last executing test programs: 10.553844539s ago: executing program 2 (id=52): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0xd8, 0x83, 0x40, 0xd46, 0x2012, 0xd35f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x8e, 0xd3}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) 9.302378577s ago: executing program 1 (id=56): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x4) 9.124016229s ago: executing program 4 (id=58): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xc6, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@generic={0x82, 0x5, "9b9cb6"}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000200)={0xa, @raw_data="94a9dca1ca73855e3d9bae811b9340ee4a5acf656459ff7c7f0ed903b503fe4451052eb1f82cbb0a7d0ffe4ab11e9b8328bbfae608042d42e1a729ef5f41aa438309e7b3ad0753ced866c69a90a6783db0891a67a8fcff0276d412869fca1889bcaaeb890ca3d894505e2ea73a7dac196fa300701e3617781b9602ce546a83a8e968bbaf1110ac60bab61a6fdf4d50fb9ca374bed2962ffd628b979a9cd76371f0cfae9b660b270f970a39d35be23a6b77760606f10db5f2e9b24a4cbfceb8a806565fed7166b340"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) shutdown(r3, 0x1) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 8.883839951s ago: executing program 1 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) flock(0xffffffffffffffff, 0xa) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 7.067982752s ago: executing program 2 (id=70): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 6.774038505s ago: executing program 3 (id=71): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @broadcast}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@void, @void, @eth={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x2, "1c", "93607b", 0xa00}}}}}}, 0x1e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.291207477s ago: executing program 3 (id=72): r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) 6.162740359s ago: executing program 4 (id=73): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000940)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@flowinfo={{0x14, 0x29, 0x32, 0xb}}], 0x18}}], 0x1, 0x240040d0) 5.355744844s ago: executing program 1 (id=74): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xcb, 0x80000000, 0x42, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8019, 0x20, 0x10, 0x4}}) 5.268717325s ago: executing program 4 (id=75): prctl$PR_SET_NAME(0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x3010, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') select(0x40, &(0x7f0000000240)={0xc, 0x7, 0xfffb, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.228770245s ago: executing program 0 (id=76): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = dup(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) mq_notify(r4, &(0x7f0000000280)={0x0, 0x2c, 0x5, @thr={&(0x7f0000000180)="e968d153a3242d1c2d865433a405f66a88d0ff5e66db1d7d0a7600369ddca4e734aa88bc89b94c0bf60da3b6e427b0b87aacbe69adab04b57072c62df1cc43aae391a0ed2d8017d58ff3c23c40e573f2f79bf4f52eb7e667be2bfc231893d897375977898bf0f29d3f3bd82f10651d325e61c2778ca92ee7b6b733a51720d348809c5c5cac429240ff5f1c3826bdb70768e2d2e526be15e5237436c09a390dea93d0f8cac7295ee46f5ae6ef3c584264f8a85c7f733f4130c7d04606ad2e50a1b4f3efa7fb1ab111e8d5333990d5", &(0x7f0000000300)="4468bf278277df5a4678a5ca3e7a85bccff36c1ddea689f8f5660d781990daef9e413133420ec4fcde60d8dc4e8cc682f0a1fc44642cffd8db0018a1d70c54fa38fe64d4d7cc30d144b425efa34fbbde05ed6c1d3b74027c49dd0b1ac2c63b157da191c6067263282a3ebf5066e45d55006a7d9e4e17ef89f4f024531f798a899236bf8bf68ad823ebbbbe16"}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010000104000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800500050000000000080003"], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 5.174835205s ago: executing program 3 (id=77): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r0, 0x0, 0x0, 0x7) 4.180911212s ago: executing program 4 (id=78): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x158) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0x414}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1e4, 0x0, 0x38, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1c0, 0xc5, "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"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040000}, 0x24020841) sendto$llc(r1, &(0x7f0000000180)="6b74e8505aec1195d707e8c7b3d2f0ed4a58dad11f8a9aae0cb1263294ac28ec8f6e7bcfde04e28ccd31b4577d6ce411efc201c052afd5f65af46eb3b5b7c7bdb1687feee4f3f3d373b097b1486091b69d454dd49b294e196636bf875775f3c50650e9d7c4e8dffa605a1d3092f0c5dad520fd4b1665a4c3", 0x78, 0x24040084, 0x0, 0x0) 4.176544042s ago: executing program 1 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff0800020002005da514000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 4.175534132s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 4.078761072s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 3.998908033s ago: executing program 1 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)="135e018c47dbba593147") pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r3, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000826bd7000ffdbdf2525000063690011000267303030303a30303a31302e300000000008008a000000000000", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10004000}, 0x8) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002"], 0x24}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 2.97038778s ago: executing program 4 (id=82): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.920226501s ago: executing program 2 (id=83): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @broadcast}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@void, @void, @eth={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x2, "1c", "93607b", 0xa00}}}}}}, 0x1e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.754216172s ago: executing program 0 (id=84): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 2.314283864s ago: executing program 1 (id=85): syz_usb_connect(0x3, 0x38, &(0x7f0000001880)={{0x12, 0x1, 0x250, 0x8e, 0x5a, 0xe4, 0x10, 0x424, 0xc001, 0xe20c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x8, 0x5, 0x80, 0x1, [{{0x9, 0x4, 0x22, 0x2, 0x2, 0x64, 0x5, 0x79, 0x3, [], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x67, 0x9}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x1, 0x92, 0x7, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.059007116s ago: executing program 0 (id=86): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) 1.172322552s ago: executing program 0 (id=87): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYBLOB="ccd33baaec54c5fa4c95adab717713ffc18a60295ae90506b43f6a86d04cc792e9d713388141e7cf97d5ea8d2a5ef818427670a19b257313eea66ec80981e678da42c9f61401ec8eb23072b9500058dbfa21ebffe1e2e79d1802691dc70cc0920a3f0c1a5c8720fa7970cbf8ad080754413322c096adef2e2e03ea2429", @ANYRESDEC=r2], 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net\x00') getdents64(r6, &(0x7f0000000300)=""/187, 0xbb) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7d72616e733d66642c72000000003d3c8dd44576a55821262c7995b8474d595de47af74df24448ed2d656f49030031588661c4be0396b84ec4437d1e10ce61fdd31ed988720ea3159ff91771836ca6184105c3fed987a5a4e1fff79de487c39498e22edcf51b49a32a60f64ed9b48ac9e553aa48aca8cd2772bcc79250e529abcb9f0274cce16f0bf4d3c9b51663d12b2870125d4ba008185a4a998bbc7a55f88ef513f3c73e5a60c8fa7ac2866c25fd25bb0c3937e91e37ba50cd2ace7e55b6d30aa7a1", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$sg(0x0, 0x0, 0x141000) 1.126954392s ago: executing program 3 (id=89): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) 963.767234ms ago: