last executing test programs: 20.903214635s ago: executing program 0 (id=268): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800004, 0x11, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0), 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x7, 0xd, 0x7, {{0x18, 0x4, 0x0, 0x26, 0x60, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0xc7, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2bf1}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xc9, 0x3, 0x0, [{@loopback, 0x50}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff651}, {@empty, 0x6}]}, @timestamp={0x44, 0x14, 0x31, 0x0, 0x5, [0x0, 0x1, 0x4, 0x9]}]}}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) inotify_init() mknod$loop(0x0, 0x800, 0x0) r4 = fanotify_init(0x20, 0x2) fanotify_mark(r4, 0x1, 0x40001008, 0xffffffffffffff9c, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c0000000060002", 0x1a, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c03209040000020806500007"], 0x0) 19.178460496s ago: executing program 3 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) mknodat(r0, &(0x7f00000000c0)='./bus\x00', 0x200, 0xfd68) 15.615359324s ago: executing program 2 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 15.545773418s ago: executing program 0 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x42, 0x6c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sed\x00', 0x10, 0x81, 0x40000077}, {@rand_addr=0x64010100, 0x4e21, 0x0, 0x6, 0x1002, 0x8}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r5, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 s', 0x35) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") 14.477589838s ago: executing program 2 (id=277): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) 12.463733463s ago: executing program 0 (id=281): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x4e9}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x8c03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x450842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETSW(r2, 0x5403, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x6, 0x5) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) close(r3) 11.430560581s ago: executing program 0 (id=282): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x2000003, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3ed, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11.412919322s ago: executing program 2 (id=284): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.100412697s ago: executing program 1 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 9.001731166s ago: executing program 3 (id=289): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0}) 9.001506926s ago: executing program 1 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x1, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 8.953093068s ago: executing program 2 (id=291): setresuid(0x0, 0xee00, 0x0) msgctl$IPC_RMID(0x0, 0x0) setreuid(0x0, 0xee00) 8.755540807s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0x9, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003440)=""/4096) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x4e20, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r3, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x8000000000001) 8.529700668s ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x42, 0x6c}, 0x2c) 5.866946153s ago: executing program 1 (id=296): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) r3 = socket(0x1, 0x3, 0xa) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x410, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2a0, 0x2e8, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x470) sendmsg$nl_route(r3, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x11) 4.773681245s ago: executing program 4 (id=297): socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 4.729701577s ago: executing program 2 (id=298): r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x20044060) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000080)) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) 4.490444528s ago: executing program 4 (id=299): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x20000) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000400)={0x3, 0x0, 0xffc00000, 0x4, 0xe, 0x7fff, "14c834b5bdf76ea13d1e250c0a3ef92f", 0xe8, 0xc, 0x1, 0x0, 0x8, 0x7f, 0xff}) 4.253869669s ago: executing program 3 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4, 0x7, 0xd7d) 4.229988601s ago: executing program 4 (id=301): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.182278493s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 3.969691323s ago: executing program 1 (id=303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.911323545s ago: executing program 4 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lchown(0x0, 0xee00, 0x0) 3.856028768s ago: executing program 3 (id=305): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) 2.75613021s ago: executing program 1 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x42, 0x6c}, 0x2c) 2.625764276s ago: executing program 4 (id=307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.55722977s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0x9, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003440)=""/4096) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x4e20, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r3, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x8000000000001) 499.085476ms ago: executing program 3 (id=309): socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 21.621859ms ago: executing program 4 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) geteuid() socketpair$unix(0x1, 0x2, 0x0, 0x0) msgrcv(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) 0s ago: executing program 0 (id=311): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) setns(0xc9, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.229378][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.238853][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. syzkaller login: [ 77.046260][ T4260] cgroup: Unknown subsys name 'net' [ 77.155835][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.659858][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.301577][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.310218][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.319011][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.337090][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.344610][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.359349][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.367030][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.376071][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.385133][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.393188][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.401122][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.408853][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.435860][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.443574][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.451628][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.459408][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.466707][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.471314][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.492085][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.499477][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.499878][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.516184][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.524093][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.531701][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.547076][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.561054][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.569091][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.576975][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.585135][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.592546][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.983768][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 81.049623][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 81.116046][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.181205][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 81.208011][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 81.270687][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.279011][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.287235][ T4278] device bridge_slave_0 entered promiscuous mode [ 81.300300][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.307462][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.315819][ T4278] device bridge_slave_1 entered promiscuous mode [ 81.370235][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.377402][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.386572][ T4285] device bridge_slave_0 entered promiscuous mode [ 81.425088][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.432647][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.441224][ T4285] device bridge_slave_1 entered promiscuous mode [ 