][ T5364] comedi comedi0: Minor 14 could not be opened [ 154.234214][ T4291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.022320][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023761c00: rx timeout, send abort [ 156.197089][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023761c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.211635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023762400: rx timeout, send abort [ 156.219896][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060d29c00: rx timeout, send abort [ 156.782035][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060d29c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.796572][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023762400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.908857][ T4291] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 156.934480][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.152196][ T4291] usb 4-1: config 0 descriptor?? [ 157.174416][ T4291] usb 4-1: can't set config #0, error -71 [ 157.291339][ T4291] usb 4-1: USB disconnect, device number 5 [ 157.621175][ T5410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 158.410576][ T5423] netlink: 76 bytes leftover after parsing attributes in process `syz.0.350'. [ 160.029345][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 160.474363][ T4291] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.934813][ T4291] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 160.983887][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.001303][ T4291] usb 1-1: config 0 descriptor?? [ 161.974371][ T4291] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 161.981541][ T4291] hackrf 1-1:0.0: Could not detect board [ 162.078839][ T4291] hackrf: probe of 1-1:0.0 failed with error -71 [ 162.110990][ T4291] usb 1-1: USB disconnect, device number 6 [ 162.301311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806175f400: rx timeout, send abort [ 162.310552][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806175f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.324917][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060d5ec00: rx timeout, send abort [ 162.333095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060d5f000: rx timeout, send abort [ 162.382081][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060d5f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.396535][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060d5ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.557639][ T3561] udevd[3561]: worker [4174] terminated by signal 33 (Unknown signal 33) [ 162.580940][ T3561] udevd[3561]: worker [4174] failed while handling '/devices/virtual/block/loop3' [ 162.593345][ T3561] udevd[3561]: worker [4613] terminated by signal 33 (Unknown signal 33) [ 162.607406][ T3561] udevd[3561]: worker [4613] failed while handling '/devices/virtual/block/loop0' [ 162.820612][ T5479] kvm: pic: non byte write [ 163.115419][ T3561] udevd[3561]: worker [4201] terminated by signal 33 (Unknown signal 33) [ 163.132467][ T3561] udevd[3561]: worker [4201] failed while handling '/devices/virtual/block/loop4' [ 165.017486][ T5514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 165.289565][ T5520] comedi comedi0: pcl730: a I/O base address must be specified [ 165.644322][ T4291] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.194220][ T4291] usb 5-1: Using ep0 maxpacket: 8 [ 166.215385][ T4679] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 166.231459][ T4679] Bluetooth: hci1: Injecting HCI hardware error event [ 166.239826][ T4193] Bluetooth: hci1: hardware error 0x00 [ 166.324524][ T4291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.350344][ T4291] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 166.370368][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.419079][ T4291] usb 5-1: config 0 descriptor?? [ 166.491537][ T4291] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 166.954301][ T4291] gspca_vc032x: reg_w err -71 [ 167.535015][ T4291] vc032x: probe of 5-1:0.0 failed with error -71 [ 167.542777][ T4291] usb 5-1: USB disconnect, device number 8 [ 167.766705][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df34400: rx timeout, send abort [ 167.775262][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807df34400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.789709][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024467800: rx timeout, send abort [ 167.797917][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024467c00: rx timeout, send abort [ 167.836507][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024467c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.850905][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024467800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.923991][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 170.619454][ T5571] loop4: detected capacity change from 0 to 7 [ 170.914322][ T5571] Dev loop4: unable to read RDB block 7 [ 170.920239][ T5571] loop4: AHDI p1 [ 170.923890][ T5571] loop4: partition table partially beyond EOD, truncated [ 173.349664][ T5601] program syz.1.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.385582][ T4679] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.431556][ T5602] program syz.1.