executing program 2 (id=90): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r7 = dup(r3) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) write$6lowpan_enable(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x46}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x48044) 887.496224ms ago: executing program 3 (id=91): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 499.583637ms ago: executing program 4 (id=92): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, &(0x7f0000000400)=""/63, 0xcad9286a271020d7) 18.80019ms ago: executing program 3 (id=93): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001e000000a9201be9f7f0672f4000", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) 12.06797ms ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 0s ago: executing program 2 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 48.678463][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.696032][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. syzkaller login: [ 68.597025][ T4256] cgroup: Unknown subsys name 'net' [ 68.712127][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.211423][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.329995][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.336644][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.780846][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.797468][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.805744][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.813367][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.823533][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.831431][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.839486][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.847667][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.856690][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.860262][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.864027][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.870838][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.879290][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.887722][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.895888][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.900228][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.913278][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.913325][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.920417][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.930575][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.934711][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.942512][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.948814][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.956621][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.962713][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.971083][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.010327][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.017931][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.047701][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.052427][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.467898][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 72.604381][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 72.616317][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 72.714080][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 72.739319][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.747229][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.755596][ T4270] device bridge_slave_0 entered promiscuous mode [ 72.764121][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 72.800102][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.807380][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.815380][ T4270] device bridge_slave_1 entered promiscuous mode [ 72.880477][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.887826][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.896401][ T4266] device bridge_slave_0 entered promiscuous mode [ 72.904335][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.911862][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.920348][ T4277] device bridge_slave_0 entered promiscuous mode [ 72.943174][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.950463][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.958907][ T4266] device bridge_slave_1 entered promiscuous mode [ 72.966398][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.973500][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.981509][ T4277] device bridge_slave_1 entered promiscuous mode [ 72.991789][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.026109][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.093261][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.104514][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.130351][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.137945][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.146123][ T4271] device bridge_slave_0 entered promiscuous mode [ 73.155582][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.166651][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.178674][ T4270] team0: Port device team_slave_0 added [ 73.193595][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200969][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.209122][ T4275] device bridge_slave_0 entered promiscuous mode [ 73.217824][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.224948][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.233231][ T4275] device bridge_slave_1 entered promiscuous mode [ 73.249435][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.256706][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.264604][ T4271] device bridge_slave_1 entered promiscuous mode [ 73.280960][ T4270] team0: Port device team_slave_1 added [ 73.339161][ T4266] team0: Port device team_slave_0 added [ 73.347079][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.367795][ T4277] team0: Port device team_slave_0 added [ 73.374535][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.381590][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.407916][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.421679][ T4266] team0: Port device team_slave_1 added [ 73.429323][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.440759][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.453355][ T4277] team0: Port device team_slave_1 added [ 73.474693][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.482064][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.508297][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.529310][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.580039][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.587293][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.613531][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.627442][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.634426][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.661401][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.675333][ T4275] team0: Port device team_slave_0 added [ 73.683896][ T4275] team0: Port device team_slave_1 added [ 73.699156][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.706322][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.732555][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.744766][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.751785][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.777842][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.803244][ T4271] team0: Port device team_slave_0 added [ 73.841229][ T4271] team0: Port device team_slave_1 added [ 73.871804][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.879186][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.905428][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.928670][ T4270] device hsr_slave_0 entered promiscuous mode [ 73.935922][ T4270] device hsr_slave_1 entered promiscuous mode [ 73.952910][ T4266] device hsr_slave_0 entered promiscuous mode [ 73.960181][ T4266] device hsr_slave_1 entered promiscuous mode [ 73.967265][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.975076][ T4266] Cannot create hsr debugfs directory [ 73.981330][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.988904][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.014992][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.035748][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.042963][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.069183][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.076574][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 74.089977][ T4277] device hsr_slave_0 entered promiscuous mode [ 74.097103][ T4277] device hsr_slave_1 entered promiscuous mode [ 74.103672][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.111526][ T4277] Cannot create hsr debugfs directory [ 74.125804][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 74.125823][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 74.126009][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 74.132087][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 74.166155][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.173154][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.199768][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.304358][ T4275] device hsr_slave_0 entered promiscuous mode [ 74.311447][ T4275] device hsr_slave_1 entered promiscuous mode [ 74.318310][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.326445][ T4275] Cannot create hsr debugfs directory [ 74.404559][ T4271] device hsr_slave_0 entered promiscuous mode [ 74.412019][ T4271] device hsr_slave_1 entered promiscuous mode [ 74.418941][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.426723][ T4271] Cannot create hsr debugfs directory [ 74.678831][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.697306][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.711048][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.721030][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.764388][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.776454][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.787758][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.800510][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.871814][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.887169][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.913802][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.927113][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.007656][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.023817][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.038296][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.052797][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.062835][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.119508][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.129845][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.141516][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.152603][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.162420][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.174424][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.191822][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.210634][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.224155][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.234153][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.243681][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.250968][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.260623][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.298585][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.305754][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.319630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.332555][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.339688][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.348050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.356109][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.364312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.392024][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.407066][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.421613][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.458516][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.467939][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.477179][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.485881][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.493144][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.501450][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.510790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.519399][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.526539][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.534366][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.543963][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.553005][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.561878][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.573176][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.600982][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.610408][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.622424][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.632612][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.650497][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.675949][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.683981][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.693417][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.718954][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.746206][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.754979][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.764809][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.773715][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.782545][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.794493][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.812826][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.823502][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.839327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.851913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.883629][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.901425][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.910911][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.920049][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.927231][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.939241][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.950503][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.963962][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.971164][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.008904][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.023359][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.035698][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.043725][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.054053][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.068957][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.079009][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.109084][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.133256][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 