81.453966][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.469814][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.476936][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.485877][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.505631][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.531467][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.538942][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.547188][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.584318][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.595445][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.603593][ T4277] device bridge_slave_0 entered promiscuous mode [ 81.618606][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.625707][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.634085][ T4283] device bridge_slave_0 entered promiscuous mode [ 81.645422][ T4278] team0: Port device team_slave_0 added [ 81.653610][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.669940][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.677093][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.685640][ T4277] device bridge_slave_1 entered promiscuous mode [ 81.696504][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.704092][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.712649][ T4283] device bridge_slave_1 entered promiscuous mode [ 81.721277][ T4278] team0: Port device team_slave_1 added [ 81.737023][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.748499][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.786236][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.798171][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.821926][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.834158][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.862642][ T4285] team0: Port device team_slave_0 added [ 81.873276][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.880369][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.906555][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.920556][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.945885][ T4285] team0: Port device team_slave_1 added [ 81.959236][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.966259][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.993334][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.022043][ T4283] team0: Port device team_slave_0 added [ 82.038002][ T4273] team0: Port device team_slave_0 added [ 82.065591][ T4283] team0: Port device team_slave_1 added [ 82.086840][ T4273] team0: Port device team_slave_1 added [ 82.098821][ T4277] team0: Port device team_slave_0 added [ 82.119022][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.126035][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.152516][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.176346][ T4277] team0: Port device team_slave_1 added [ 82.188365][ T4278] device hsr_slave_0 entered promiscuous mode [ 82.195317][ T4278] device hsr_slave_1 entered promiscuous mode [ 82.203611][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.211212][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.237544][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.256346][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.265927][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.292198][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.304324][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.311595][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.338629][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.372865][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.379967][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.409694][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.432310][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.440783][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.468083][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.483967][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.491499][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.518058][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.530186][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.537183][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.566903][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.578431][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 82.578613][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 82.590950][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 82.590971][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 82.647561][ T4283] device hsr_slave_0 entered promiscuous mode [ 82.655012][ T4283] device hsr_slave_1 entered promiscuous mode [ 82.661262][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 82.668657][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.676515][ T4283] Cannot create hsr debugfs directory [ 82.708541][ T4285] device hsr_slave_0 entered promiscuous mode [ 82.715475][ T4285] device hsr_slave_1 entered promiscuous mode [ 82.722422][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.730318][ T4285] Cannot create hsr debugfs directory [ 82.800596][ T4277] device hsr_slave_0 entered promiscuous mode [ 82.807559][ T4277] device hsr_slave_1 entered promiscuous mode [ 82.815092][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.823146][ T4277] Cannot create hsr debugfs directory [ 82.874581][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.881716][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.888686][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.896312][ T4273] Cannot create hsr debugfs directory [ 83.184119][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.209263][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.219618][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.238007][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.288553][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.298238][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.329582][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.341455][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.443004][ T4285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.463703][ T4285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.479664][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.495196][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.527159][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.539290][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.551494][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.586748][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.603173][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.621305][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.631627][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.643541][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.668448][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.678465][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.687870][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.695246][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.711483][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.721306][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.731633][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.743459][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.750789][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.760116][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.769631][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.794378][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.803839][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.831788][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.850498][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.861977][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.873056][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.883443][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.896694][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.905980][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.914988][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.924057][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.931316][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.939397][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.947514][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.967604][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.998921][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.008628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.017179][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.024363][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.033644][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.042295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.051550][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.061101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.073382][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.083583][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.096632][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.106276][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.118928][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.144849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.154536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.164398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.174319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.187431][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.196870][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.244354][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.268923][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.284952][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.294875][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.318485][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.334599][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.396664][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.418801][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.471679][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.501674][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.516926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.532857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.544273][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.551494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.581544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.593650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.603445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.613825][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.621027][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.635279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.645629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.649631][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 