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.479680][ T5602] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 173.797053][ T4679] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 174.614287][ T4679] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.644797][ T4679] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.776409][ T4679] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.822879][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 175.214474][ T4679] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.537141][ T4679] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.564861][ T4679] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.717049][ T4679] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.744302][ T4679] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.693595][ T5591] ODEBUG: Out of memory. ODEBUG disabled [ 176.704755][ T4679] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.274218][ T4679] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 177.281802][ T4679] usb 4-1: can't read configurations, error -71 [ 180.614383][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 180.620761][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 180.661326][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 180.695757][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 181.831459][ T5667] netlink: 'syz.3.409': attribute type 39 has an invalid length. [ 183.345585][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 184.324014][ T5689] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.418'. [ 187.298648][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 188.144385][ T5580] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 188.534335][ T5580] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 188.560901][ T5580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.608908][ T5580] usb 3-1: config 0 descriptor?? [ 188.688558][ T4353] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.840814][ T4353] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.950661][ T4353] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.304457][ T5580] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 189.304577][ T5580] hackrf 3-1:0.0: Could not detect board [ 189.304822][ T5580] hackrf: probe of 3-1:0.0 failed with error -71 [ 189.309670][ T5580] usb 3-1: USB disconnect, device number 5 [ 189.351854][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061268800: rx timeout, send abort [ 189.360195][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061268800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.374657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061269000: rx timeout, send abort [ 189.382883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061269800: rx timeout, send abort [ 189.523156][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061269800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.537550][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061269000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.585561][ T4353] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.567827][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 190.755156][ T5732] chnl_net:caif_netlink_parms(): no params data found [ 190.801644][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 190.959062][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.013109][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.059872][ T5732] device bridge_slave_0 entered promiscuous mode [ 191.110879][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.138184][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.169451][ T5732] device bridge_slave_1 entered promiscuous mode [ 191.304401][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.330501][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.363172][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 191.392528][ T5732] team0: Port device team_slave_0 added [ 191.402960][ T5732] team0: Port device team_slave_1 added [ 191.471078][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.489321][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.563974][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.728032][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.744168][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.770064][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.804142][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.967007][ T5768] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[5768] [ 192.051336][ T5732] device hsr_slave_0 entered promiscuous mode [ 192.069526][ T5732] device hsr_slave_1 entered promiscuous mode [ 192.091391][ T5732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.118820][ T5732] Cannot create hsr debugfs directory [ 192.966273][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 194.110452][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.127176][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.299847][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.455570][ T5732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.486735][ T5732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.528833][ T5732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.569223][ T4353] device hsr_slave_0 left promiscuous mode [ 194.580906][ T4353] device hsr_slave_1 left promiscuous mode [ 194.593213][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.601365][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.623674][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.631604][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.644903][ T4353] device bridge_slave_1 left promiscuous mode [ 194.653251][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.699810][ T4353] device bridge_slave_0 left promiscuous mode [ 194.707730][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.790819][ T4353] device