76.142791][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.162860][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.172347][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.181812][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.205552][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 76.206015][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 76.211728][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 76.217967][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 76.244636][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.252610][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.262147][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.272027][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.279225][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.288367][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.297833][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.306719][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.315565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.324160][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.333798][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.342874][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.378622][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.398119][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.426235][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.433419][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.442660][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.455857][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.465692][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.475085][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.482279][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.490879][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.541219][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.550598][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.565838][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.587108][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.601872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.610965][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.620063][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.629722][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.638480][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.645710][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.653888][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.667878][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.712020][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.721137][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.731028][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.741653][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.750636][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.759757][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.769082][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.778014][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.786911][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.796680][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.805872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.815327][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.826490][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.848191][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.859581][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.876599][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.902126][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.926604][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.936297][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.944874][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.953921][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.988790][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.008297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.036793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.102123][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.133978][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.164692][ T4277] device veth0_vlan entered promiscuous mode [ 77.206376][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.219105][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.236988][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.260776][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.286645][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.311922][ T4277] device veth1_vlan entered promiscuous mode [ 77.372816][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.396617][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.420303][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.446233][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.501201][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.517230][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.539871][ T4277] device veth0_macvtap entered promiscuous mode [ 77.572830][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.596117][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.616327][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.637311][ T4277] device veth1_macvtap entered promiscuous mode [ 77.651877][ T4266] device veth0_vlan entered promiscuous mode [ 77.665888][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.676273][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.684289][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.723553][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.743205][ T4266] device veth1_vlan entered promiscuous mode [ 77.776454][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.794117][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.802323][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.815166][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.857218][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.867809][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.880114][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.907132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.916383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.925125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.934372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.943715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.953006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.962155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.972678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.988732][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.997866][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006692][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.016054][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.035002][ T4266] device veth0_macvtap entered promiscuous mode [ 