84.657523][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 84.659157][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 84.664915][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 84.686614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.710990][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.727970][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 84.760514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.779505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.803693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.819033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.834400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.843746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.860116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.874835][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.882068][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.895931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.904241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.918951][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.937532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.946920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.955727][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.962921][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.982390][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.991943][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.042276][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.050380][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.074707][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.086097][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.100155][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.112524][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.122334][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.156462][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.179885][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.196104][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.206400][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.216861][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.226122][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.234969][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.244232][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.253557][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.262840][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.276339][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.314883][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.328301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.338766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.347490][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.354899][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.365902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.377067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.386947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.395453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.404498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.413958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.423315][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.430524][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.441788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.450500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.460511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.496577][ T4283] device veth0_vlan entered promiscuous mode [ 85.510999][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.525193][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.535376][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.551541][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.564550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.575205][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.590036][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.616883][ T4283] device veth1_vlan entered promiscuous mode [ 85.692506][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.702854][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.721305][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.739053][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.767132][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.784226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.794680][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.816335][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.835097][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.878034][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.886364][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.899215][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.908661][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.917455][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.926809][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.974449][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.986358][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.010167][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.029127][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.048441][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.061567][ T4283] device veth0_macvtap entered promiscuous mode [ 86.100576][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.123587][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.135608][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.173724][ T4278] device veth0_vlan entered promiscuous mode [ 86.202107][ T4283] device veth1_macvtap entered promiscuous mode [ 86.220978][ T4278] device veth1_vlan entered promiscuous mode [ 86.278622][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.314805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.343756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.356636][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.380252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.400914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.421324][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.437751][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.446530][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.455969][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.476882][ T4278] device veth0_macvtap entered promiscuous mode [ 86.491296][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.500965][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.513278][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.522527][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.543960][ T4278] device veth1_macvtap entered promiscuous mode [ 86.560781][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.574319][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.600240][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.641995][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.651971][ T27] cfg80211: failed to load regulatory.db [ 86.678453][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.728196][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 86.728737][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 86.734285][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 86.740298][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 86.758920][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.787389][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.805215][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.815653][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 