veth1_macvtap left promiscuous mode [ 194.812886][ T4353] device veth0_macvtap left promiscuous mode [ 194.835685][ T4353] device veth1_vlan left promiscuous mode [ 194.841896][ T4353] device veth0_vlan left promiscuous mode [ 194.864284][ T21] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 194.873488][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.909283][ T21] usb 4-1: config 0 descriptor?? [ 195.014450][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 195.394921][ T21] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 195.413445][ T21] hackrf 4-1:0.0: Could not detect board [ 195.448938][ T21] hackrf: probe of 4-1:0.0 failed with error -71 [ 195.481256][ T21] usb 4-1: USB disconnect, device number 8 [ 195.727326][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 195.770411][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 195.805441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fba6400: rx timeout, send abort [ 195.813882][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fba6400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.828256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fba5400: rx timeout, send abort [ 195.836522][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fba7c00: rx timeout, send abort [ 195.849551][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.865440][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.874389][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fba7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.888793][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fba5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.021873][ T4353] bond0 (unregistering): Released all slaves [ 196.096384][ T5732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.108921][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 196.295936][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.328084][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.343496][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.355287][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.374940][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.387293][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.400824][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.407927][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.439514][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.452086][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.475023][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.483504][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.490608][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.506476][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.525536][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.544034][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.592552][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.613200][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.674169][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.112294][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 197.131991][ T5732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.192701][ T5810] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[5810] [ 197.253591][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.386374][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.415431][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.424782][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.435081][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.449247][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.462318][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.726629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.746698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.772050][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.834311][ T4234] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.864604][ T1325] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.084237][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 198.304560][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.330699][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.341635][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.352967][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 198.367500][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.379600][ T4234] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 198.400983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.407935][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.420048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.423144][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.454851][ T1325] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.472317][ T4234] usb 1-1: config 0 descriptor?? [ 198.479327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.480730][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.497746][ T1325] usb 2-1: config 0 descriptor?? [ 198.506678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.521434][ T5732] device veth0_vlan entered promiscuous mode [ 198.528263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.547581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.570612][ T5732] device veth1_vlan entered promiscuous mode [ 198.612730][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.639620][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.653724][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.668444][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.681502][ T5732] device veth0_macvtap entered promiscuous mode [ 