78.047067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.055341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.062820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.077192][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.091805][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.101321][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.110830][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.119251][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.141423][ T4275] device veth0_vlan entered promiscuous mode [ 78.158729][ T4266] device veth1_macvtap entered promiscuous mode [ 78.182679][ T4275] device veth1_vlan entered promiscuous mode [ 78.203058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.212692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.220520][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 78.229935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.238629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.251285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.261202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.269414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.282002][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.286635][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 78.298902][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 78.299076][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.304953][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 78.321116][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 78.330096][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.338997][ T4270] device veth0_vlan entered promiscuous mode [ 78.359954][ T4270] device veth1_vlan entered promiscuous mode [ 78.368685][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.380202][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.389529][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.403000][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.418657][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.430282][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.460321][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.469315][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.478627][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.492634][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.502327][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.514209][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.523085][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.533500][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.542317][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.573241][ T4275] device veth0_macvtap entered promiscuous mode [ 78.603890][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.617000][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.632052][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.651395][ T4271] device veth0_vlan entered promiscuous mode [ 78.661698][ T4275] device veth1_macvtap entered promiscuous mode [ 78.687957][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.697797][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.707983][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.718714][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.727215][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.741087][ T4270] device veth0_macvtap entered promiscuous mode [ 78.758280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.769109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.780416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.807287][ T4270] device veth1_macvtap entered promiscuous mode [ 78.829757][ T4271] device veth1_vlan entered promiscuous mode [ 78.830871][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.842698][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.858937][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.865347][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.870881][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.887081][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.899011][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.912403][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.923153][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.934010][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.945955][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.957550][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.972920][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.981018][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.990398][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.000045][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.010004][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.023964][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.034645][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.044963][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.056478][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.066454][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.077176][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.090241][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.103262][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114420][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.123433][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.132541][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.143866][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.155801][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.184505][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.203277][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.213495][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.224498][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.234501][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.245116][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.259190][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.285920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.294601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.304856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.315815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.326870][ T4271] device veth0_macvtap entered promiscuous mode [ 79.348501][ T4271] device veth1_macvtap entered promiscuous mode [ 79.359597][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.366152][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.376399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.386848][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395666][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.404379][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434697][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.443799][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.452300][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.499492][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.519013][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.530298][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.543755][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.553763][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.566458][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.576642][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.588328][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.598636][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.609424][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.621726][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.646939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.661712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.672045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.694406][