86.848256][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.878100][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.896743][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.919891][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.929920][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.939043][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.948247][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.959666][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.972275][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.997933][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006810][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.031221][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.074432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.088324][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.122167][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.142178][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.163056][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.254211][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.280379][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.290057][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.300934][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.310479][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.335493][ T4273] device veth0_vlan entered promiscuous mode [ 87.372862][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.388193][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.391057][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.438764][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.447538][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.535208][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.550433][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.564718][ T4273] device veth1_vlan entered promiscuous mode [ 87.599325][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.617772][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.626353][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.695401][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.718448][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.726689][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.749083][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.757222][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.834511][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.849889][ T4277] device veth0_vlan entered promiscuous mode [ 87.887027][ T4273] device veth0_macvtap entered promiscuous mode [ 88.045266][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.054304][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.067470][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.082308][ T4273] device veth1_macvtap entered promiscuous mode [ 88.165429][ T4363] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 88.804540][ T4285] device veth0_vlan entered promiscuous mode [ 88.818100][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 88.824257][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 88.830884][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 88.837248][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 88.874664][ T4285] device veth1_vlan entered promiscuous mode [ 88.889359][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 88.961968][ T4277] device veth1_vlan entered promiscuous mode [ 88.969377][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.977253][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.007392][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.023323][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.033652][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.046673][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.069220][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.092942][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.101661][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.117359][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.127039][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.149329][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.163772][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.173479][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.187978][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.196431][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.210224][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.224442][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.269875][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.284147][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.315305][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.331565][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.341844][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.352791][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.373667][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.462834][ T4285] device veth0_macvtap entered promiscuous mode [ 89.550049][ T4285] device veth1_macvtap entered promiscuous mode [ 89.742676][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.802385][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.898793][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.917823][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.937403][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.956445][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.975337][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.986087][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.003728][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.016525][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.033372][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.045809][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.062966][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.077188][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.094103][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.105901][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.118525][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.127370][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.231930][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.242755][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.252607][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.261547][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.276010][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.284429][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.352658][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.652178][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.707976][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.752640][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.182012][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213859][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.222718][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.231617][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.272321][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.288744][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.313436][ T4277] device veth0_macvtap entered promiscuous mode [ 91.370602][ T4376] jffs2: notice: (4376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.401963][ T4277] device veth1_macvtap entered promiscuous mode [ 91.504071][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.524748][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.536173][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.550165][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.560595][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.571827][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.583725][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.595679][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.623915][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.660222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.668659][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.676548][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.690613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.717551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.729306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.743326][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.756019][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.784977][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.795874][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.806855][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.819471][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.829690][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.846654][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.863503][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.892567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.917558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.959250][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.963242][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980987][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991855][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.992932][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.001691][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.079317][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.145511][ T4384] device syzkaller1 entered promiscuous mode [ 