198.696379][ T5732] device veth1_macvtap entered promiscuous mode [ 198.731252][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.760569][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.775480][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.789876][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.802225][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.816494][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.829737][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.844105][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.862593][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.871373][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.885441][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.893575][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.907654][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.926795][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.968917][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.981582][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 198.994286][ T4234] asus 0003:0B05:1866.0002: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.0-1/input0 [ 199.007551][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 199.020779][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.033610][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 199.044725][ T4234] asus 0003:0B05:1866.0002: Asus input not registered [ 199.053037][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 199.065958][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.067789][ T4234] asus: probe of 0003:0B05:1866.0002 failed with error -12 [ 199.086917][ T1325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 199.099494][ T1325] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 199.104222][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.118005][ T1325] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 199.153952][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.167872][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.181964][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.195616][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.211910][ T5732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.241128][ T5732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.282061][ T1325] usb 1-1: USB disconnect, device number 7 [ 199.301807][ T5732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.350786][ T5732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.383620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.411258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.095323][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.108733][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.139887][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.153082][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.162136][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.172036][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.233492][ T1110] usb 2-1: USB disconnect, device number 7 [ 200.698654][ T5860] sp0: Synchronizing with TNC [ 200.720056][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722000: rx timeout, send abort [ 200.728529][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f722000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.742912][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f723400: rx timeout, send abort [ 200.751159][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f722c00: rx timeout, send abort [ 201.402239][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f722c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 201.416613][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f723400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 201.456117][ T5865] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[5865] [ 202.118510][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 202.814243][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.314666][ T1110] usb 6-1: Using ep0 maxpacket: 32 [ 203.499544][ T1110] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.519626][ T1110] usb 6-1: config 0 has no interface number 0 [ 203.704259][ T1110] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 204.430505][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.441537][ T1110] usb 6-1: Product: syz [ 204.446105][ T1110] usb 6-1: Manufacturer: syz [ 204.451101][ T1110] usb 6-1: SerialNumber: syz [ 204.466301][ T1110] usb 6-1: config 0 descriptor?? [ 204.505082][ T1110] smsc95xx v2.0.0 [ 204.513732][ T1110] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 204.535801][ T1110] smsc95xx: probe of 6-1:0.67 failed with error -22 [ 205.481640][ T4195] usb 6-1: USB disconnect, device number 2 [ 206.854731][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 208.299768][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f10c000: rx timeout, send abort [ 208.308446][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f10c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 208.322961][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f10cc00: rx timeout, send abort [ 208.331297][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f10f800: rx timeout, send abort [ 208.484352][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f10f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 208.498825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f10cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.794356][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 212.878828][ T5954] bridge0: port 3(team0) entered blocking state [ 