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.707303][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.718330][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.729481][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.739454][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.750037][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.761035][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.771627][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.784464][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.807308][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.816985][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827743][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.836798][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.860722][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.881021][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.936680][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.943628][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.001914][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.004519][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.048757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.059724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.097702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.215983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.222319][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.233125][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.233847][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.285742][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 80.298181][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.366356][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 80.366831][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 80.375591][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 80.379240][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 80.451205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.472431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.518264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.526694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.534910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.545253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.553459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.565034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.582266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.592389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.693189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.695893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.804223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.923449][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.943951][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.001695][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.039871][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.068575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.139832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.888081][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 84.702132][ T4445] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 85.935490][ T128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.286421][ T128] usb 4-1: Using ep0 maxpacket: 32 [ 86.297269][ T128] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.305558][ T128] usb 4-1: config 0 has no interface number 0 [ 86.314022][ T128] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.323194][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.331354][ T128] usb 4-1: Product: syz [ 86.336181][ T128] usb 4-1: Manufacturer: syz [ 86.340815][ T128] usb 4-1: SerialNumber: syz [ 86.367357][ T128] usb 4-1: config 0 descriptor?? [ 86.717008][ T14] cfg80211: failed to load regulatory.db [ 86.967561][ T33] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.981352][ T128] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 87.106534][ T128] usb 4-1: selecting invalid altsetting 1 [ 87.112338][ T128] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 87.125590][ T128] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.137927][ T128] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 87.166782][ T128] usb 4-1: media controller created [ 87.206080][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.313627][ T33] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 87.338380][ T128] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 87.354112][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.369951][ T128] zl10353_read_register: readreg error (reg=127, ret==-71) [ 87.413724][ T128] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 87.421399][ T33] usb 1-1: Product: syz [ 87.445370][ T33] usb 1-1: Manufacturer: syz [ 87.450043][ T33] usb 1-1: SerialNumber: syz [ 88.464649][ T4467] process 'syz.1.22' launched '/dev/fd/7' with NULL argv: empty string added [ 88.538535][ T4472] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.589657][ T128] usb 4-1: USB disconnect, device number 2 [ 88.671000][ T4478] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 89.719962][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 89.790665][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 89.830982][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 89.843026][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 89.855921][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.070864][ T33] lan78xx: probe of 1-1:1.0 failed with error -71 [ 90.166074][ T4495] netlink: 300 bytes leftover after parsing attributes in process `syz.2.28'. [ 90.795502][ T33] usb 1-1: USB disconnect, device number 2 [ 91.264156][ T4510] mmap: syz.0.33 (4510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.063268][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 95.284477][ T4561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 95.461000][ T128] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 95.635464][ T33] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.659214][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.700580][ T128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.711197][ T128] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.720998][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.783775][ T128] usb 4-1: config 0 descriptor?? [ 95.801853][ T128] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.809380][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 95.822309][ T128] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.860990][ T128] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.875885][ T33] usb 3-1: Using ep0 maxpacket: 8 [ 95.918287][ T33] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 95.946890][ T128] usb 4-1: media controller created [ 95.974272][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.006739][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.035095][ T33] usb 3-1: Product: syz [ 96.063627][ T33] usb 3-1: Manufacturer: syz [ 96.101611][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 96.116593][ T33] usb 3-1: SerialNumber: syz [ 96.140529][ T128] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 96.180189][ T33] usb 3-1: config 0 descriptor?? [ 96.239846][ T128] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 96.264795][ T33] gspca_main: se401-2.14.0 probing 047d:5003 [ 96.352266][ T128] dvb-usb: schedule remote query interval to 150 msecs. [ 96.469177][ T128] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 96.497534][ T128] usb 