92.163259][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.175017][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.236223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.316538][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340114][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.382765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.455149][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.474994][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.546703][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.563781][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.595317][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.618178][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642169][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.701561][ T4428] jffs2: notice: (4428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.387763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 96.457757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 96.467734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 96.477732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 96.487733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 96.847715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 96.947712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 96.967711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.007711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 97.107713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 105.970349][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 107.921029][ T4514] Zero length message leads to an empty skb [ 107.981246][ T4515] ======================================================= [ 107.981246][ T4515] WARNING: The mand mount option has been deprecated and [ 107.981246][ T4515] and is ignored by this kernel. Remove the mand [ 107.981246][ T4515] option from the mount to silence this warning. [ 107.981246][ T4515] ======================================================= [ 108.032151][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 109.629815][ T4530] overlayfs: failed to resolve './file2': -2 [ 111.079517][ T4549] Illegal XDP return value 806723072 on prog (id 3) dev N/A, expect packet loss! [ 112.600559][ T4319] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.930880][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 113.714011][ T4319] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 113.747738][ T4319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 113.798748][ T4319] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 113.842842][ T4319] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 113.866787][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.893598][ T4319] usb 5-1: Product: syz [ 115.578356][ T4284] Bluetooth: hci2: command 0x2016 tx timeout [ 115.832507][ T4589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 116.267089][ T4319] usb 5-1: Manufacturer: syz [ 116.271943][ T4319] usb 5-1: SerialNumber: syz [ 116.285827][ T4319] usb 5-1: can't set config #1, error -71 [ 116.297636][ T4319] usb 5-1: USB disconnect, device number 2 [ 119.523439][ T4352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.623303][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 119.768097][ T4352] usb 1-1: Using ep0 maxpacket: 16 [ 119.779982][ T4352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.800646][ T4352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.891160][ T4352] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.007462][ T4352] usb 1-1: config 1 has no interface number 0 [ 120.084150][ T4352] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.690867][ T4352] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.779141][ T4352] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 120.818301][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.845874][ T4352] usb 1-1: Product: syz [ 120.874834][ T4352] usb 1-1: Manufacturer: syz [ 120.895393][ T4352] usb 1-1: SerialNumber: syz [ 125.534663][ T4352] usb 1-1: USB disconnect, device number 2 [ 125.830861][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.557504][ T4677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.82'. [ 131.573904][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 131.617782][ T4316] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.917875][ T4316] usb 5-1: device descriptor read/64, error -71 [ 132.607981][ T4316] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 132.731142][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.737943][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777774][ T4316] usb 5-1: device descriptor read/64, error -71 [ 132.897964][ T4316] usb usb5-port1: attempt power cycle [ 133.267774][ T4319] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.307843][ T4316] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 133.863740][ T4316] usb 5-1: device descriptor read/8, error -71 [ 134.133516][ T4319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.209541][ T4319] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 134.231766][ T4319] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 134.241230][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.251016][ T4319] usb 3-1: Product: syz [ 134.255494][ T4319] usb 3-1: Manufacturer: syz [ 135.081447][ T4316] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 135.096954][ T4319] usb 3-1: SerialNumber: syz [ 135.317821][ T4316] usb 5-1: device not accepting address 6, error -71 [ 135.544555][ T4316] usb usb5-port1: unable to enumerate USB device [ 136.260460][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 136.787927][ T4357] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.807512][ T4319] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 137.004450][ T4357] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 137.051783][ T4357] usb 4-1: config 1 has no interface number 0 [ 137.194046][ T4357] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 137.383673][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.547246][ T4357] usb 4-1: Product: syz [ 137.627289][ T4357] usb 4-1: Manufacturer: syz [ 137.641925][ T4319] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 137.657919][ T4357] usb 4-1: SerialNumber: syz [ 139.233930][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.328480][ T4319] usb 3-1: USB disconnect, device number 2 [ 139.364828][ T4357] usb 4-1: 3:0 : does not exist [ 139.369837][ T4357] usb 4-1: 3:0 : does not exist [ 139.534858][ T4357] usb 4-1: USB disconnect, device number 2 [ 140.391383][ T4790] overlayfs: failed to resolve './file2': -2 [ 144.537476][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 145.617842][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.880827][ T126] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 145.952912][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.065061][ T126] usb 2-1: Product: syz [ 146.122804][ T126] usb 2-1: Manufacturer: syz [ 146.196711][ T126] usb 2-1: SerialNumber: syz [ 146.232240][ T4810] sctp: failed to load transform for md5: -2 [ 146.406256][ T126] usb 2-1: config 0 descriptor?? [ 146.562074][ T126] hub 2-1:0.0: bad descriptor, ignoring hub [ 146.666759][ T126] hub: probe of 2-1:0.0 failed with error -5 [ 146.921449][ T126] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 147.394154][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.597421][ T126] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 147.815520][ T126] usb 2-1: media controller created [ 148.500593][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.175787][ T126] DVB: Unable to find symbol dib7000p_attach() [ 151.187403][ T126] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 151.835764][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 152.829127][ T126] rc_core: IR keymap rc-dib0700-rc5 not found [ 152.835285][ T126] Registered IR keymap rc-empty [ 152.845509][ T126] dvb-usb: could not initialize remote control. [ 152.906631][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 153.049953][ T4873] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 153.049953][ T4873] program syz.3.139 not setting count and/or reply_len properly [ 153.592156][ T126] usb 2-1: USB disconnect, device number 2 [ 153.620906][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 153.977921][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 154.169276][ T22] usb 1-1: device descriptor read/64, error -71 [ 156.337864][ T22] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 157.972773][ T4898] sched: RT throttling activated [ 159.157419][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 163.422310][ T4936] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 163.422310][ T4936] program syz.1.154 not setting count and/or reply_len properly [ 167.027747][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.731124][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 168.463743][ T22] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 168.534623][ T22] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 168.598615][ T22] usb 1-1: Product: syz [ 168.602914][ T22] usb 1-1: Manufacturer: syz [ 168.622452][ T22] usb 1-1: SerialNumber: syz [ 168.643440][ T22] usb 1-1: config 0 descriptor?? [ 169.925897][ T126] usb 1-1: USB disconnect, device number 5 [ 173.240691][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 174.255700][ T5012] FAULT_INJECTION: forcing a failure. [ 174.255700][ T5012] name failslab, interval 1, probability 0, space 0, times 1 [ 174.305220][ T5012] CPU: 0 PID: 5012 Comm: syz.4.175 Not tainted syzkaller #0 [ 