212.885391][ T5954] bridge0: port 3(team0) entered disabled state [ 212.903151][ T5954] device team0 entered promiscuous mode [ 212.908807][ T5954] device team_slave_0 entered promiscuous mode [ 212.916180][ T5954] device team_slave_1 entered promiscuous mode [ 212.926448][ T5954] bridge0: port 3(team0) entered blocking state [ 212.932951][ T5954] bridge0: port 3(team0) entered forwarding state [ 213.579047][ T5961] ptrace attach of "./syz-executor exec"[5732] was attempted by "./syz-executor exec"[5961] [ 213.712661][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 215.254308][ T5580] Bluetooth: hci1: command 0x0405 tx timeout [ 216.142795][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e43f000: rx timeout, send abort [ 216.834186][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e43f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.848871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e43e800: rx timeout, send abort [ 216.857150][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e43e000: rx timeout, send abort [ 216.867461][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e43e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.881836][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e43e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.644228][ T1325] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.674822][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 220.334167][ T1325] usb 4-1: device descriptor read/64, error -71 [ 220.604297][ T1325] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.814401][ T1325] usb 4-1: device descriptor read/64, error -71 [ 220.971492][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 221.007227][ T1325] usb usb4-port1: attempt power cycle [ 222.639779][ T1325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 222.884591][ T1325] usb 4-1: device not accepting address 11, error -71 [ 223.450475][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 223.784209][ T1325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 224.024559][ T1325] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 224.056933][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.151967][ T1325] usb 4-1: config 0 descriptor?? [ 224.245716][ T1325] gspca_main: spca508-2.14.0 probing 8086:0110 [ 224.471684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4ce000: rx timeout, send abort [ 224.480204][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4ce000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.494607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4cec00: rx timeout, send abort [ 224.502852][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4cd400: rx timeout, send abort [ 224.608178][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4cd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.622656][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4cec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.686348][ T1325] gspca_spca508: reg_read err -32 [ 224.764537][ T1325] gspca_spca508: reg_read err -71 [ 224.822064][ T1325] gspca_spca508: reg_read err -71 [ 224.900252][ T1325] gspca_spca508: reg_read err -71 [ 225.019059][ T1325] gspca_spca508: reg write: error -71 [ 225.068268][ T1325] spca508: probe of 4-1:0.0 failed with error -71 [ 225.169411][ T1325] usb 4-1: USB disconnect, device number 12 [ 225.990671][ T6055] ptrace attach of "./syz-executor exec"[5732] was attempted by "./syz-executor exec"[6055] [ 226.391628][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 226.524177][ T5580] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 226.714186][ T5580] usb 3-1: device descriptor read/64, error -71 [ 226.984177][ T5580] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.114259][ T5580] usb 3-1: device descriptor read/64, error -71 [ 229.365421][ T5580] usb usb3-port1: attempt power cycle [ 231.018875][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'. [ 233.499189][ T4195] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.094184][ T4195] usb 2-1: device descriptor read/64, error -71 [ 234.394643][ T4195] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.544523][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.701506][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9fdc00: rx timeout, send abort [ 234.709800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9fd800: rx timeout, send abort [ 234.718029][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9fec00: rx timeout, send abort [ 234.728478][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f9fdc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.743177][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f9fec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.757624][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f9fd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.014362][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 235.034353][ T4195] usb 2-1: device descriptor read/64, error -71 [ 235.069849][ T1107] usb 3-1: no configurations [ 235.074808][ T1107] usb 3-1: can't read configurations, error -22 [ 235.244193][ T1107] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.291630][ T4195] usb usb2-port1: attempt power cycle [ 235.814420][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 235.885332][ T1107] usb 3-1: no configurations [ 235.892884][ T1107] usb 3-1: can't read configurations, error -22 [ 236.354881][ T1107] usb usb3-port1: attempt power cycle [ 236.593820][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 237.084190][ T1107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 