174.312598][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.322723][ T5012] Call Trace: [ 174.326049][ T5012] [ 174.329018][ T5012] dump_stack_lvl+0x188/0x24e [ 174.333772][ T5012] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 174.339487][ T5012] ? show_regs_print_info+0x12/0x12 [ 174.344825][ T5012] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 174.350551][ T5012] should_fail_ex+0x390/0x4c0 [ 174.355291][ T5012] should_failslab+0x5/0x20 [ 174.359849][ T5012] slab_pre_alloc_hook+0x59/0x300 [ 174.364923][ T5012] ? __vmalloc_node_range+0x584/0x1380 [ 174.370435][ T5012] __kmem_cache_alloc_node+0x4f/0x270 [ 174.375864][ T5012] ? __vmalloc_node_range+0x584/0x1380 [ 174.381373][ T5012] __kmalloc_node+0xa2/0x240 [ 174.386020][ T5012] __vmalloc_node_range+0x584/0x1380 [ 174.391504][ T5012] ? free_vm_area+0x50/0x50 [ 174.396071][ T5012] ? __do_replace+0xb1/0x980 [ 174.400713][ T5012] vzalloc+0x75/0x80 [ 174.404656][ T5012] ? __do_replace+0xb1/0x980 [ 174.409296][ T5012] __do_replace+0xb1/0x980 [ 174.413754][ T5012] ? __virt_addr_valid+0x188/0x540 [ 174.418942][ T5012] ? translate_compat_table+0x2130/0x2130 [ 174.424724][ T5012] ? _copy_from_user+0x10b/0x170 [ 174.429730][ T5012] do_ip6t_set_ctl+0xb3d/0xe10 [ 174.434553][ T5012] ? nf_setsockopt+0x218/0x280 [ 174.439373][ T5012] ? ip6t_unregister_table_exit+0x230/0x230 [ 174.445350][ T5012] ? __lock_acquire+0x7c40/0x7c40 [ 174.450441][ T5012] ? trace_contention_end+0x5f/0x170 [ 174.455787][ T5012] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 174.461479][ T5012] ? mutex_unlock+0x10/0x10 [ 174.466049][ T5012] ? aa_af_perm+0x340/0x340 [ 174.470622][ T5012] nf_setsockopt+0x25f/0x280 [ 174.475275][ T5012] ? sock_common_recvmsg+0x190/0x190 [ 174.480618][ T5012] __sys_setsockopt+0x2bf/0x3d0 [ 174.485517][ T5012] __x64_sys_setsockopt+0xb1/0xc0 [ 174.490594][ T5012] do_syscall_64+0x4c/0xa0 [ 174.495052][ T5012] ? clear_bhb_loop+0x60/0xb0 [ 174.499776][ T5012] ? clear_bhb_loop+0x60/0xb0 [ 174.504495][ T5012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.510463][ T5012] RIP: 0033:0x7f23b319e159 [ 174.514940][ T5012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.534617][ T5012] RSP: 002b:00007f23b3fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.543113][ T5012] RAX: ffffffffffffffda RBX: 00007f23b3425fa0 RCX: 00007f23b319e159 [ 174.551142][ T5012] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 174.559191][ T5012] RBP: 00007f23b323506b R08: 0000000000000558 R09: 0000000000000000 [ 174.567216][ T5012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.575245][ T5012] R13: 00007f23b3426038 R14: 00007f23b3425fa0 R15: 00007fff673b16f8 [ 174.583292][ T5012] [ 176.822264][ T5044] FAULT_INJECTION: forcing a failure. [ 176.822264][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 176.956879][ T5044] CPU: 1 PID: 5044 Comm: syz.0.189 Not tainted syzkaller #0 [ 176.964278][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.974384][ T5044] Call Trace: [ 176.977712][ T5044] [ 176.980702][ T5044] dump_stack_lvl+0x188/0x24e [ 176.985430][ T5044] ? show_regs_print_info+0x12/0x12 [ 176.990694][ T5044] ? load_image+0x410/0x410 [ 176.995235][ T5044] ? __might_sleep+0xd0/0xd0 [ 176.999854][ T5044] ? __lock_acquire+0x7c40/0x7c40 [ 177.004924][ T5044] should_fail_ex+0x390/0x4c0 [ 177.009689][ T5044] should_failslab+0x5/0x20 [ 177.014221][ T5044] slab_pre_alloc_hook+0x59/0x300 [ 177.019305][ T5044] ? kvmalloc_node+0x6c/0x180 [ 177.024022][ T5044] __kmem_cache_alloc_node+0x4f/0x270 [ 177.029429][ T5044] ? kvmalloc_node+0x6c/0x180 [ 177.034149][ T5044] __kmalloc_node+0xa2/0x240 [ 177.038781][ T5044] kvmalloc_node+0x6c/0x180 [ 177.043343][ T5044] bpf_jit_binary_pack_alloc+0x1b5/0x400 [ 177.049002][ T5044] ? bpf_arch_text_copy+0x40/0x40 [ 177.054053][ T5044] ? bpf_jit_binary_free+0x60/0x60 [ 177.059186][ T5044] ? security_capable+0x85/0xb0 [ 177.064067][ T5044] bpf_int_jit_compile+0xb86d/0xcbe0 [ 177.069408][ T5044] ? slab_free_freelist_hook+0x133/0x1b0 [ 177.075138][ T5044] ? __kmem_cache_free+0xb6/0x200 [ 177.080225][ T5044] ? emit_bpf_dispatcher+0x1060/0x1060 [ 177.085734][ T5044] ? rcu_is_watching+0x11/0xa0 [ 177.090537][ T5044] bpf_prog_select_runtime+0x48b/0x7d0 [ 177.096028][ T5044] ? bpf_prog_realloc+0x142/0x1c0 [ 177.101103][ T5044] bpf_prepare_filter+0x100e/0x11b0 [ 177.106337][ T5044] ? seccomp_notify_detach+0x220/0x220 [ 177.111839][ T5044] ? bpf_prog_create+0x1f0/0x1f0 [ 177.116808][ T5044] ? rcu_is_watching+0x11/0xa0 [ 177.121633][ T5044] ? kmemdup+0x42/0x60 [ 177.125832][ T5044] ? memcpy+0x3c/0x60 [ 177.129850][ T5044] bpf_prog_create_from_user+0x2cc/0x420 [ 177.135514][ T5044] ? seccomp_notify_detach+0x220/0x220 [ 177.141007][ T5044] do_seccomp+0x806/0xe00 [ 177.145372][ T5044] ? prctl_set_seccomp+0x60/0x60 [ 177.150338][ T5044] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.156388][ T5044] ? lockdep_hardirqs_on+0x94/0x140 [ 177.161622][ T5044] do_syscall_64+0x4c/0xa0 [ 177.166069][ T5044] ? clear_bhb_loop+0x60/0xb0 [ 177.170769][ T5044] ? clear_bhb_loop+0x60/0xb0 [ 177.175483][ T5044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.181446][ T5044] RIP: 0033:0x7f10c499e159 [ 177.185885][ T5044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.205547][ T5044] RSP: 002b:00007f10c57a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 177.213993][ T5044] RAX: ffffffffffffffda RBX: 00007f10c4c25fa0 RCX: 00007f10c499e159 [ 177.222083][ T5044] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 177.230075][ T5044] RBP: 00007f10c4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 177.238067][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.246238][ T5044] R13: 00007f10c4c26038 R14: 00007f10c4c25fa0 R15: 00007ffd3c447908 [ 177.254253][ T5044] [ 180.947533][ T5085] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 180.975484][ T5085] CIFS: Attempting to mount \\127.0.0.1\share [ 180.983326][ T5085] CIFS: VFS: No username specified [ 182.969647][ T5098] FAULT_INJECTION: forcing a failure. [ 182.969647][ T5098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.036323][ T5098] CPU: 1 PID: 5098 Comm: syz.1.199 Not tainted syzkaller #0 [ 183.043666][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.053742][ T5098] Call Trace: [ 183.057034][ T5098] [ 183.059977][ T5098] dump_stack_lvl+0x188/0x24e [ 183.064675][ T5098] ? show_regs_print_info+0x12/0x12 [ 183.069884][ T5098] ? load_image+0x410/0x410 [ 183.074407][ T5098] ? __lock_acquire+0x7c40/0x7c40 [ 183.079471][ T5098] should_fail_ex+0x390/0x4c0 [ 183.084210][ T5098] _copy_to_user+0x2c/0x130 [ 183.088779][ T5098] __do_replace+0x825/0x980 [ 183.093307][ T5098] ? translate_compat_table+0x2130/0x2130 [ 183.099040][ T5098] ? _copy_from_user+0x10b/0x170 [ 183.103997][ T5098] do_ip6t_set_ctl+0xb3d/0xe10 [ 183.108794][ T5098] ? nf_setsockopt+0x218/0x280 [ 183.113595][ T5098] ? ip6t_unregister_table_exit+0x230/0x230 [ 183.119498][ T5098] ? __lock_acquire+0x7c40/0x7c40 [ 183.124539][ T5098] ? trace_contention_end+0x5f/0x170 [ 183.129862][ T5098] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 183.135549][ T5098] ? mutex_unlock+0x10/0x10 [ 183.140103][ T5098] ? aa_af_perm+0x340/0x340 [ 183.144645][ T5098] nf_setsockopt+0x25f/0x280 [ 183.149263][ T5098] ? sock_common_recvmsg+0x190/0x190 [ 183.154572][ T5098] __sys_setsockopt+0x2bf/0x3d0 [ 183.159440][ T5098] __x64_sys_setsockopt+0xb1/0xc0 [ 183.164478][ T5098] do_syscall_64+0x4c/0xa0 [ 183.168911][ T5098] ? clear_bhb_loop+0x60/0xb0 [ 183.173601][ T5098] ? clear_bhb_loop+0x60/0xb0 [ 183.178295][ T5098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.184245][ T5098] RIP: 0033:0x7f9fe599e159 [ 183.188673][ T5098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.208290][ T5098] RSP: 002b:00007f9fe6835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.216721][ T5098] RAX: ffffffffffffffda RBX: 00007f9fe5c25fa0 RCX: 00007f9fe599e159 [ 183.224714][ T5098] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 183.232696][ T5098] RBP: 00007f9fe5a3506b R08: 0000000000000558 R09: 0000000000000000 [ 183.240682][ T5098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.248686][ T5098] R13: 00007f9fe5c26038 R14: 00007f9fe5c25fa0 R15: 00007ffd6178db18 [ 183.256682][ T5098] [ 183.471979][ T5098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.558629][ T5095] kvm [5093]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x5400 [ 183.618517][ T5106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 186.302438][ T5124] xt_hashlimit: size too large, truncated to 1048576 [ 186.618055][ T5128] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 187.087910][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.287994][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 187.321642][ T14] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 187.351247][ T14] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 187.381736][ T14] usb 2-1: Product: syz [ 187.385992][ T14] usb 2-1: Manufacturer: syz [ 187.407774][ T14] usb 2-1: SerialNumber: syz [ 187.427385][ T14] usb 2-1: config 0 descriptor?? [ 187.749346][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 188.922193][ T4262] usb 2-1: USB disconnect, device number 3 [ 189.239925][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.630529][ T26] audit: type=1800 audit(1790030068.129:2): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 193.330406][ T5176] serio: Serial port ttyS3 [ 194.199638][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206033][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.670087][ T5165] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.679441][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.299144][ T5165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.376374][ T5165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.943080][ T5165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.952447][ T5165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.961455][ T5165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.970413][ T5165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.097444][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 198.772418][ T5218] input: syz0 as /devices/virtual/input/input6 [ 201.842529][ T5235] 9pnet_virtio: no channels available for device syz [ 202.594292][ T5238] tty tty4: ldisc open failed (-12), clearing slot 3 [ 202.706983][ T5235] overlayfs: failed to resolve './file0': -2 [ 205.542922][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 208.834963][ T5281] serio: Serial port ttyS3 [ 213.153755][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 216.948065][ T5172] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.482016][ T5172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.567738][ T5172] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.057886][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 220.103595][ T5172] usb 1-1: string descriptor 0 read error: -71 [ 220.116364][ T5172] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 220.202464][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.284423][ T5172] usb 1-1: can't set config #1, error -71 [ 220.298177][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 220.429046][ T26] audit: type=1800 audit(1790030098.929:3): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.275" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 221.239246][ T5172] usb 1-1: USB disconnect, device number 6 [ 221.271753][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.601527][ T5359] device-mapper: ioctl: Invalid ioctl structure: name t!, dev f800 [ 221.864632][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.874542][ T4317] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 221.883842][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.895448][ T4317] usb 2-1: config 0 descriptor?? [ 222.036884][ T4317] usb 2-1: can't set config #0, error -71 [ 222.140995][ T4317] usb 2-1: USB disconnect, device number 4 [ 222.279052][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 223.402190][ T5378] ALSA: mixer_oss: invalid OSS volume 'W' [ 226.201372][ T5402] device syzkaller0 entered promiscuous mode [ 227.147765][ T22] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 227.339275][ T22] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 227.357910][ T4317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 227.372622][ T22] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 227.606173][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 227.625520][ T22] usb 4-1: config 4 has no interface number 0 [ 227.646600][ T22] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.877774][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 228.471542][ T4317] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 228.497516][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 228.513653][ T22] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 228.523259][ T4317] usb 3-1: Product: syz [ 228.529190][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.549728][ T4317] usb 3-1: Manufacturer: syz [ 228.554399][ T4317] usb 3-1: SerialNumber: syz [ 228.561517][ T22] usb 4-1: Product: syz [ 228.596174][ T22] usb 4-1: Manufacturer: syz [ 228.603902][ T4317] usb 3-1: config 0 descriptor?? [ 228.612283][ T22] usb 4-1: SerialNumber: syz [ 228.867343][ T5427] ALSA: mixer_oss: invalid OSS volume 'W' [ 229.759123][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 229.766768][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 229.774893][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 229.782540][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 229.823790][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 229.831177][ T22] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 230.874771][ T5172] usb 3-1: USB disconnect, device number 3 [ 231.006994][ T22] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 231.038629][ T22] dib0700: firmware download failed at 7 with -22 [ 231.061877][ T22] usb 4-1: USB disconnect, device number 3 [ 231.961280][ T5449] jffs2: notice: (5449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.039049][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 233.547740][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 233.603020][ T5172] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.759714][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.787814][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.795806][ T5172] usb 4-1: Using ep0 maxpacket: 16 [ 233.810477][ T5172] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 233.817587][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.840500][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 233.846681][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.867702][ T5172] usb 4-1: Product: syz [ 233.875383][ T5172] usb 4-1: Manufacturer: syz [ 233.881750][ T22] usb 5-1: config 0 descriptor?? [ 233.892863][ T5172] usb 4-1: SerialNumber: syz [ 233.919059][ T5172] usb 4-1: config 0 descriptor?? [ 233.963762][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 234.105309][ T22] usb 5-1: string descriptor 0 read error: -71 [ 234.365473][ T22] usb 5-1: USB disconnect, device number 7 [ 235.144759][ T5172] usb 4-1: USB disconnect, device number 4 [ 235.151178][ T4322] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 235.160579][ T4322] usb 3-1: config 0 has no interface number 0 [ 235.167054][ T4322] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.235389][ T4322] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 235.257815][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.279615][ T4322] usb 3-1: Product: syz [ 235.289628][ T4322] usb 3-1: Manufacturer: syz [ 235.306883][ T4322] usb 3-1: SerialNumber: syz [ 235.345931][ T4322] usb 3-1: config 0 descriptor?? [ 235.396367][ T4322] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 235.574921][ T22] usb 3-1: USB disconnect, device number 4 [ 235.625643][ T22] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 340.777637][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 340.784690][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4273/1:b..l [ 340.793158][ C0] (detected by 0, t=10502 jiffies, g=17633, q=226 ncpus=2) [ 340.800487][ C0] task:syz-executor state:R running task stack:22160 pid:4273 ppid:4271 flags:0x00004000 [ 340.812429][ C0] Call Trace: [ 340.815752][ C0] [ 340.818725][ C0] __schedule+0x107f/0x4030 [ 340.823347][ C0] ? release_firmware_map_entry+0x187/0x187 [ 340.829289][ C0] ? lock_chain_count+0x20/0x20 [ 340.834190][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 340.839437][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 340.844774][ C0] preempt_schedule_irq+0xbb/0x160 [ 340.849942][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 340.855714][ C0] ? rcu_is_watching+0x11/0xa0 [ 340.860541][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 340.866406][ C0] irqentry_exit+0x63/0x70 [ 340.870873][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.877000][ C0] RIP: 0010:lock_release+0x142/0x920 [ 340.882348][ C0] Code: 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5b 05 00 00 83 3b 00 0f 85 6b 04 00 00 4c 89 74 24 08 43 c6 44 2f 08 00 <48> c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 48 8b [ 340.901999][ C0] RSP: 0018:ffffc900041a7260 EFLAGS: 00000246 [ 340.908114][ C0] RAX: 0000000000000000 RBX: ffff88807bf4e4dc RCX: b9a1483cf0ccc200 [ 340.916133][ C0] RDX: 0000000000000000 RSI: ffffffff8adf6880 RDI: ffffffff8adf6840 [ 340.924142][ C0] RBP: ffffc900041a7380 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 340.932157][ C0] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 000000000000003a [ 340.940196][ C0] R13: dffffc0000000000 R14: ffff88807bf4da00 R15: 1ffff92000834e58 [ 340.948417][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 340.953654][ C0] ? mark_lock+0x94/0x320 [ 340.958033][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 340.963103][ C0] ? __lock_acquire+0x138a/0x7c40 [ 340.968184][ C0] ? unwind_next_frame+0x1719/0x1fd0 [ 340.973528][ C0] ? deref_stack_reg+0x18e/0x220 [ 340.978554][ C0] is_bpf_text_address+0x28b/0x2a0 [ 340.983725][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 340.989000][ C0] kernel_text_address+0x9c/0xd0 [ 340.993993][ C0] __kernel_text_address+0x9/0x30 [ 340.999066][ C0] unwind_get_return_address+0x49/0x80 [ 341.004572][ C0] ? stack_trace_save+0xf0/0xf0 [ 341.009467][ C0] arch_stack_walk+0xf2/0x140 [ 341.014203][ C0] stack_trace_save+0xa6/0xf0 [ 341.018943][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 341.024097][ C0] ? mark_lock+0x94/0x320 [ 341.028489][ C0] save_stack+0x121/0x230 [ 341.032862][ C0] ? __reset_page_owner+0x190/0x190 [ 341.038102][ C0] ? free_unref_page_prepare+0x8e5/0x9e0 [ 341.043779][ C0] ? free_unref_page_list+0xbb/0x8e0 [ 341.049112][ C0] ? release_pages+0x20d1/0x2340 [ 