237.184344][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 237.224438][ T1107] usb 3-1: no configurations [ 237.229176][ T1107] usb 3-1: can't read configurations, error -22 [ 239.913133][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.563'. [ 240.935357][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.568'. [ 241.392988][ T1110] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.695212][ T1110] usb 4-1: device descriptor read/64, error -71 [ 243.796617][ T1110] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.083358][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 248.685810][ T4234] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.114240][ T4234] usb 2-1: device descriptor read/64, error -71 [ 249.484285][ T4234] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.214179][ T1110] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.224361][ T5580] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.332842][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 253.955434][ T1110] usb 6-1: device descriptor read/all, error -71 [ 254.509800][ T1110] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.744385][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 256.897798][ T1110] usb 6-1: device descriptor read/64, error -71 [ 256.900014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.910869][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.554368][ T1110] usb usb6-port1: attempt power cycle [ 261.362772][ C1] ================================================================== [ 261.371200][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 261.378667][ C1] Read of size 2 at addr ffff88801dcc442a by task ksoftirqd/1/20 [ 261.386378][ C1] [ 261.388692][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.186-syzkaller #0 [ 261.396743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.406804][ C1] Call Trace: [ 261.410076][ C1] [ 261.412995][ C1] dump_stack_lvl+0x168/0x230 [ 261.417668][ C1] ? show_regs_print_info+0x20/0x20 [ 261.422858][ C1] ? _printk+0xcc/0x110 [ 261.427017][ C1] ? rose_timer_expiry+0x470/0x490 [ 261.432147][ C1] ? load_image+0x3b0/0x3b0 [ 261.436656][ C1] print_address_description+0x60/0x2d0 [ 261.442197][ C1] ? rose_timer_expiry+0x470/0x490 [ 261.447297][ C1] kasan_report+0xdf/0x130 [ 261.451710][ C1] ? rose_timer_expiry+0x470/0x490 [ 261.456836][ C1] rose_timer_expiry+0x470/0x490 [ 261.461774][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 261.466811][ C1] call_timer_fn+0x16c/0x530 [ 261.471398][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 261.476421][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 261.482415][ C1] ? __run_timers+0x7c0/0x7c0 [ 261.487093][ C1] ? rcu_is_watching+0x11/0xa0 [ 261.491848][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 261.497044][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 261.502232][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 261.507247][ C1] __run_timers+0x525/0x7c0 [ 261.511749][ C1] ? detach_timer+0x2b0/0x2b0 [ 261.516416][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 261.522396][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 261.527245][ C1] run_timer_softirq+0x63/0xf0 [ 261.531999][ C1] handle_softirqs+0x328/0x820 [ 261.536752][ C1] ? run_ksoftirqd+0x98/0xf0 [ 261.541334][ C1] ? do_softirq+0x200/0x200 [ 261.545822][ C1] ? run_ksoftirqd+0x75/0xf0 [ 261.550402][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.555582][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 261.560857][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.566045][ C1] run_ksoftirqd+0x98/0xf0 [ 261.570452][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.575638][ C1] smpboot_thread_fn+0x4f6/0x970 [ 261.580570][ C1] kthread+0x436/0x520 [ 261.584618][ C1] ? cpu_report_death+0x180/0x180 [ 261.589627][ C1] ? kthread_blkcg+0xd0/0xd0 [ 261.594202][ C1] ret_from_fork+0x1f/0x30 [ 261.598622][ C1] [ 261.601628][ C1] [ 261.603954][ C1] Allocated by task 4303: [ 261.608260][ C1] __kasan_kmalloc+0xb5/0xf0 [ 261.612839][ C1] batadv_forw_packet_alloc+0x1e5/0x380 [ 261.618380][ C1] batadv_iv_ogm_queue_add+0x77b/0xcf0 [ 261.623827][ C1] batadv_iv_ogm_schedule+0xacc/0xe90 [ 261.629189][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 261.636198][ C1] process_one_work+0x863/0x1000 [ 261.641124][ C1] worker_thread+0xaa8/0x12a0 [ 261.645787][ C1] kthread+0x436/0x520 [ 261.649843][ C1] ret_from_fork+0x1f/0x30 [ 261.654244][ C1] [ 261.656551][ C1] Freed by task 144: [ 261.660428][ C1] kasan_set_track+0x4b/0x70 [ 261.665001][ C1] kasan_set_free_info+0x1f/0x40 [ 261.669922][ C1] ____kasan_slab_free+0xd5/0x110 [ 261.674937][ C1] slab_free_freelist_hook+0xea/0x170 [ 261.680297][ C1] kfree+0xef/0x2a0 [ 261.684100][ C1] process_one_work+0x863/0x1000 [ 261.689041][ C1] worker_thread+0xaa8/0x12a0 [ 261.693700][ C1] kthread+0x436/0x520 [ 261.697763][ C1] ret_from_fork+0x1f/0x30 [ 261.702180][ C1] [ 261.704488][ C1] Last potentially related work creation: [ 261.710182][ C1] kasan_save_stack+0x35/0x60 [ 261.714843][ C1] kasan_record_aux_stack+0xb8/0x100 [ 261.720114][ C1] insert_work+0x54/0x3d0 [ 261.724424][ C1] __queue_work+0x9c5/0xd50 [ 261.728910][ C1] call_timer_fn+0x16c/0x530 [ 261.733481][ C1] __run_timers+0x550/0x7c0 [ 261.737968][ C1] run_timer_softirq+0x63/0xf0 [ 261.742714][ C1] handle_softirqs+0x328/0x820 [ 261.747457][ C1] __irq_exit_rcu+0x12f/0x220 [ 261.752117][ C1] irq_exit_rcu+0x5/0x20 [ 261.756360][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 261.761984][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 261.767951][ C1] [ 261.770256][ C1] The buggy address