341.054113][ C0] ? __pagevec_release+0x6d/0xe0 [ 341.059116][ C0] ? shmem_undo_range+0x808/0x21d0 [ 341.064276][ C0] ? shmem_evict_inode+0x225/0x9f0 [ 341.069493][ C0] ? evict+0x4b6/0x8b0 [ 341.073608][ C0] ? do_unlinkat+0x388/0x580 [ 341.078242][ C0] ? __x64_sys_unlink+0x45/0x50 [ 341.083160][ C0] ? do_syscall_64+0x4c/0xa0 [ 341.087795][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.093925][ C0] ? page_ext_get+0x1de/0x2a0 [ 341.098658][ C0] __reset_page_owner+0x51/0x190 [ 341.103653][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 341.109171][ C0] free_unref_page_list+0xbb/0x8e0 [ 341.114343][ C0] release_pages+0x20d1/0x2340 [ 341.119161][ C0] ? filemap_remove_folio+0x1aa/0x2c0 [ 341.124587][ C0] ? lru_cache_disable+0x30/0x30 [ 341.129587][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 341.134836][ C0] __pagevec_release+0x6d/0xe0 [ 341.139651][ C0] shmem_undo_range+0x808/0x21d0 [ 341.144639][ C0] ? verify_lock_unused+0x140/0x140 [ 341.149899][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 341.155169][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 341.160266][ C0] ? __rwlock_init+0x140/0x140 [ 341.165099][ C0] shmem_evict_inode+0x225/0x9f0 [ 341.170100][ C0] ? _raw_spin_unlock+0x24/0x40 [ 341.175008][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 341.180963][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 341.186558][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 341.191624][ C0] ? bit_waitqueue+0x30/0x30 [ 341.196271][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 341.201510][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 341.207200][ C0] evict+0x4b6/0x8b0 [ 341.211158][ C0] ? proc_nr_inodes+0x2f0/0x2f0 [ 341.216056][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 341.221302][ C0] ? _raw_spin_unlock+0x24/0x40 [ 341.226202][ C0] ? iput+0x79f/0x9c0 [ 341.230248][ C0] do_unlinkat+0x388/0x580 [ 341.234737][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 341.239920][ C0] ? getname_flags+0x206/0x500 [ 341.244732][ C0] __x64_sys_unlink+0x45/0x50 [ 341.249566][ C0] do_syscall_64+0x4c/0xa0 [ 341.254062][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.258776][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.263493][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.269466][ C0] RIP: 0033:0x7f9a5459d247 [ 341.274003][ C0] RSP: 002b:00007fff1bc28548 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 341.282462][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a5459d247 [ 341.290472][ C0] RDX: 00007fff1bc28570 RSI: 00007fff1bc28600 RDI: 00007fff1bc28600 [ 341.298502][ C0] RBP: 00007fff1bc28600 R08: 00007fff1bc29600 R09: 00000000ffffffff [ 341.306515][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff1bc29690 [ 341.314514][ C0] R13: 00007f9a546344bb R14: 000000000003944d R15: 00007fff1bc296d0 [ 341.322541][ C0] [ 341.325603][ C0] rcu: rcu_preempt kthread starved for 9805 jiffies! g17633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 341.336740][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 341.346913][ C0] rcu: RCU grace-period kthread stack dump: [ 341.352836][ C0] task:rcu_preempt state:R running task stack:27872 pid:16 ppid:2 flags:0x00004000 [ 341.363667][ C0] Call Trace: [ 341.366975][ C0] [ 341.369943][ C0] __schedule+0x107f/0x4030 [ 341.374512][ C0] ? release_firmware_map_entry+0x187/0x187 [ 341.380459][ C0] schedule+0xb9/0x180 [ 341.384657][ C0] schedule_timeout+0x184/0x2d0 [ 341.389557][ C0] ? console_conditional_schedule+0x40/0x40 [ 341.395497][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.401449][ C0] ? update_process_times+0x1b0/0x1b0 [ 341.406863][ C0] ? prepare_to_swait_event+0x340/0x360 [ 341.412460][ C0] rcu_gp_fqs_loop+0x303/0x1350 [ 341.417363][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 341.422249][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 341.428441][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.434472][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 341.439547][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 341.444357][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 341.449250][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.454497][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 341.459752][ C0] rcu_gp_kthread+0x99/0x3b0 [ 341.464393][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 341.469554][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.475536][ C0] ? __kthread_parkme+0x71/0x1c0 [ 341.480529][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 341.485620][ C0] kthread+0x29d/0x330 [ 341.489832][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 341.494997][ C0] ? kthread_blkcg+0xd0/0xd0 [ 341.499639][ C0] ret_from_fork+0x1f/0x30 [ 341.504125][ C0] [ 341.507186][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 341.513537][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 341.520609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.530724][ C0] RIP: 0010:default_idle+0xb/0x10 [ 341.535841][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 341.555583][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 341.561701][ C0] RAX: 711f679943e36500 RBX: ffffffff8a3c8957 RCX: 711f679943e36500 [ 341.569721][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 341.577736][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 341.585760][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 341.593783][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 341.601806][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 341.610773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.617467][ C0] CR2: 00007fca072016c8 CR3: 0000000029455000 CR4: 00000000003506f0 [ 341.625473][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.633473][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 341.641493][ C0] Call Trace: [ 341.644820][ C0] [ 341.647785][ C0] default_idle_call+0x84/0xc0 [ 341.652607][ C0] do_idle+0x250/0x680 [ 341.656826][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 341.658850][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.662071][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 341.669916][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.673567][ C0] ? asm_sysvec_error_interrupt+0x11/0x20 [ 341.685601][ C0] ? schedule_idle+0x57/0x90 [ 341.690233][ C0] cpu_startup_entry+0x3f/0x60 [ 341.695038][ C0] rest_init+0x2dc/0x300 [ 341.699324][ C0] ? time_init+0x33/0x33 [ 341.703599][ C0] arch_call_rest_init+0xa/0xa [ 341.708385][ C0] start_kernel+0x493/0x53c [ 341.712902][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 341.718847][ C0] [ 342.899494][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.909544][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.918243][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.926129][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.934789][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.942187][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.955544][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.970018][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.008277][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.016149][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.028063][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.035499][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=656 sent=0 n=-1 (errno 32: Broken pipe) [ 345.127953][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 346.375585][ T4588] device hsr_slave_0 left promiscuous mode [ 346.384457][ T4588] device hsr_slave_1 left promiscuous mode [ 346.398603][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.407419][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.421599][ T4588] device bridge_slave_1 left promiscuous mode [ 346.437301][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.450165][ T4588] device bridge_slave_0 left promiscuous mode [ 346.456466][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.011570][ T4588] team0 (unregistering): Port device team_slave_1 removed [ 347.056615][ T4588] team0 (unregistering): Port device team_slave_0 removed [ 347.093996][ T4588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.132525][ T4588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.394315][ T4588] bond0 (unregistering): Released all slaves [ 348.025319][ T4588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.095513][ T4588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.184463][ T4588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.259528][ T4588] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.423874][ T4588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.518317][ T4588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.573391][ T4588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.649208][ T4588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.845376][ T4588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.924901][ T4588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.015082][ T4588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.103487][ T4588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.291822][ T4588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.371514][ T4588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.439280][ T4588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.512700][ T4588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0