belongs to the object at ffff88801dcc4400 [ 261.770256][ C1] which belongs to the cache kmalloc-512 of size 512 [ 261.784287][ C1] The buggy address is located 42 bytes inside of [ 261.784287][ C1] 512-byte region [ffff88801dcc4400, ffff88801dcc4600) [ 261.797453][ C1] The buggy address belongs to the page: [ 261.803072][ C1] page:ffffea0000773100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1dcc4 [ 261.813202][ C1] head:ffffea0000773100 order:2 compound_mapcount:0 compound_pincount:0 [ 261.821505][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 261.829473][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 261.838044][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 261.846608][ C1] page dumped because: kasan: bad access detected [ 261.853001][ C1] page_owner tracks the page as allocated [ 261.858695][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 347, ts 6817774971, free_ts 6743407226 [ 261.877510][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 261.883063][ C1] __alloc_pages+0x1e1/0x470 [ 261.887657][ C1] new_slab+0xc0/0x4b0 [ 261.891708][ C1] ___slab_alloc+0x81e/0xdf0 [ 261.896279][ C1] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 261.901639][ C1] alloc_bprm+0x56/0x6a0 [ 261.905868][ C1] kernel_execve+0x49/0x900 [ 261.910378][ C1] call_usermodehelper_exec_async+0x207/0x350 [ 261.916429][ C1] ret_from_fork+0x1f/0x30 [ 261.920832][ C1] page last free stack trace: [ 261.925485][ C1] free_unref_page_prepare+0x637/0x6c0 [ 261.930926][ C1] free_unref_page+0x94/0x280 [ 261.935588][ C1] stack_depot_save+0x418/0x440 [ 261.940422][ C1] __kasan_kmalloc+0xcc/0xf0 [ 261.944999][ C1] acpi_ut_initialize_buffer+0x14d/0x230 [ 261.950616][ C1] acpi_rs_create_aml_resources+0xf7/0x1b0 [ 261.956405][ C1] acpi_rs_set_srs_method_data+0x19e/0x340 [ 261.962198][ C1] acpi_pci_link_set+0x4fc/0xab0 [ 261.967126][ C1] acpi_pci_link_allocate_irq+0x815/0xd70 [ 261.972836][ C1] acpi_pci_irq_enable+0x248/0x760 [ 261.977934][ C1] do_pci_enable_device+0x2bf/0x510 [ 261.983119][ C1] pci_enable_device_flags+0x6ce/0x8d0 [ 261.988557][ C1] virtio_pci_probe+0x15a/0x2e0 [ 261.993393][ C1] pci_device_probe+0x4cc/0x840 [ 261.998232][ C1] really_probe+0x284/0xc80 [ 262.002718][ C1] __driver_probe_device+0x18c/0x330 [ 262.007991][ C1] [ 262.010307][ C1] Memory state around the buggy address: [ 262.015923][ C1] ffff88801dcc4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.023969][ C1] ffff88801dcc4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.032013][ C1] >ffff88801dcc4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.040058][ C1] ^ [ 262.045426][ C1] ffff88801dcc4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.053469][ C1] ffff88801dcc4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.061515][ C1] ================================================================== [ 262.069556][ C1] Disabling lock debugging due to kernel taint [ 262.075756][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 262.082937][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B 5.15.186-syzkaller #0 [ 262.092371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.102410][ C1] Call Trace: [ 262.105676][ C1] [ 262.108591][ C1] dump_stack_lvl+0x168/0x230 [ 262.113254][ C1] ? show_regs_print_info+0x20/0x20 [ 262.118433][ C1] ? load_image+0x3b0/0x3b0 [ 262.122927][ C1] panic+0x2c9/0x7f0 [ 262.126815][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 262.131312][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 262.137201][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 262.143077][ C1] ? _raw_spin_unlock+0x40/0x40 [ 262.147907][ C1] ? print_memory_metadata+0x314/0x400 [ 262.153456][ C1] ? rose_timer_expiry+0x470/0x490 [ 262.158656][ C1] check_panic_on_warn+0x80/0xa0 [ 262.163579][ C1] ? rose_timer_expiry+0x470/0x490 [ 262.168676][ C1] end_report+0x6d/0xf0 [ 262.172816][ C1] kasan_report+0x102/0x130 [ 262.177308][ C1] ? rose_timer_expiry+0x470/0x490 [ 262.182402][ C1] rose_timer_expiry+0x470/0x490 [ 262.187319][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 262.192331][ C1] call_timer_fn+0x16c/0x530 [ 262.196921][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 262.201962][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 262.207943][ C1] ? __run_timers+0x7c0/0x7c0 [ 262.212607][ C1] ? rcu_is_watching+0x11/0xa0 [ 262.217354][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 262.222541][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 262.227723][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 262.232734][ C1] __run_timers+0x525/0x7c0 [ 262.237225][ C1] ? detach_timer+0x2b0/0x2b0 [ 262.241890][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 262.247862][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 262.252697][ C1] run_timer_softirq+0x63/0xf0 [ 262.257444][ C1] handle_softirqs+0x328/0x820 [ 262.262193][ C1] ? run_ksoftirqd+0x98/0xf0 [ 262.266774][ C1] ? do_softirq+0x200/0x200 [ 262.271264][ C1] ? run_ksoftirqd+0x75/0xf0 [ 262.275835][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 262.281025][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 262.286311][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 262.291581][ C1] run_ksoftirqd+0x98/0xf0 [ 262.295980][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 262.301167][ C1] smpboot_thread_fn+0x4f6/0x970 [ 262.306094][ C1] kthread+0x436/0x520 [ 262.310148][ C1] ? cpu_report_death+0x180/0x180 [ 262.315151][ C1] ? kthread_blkcg+0xd0/0xd0 [ 262.319726][ C1] ret_from_fork+0x1f/0x30 [ 262.324139][ C1] [ 262.327441][ C1] Kernel Offset: disabled [ 262.331763][ C1] Rebooting in 86400 seconds..