4-1: USB disconnect, device number 3 [ 96.586703][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.617259][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.651827][ T128] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.260982][ T4602] tipc: Can't bind to reserved service type 0 [ 97.350197][ T33] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 97.373349][ T33] usb 3-1: device reset changed ep0 maxpacket size! [ 97.391374][ T4604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 97.427889][ T33] gspca_se401: read req failed req 0x06 error -19 [ 97.470652][ T33] usb 3-1: USB disconnect, device number 2 [ 97.655407][ T33] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.790247][ T33] usb 3-1: string descriptor 0 read error: -71 [ 98.810270][ T33] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=d3.5f [ 98.845209][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.891224][ T33] usb 3-1: config 0 descriptor?? [ 98.919683][ T33] usb 3-1: can't set config #0, error -71 [ 98.952111][ T33] usb 3-1: USB disconnect, device number 3 [ 99.065363][ T4326] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.255463][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 99.262476][ T4326] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.302054][ T4326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.325278][ T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.353541][ T4326] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.376374][ T4326] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.405261][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.423728][ T4326] usb 1-1: Product: syz [ 99.444053][ T4326] usb 1-1: Manufacturer: syz [ 99.453622][ T4326] usb 1-1: SerialNumber: syz [ 99.527923][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.549463][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.590540][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.654969][ T33] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.691645][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.729257][ T33] usb 3-1: config 0 descriptor?? [ 100.285439][ T33] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 100.352460][ T33] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.620708][ T4326] usb 1-1: 0:2 : does not exist [ 100.699462][ T4326] usb 1-1: USB disconnect, device number 3 [ 101.256842][ T4633] usb 3-1: USB disconnect, device number 4 [ 101.812176][ T4112] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.013437][ T4112] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.542880][ T4112] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.011680][ T4112] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.150128][ T4112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.321365][ T4112] usb 4-1: config 0 descriptor?? [ 103.516705][ T4112] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.584651][ T4112] dvb-usb: bulk message failed: -22 (3/0) [ 103.676371][ T4112] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.729854][ T4112] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.757953][ T4112] usb 4-1: media controller created [ 103.837122][ T4112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.055676][ T4633] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.185923][ T4311] libceph: connect (1)[c::]:6789 error -101 [ 104.224132][ T4311] libceph: mon0 (1)[c::]:6789 connect error [ 104.539196][ T4112] dvb-usb: bulk message failed: -22 (6/0) [ 104.545084][ T4112] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.573661][ T4682] ceph: No mds server is up or the cluster is laggy [ 104.582609][ T4633] usb 2-1: Using ep0 maxpacket: 16 [ 104.604764][ T4633] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.614824][ T4112] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 104.625834][ T4633] usb 2-1: config 8 has an invalid interface number: 34 but max is 0 [ 104.625890][ T4633] usb 2-1: config 8 has an invalid interface association descriptor of length 2, skipping [ 104.625907][ T4633] usb 2-1: config 8 has no interface number 0 [ 104.625937][ T4633] usb 2-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 104.625965][ T4633] usb 2-1: config 8 interface 34 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 104.625990][ T4633] usb 2-1: config 8 interface 34 has no altsetting 0 [ 104.628565][ T4633] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 104.680989][ T4112] dvb-usb: schedule remote query interval to 150 msecs. [ 104.703216][ T4112] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.755532][ T4112] usb 4-1: USB disconnect, device number 4 [ 104.810747][ T4633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.845912][ T4633] usb 2-1: Product: syz [ 104.845935][ T4633] usb 2-1: Manufacturer: syz [ 104.845951][ T4633] usb 2-1: SerialNumber: syz [ 105.039366][ T4691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'. [ 105.769212][ T4633] usb 2-1: USB disconnect, device number 2 [ 105.873927][ T4633] ================================================================== [ 105.882085][ T4633] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0 [ 105.889348][ T4633] Read of size 8 at addr ffff8880790c1898 by task kworker/1:7/4633 [ 105.897278][ T4633] [ 105.899649][ T4633] CPU: 1 PID: 4633 Comm: kworker/1:7 Not tainted syzkaller #0 [ 105.907149][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.917248][ T4633] Workqueue: usb_hub_wq hub_event [ 105.922350][ T4633] Call Trace: [ 105.925654][ T4633] [ 105.928616][ T4633] dump_stack_lvl+0x168/0x22e [ 105.933339][ T4633] ? __lock_acquire+0x7c50/0x7c50 [ 105.938411][ T4633] ? show_regs_print_info+0x12/0x12 [ 105.943649][ T4633] ? load_image+0x3b0/0x3b0 [ 105.948222][ T4633] ? __virt_addr_valid+0x465/0x540 [ 105.953387][ T4633] ? hdm_disconnect+0x109/0x1c0 [ 105.958276][ T4633] print_report+0xa8/0x210 [ 105.962751][ T4633] kasan_report+0x10b/0x140 [ 105.967380][ T4633] ? hdm_disconnect+0x109/0x1c0 [ 105.972265][ T4633] hdm_disconnect+0x109/0x1c0 [ 105.976981][ T4633] usb_unbind_interface+0x1ee/0x860 [ 105.982227][ T4633] ? kernfs_remove_by_name_ns+0x113/0x150 [ 105.987982][ T4633] ? usb_driver_release_interface+0x1b0/0x1b0 [ 105.994093][ T4633] device_release_driver_internal+0x522/0x850 [ 106.000202][ T4633] bus_remove_device+0x2e2/0x400 [ 106.005176][ T4633] device_del+0x628/0xa70 [ 106.009539][ T4633] ? kill_device+0x160/0x160 [ 106.014148][ T4633] ? kobject_put+0x424/0x460 [ 106.018782][ T4633] usb_disable_device+0x3e2/0x890 [ 106.023836][ T4633] usb_disconnect+0x348/0x8a0 [ 106.028541][ T4633] hub_event+0x1e24/0x54e0 [ 106.032996][ T4633] ? hub_post_resume+0x120/0x120 [ 106.037952][ T4633] ? read_lock_is_recursive+0x10/0x10 [ 106.043344][ T4633] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 106.049262][ T4633] ? _raw_spin_unlock+0x40/0x40 [ 106.054132][ T4633] ? _raw_spin_unlock_irq+0x1f/0x40 [ 106.059351][ T4633] ? process_one_work+0x7a1/0x1160 [ 106.064472][ T4633] process_one_work+0x898/0x1160 [ 106.069443][ T4633] ? worker_detach_from_pool+0x240/0x240 [ 106.075089][ T4633] ? _raw_spin_lock_irq+0xab/0xe0 [ 106.080141][ T4633] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 106.085558][ T4633] ? kthread_data+0x4b/0xc0 [ 106.090077][ T4633] worker_thread+0xd62/0x1250 [ 106.094772][ T4633] ? __kthread_parkme+0x162/0x1c0 [ 106.099814][ T4633] kthread+0x29d/0x330 [ 106.103901][ T4633] ? worker_clr_flags+0x1a0/0x1a0 [ 106.108940][ T4633] ? kthread_blkcg+0xd0/0xd0 [ 106.113544][ T4633] ret_from_fork+0x1f/0x30 [ 106.117984][ T4633] [ 106.121012][ T4633] [ 106.123341][ T4633] Allocated by task 4633: [ 106.127692][ T4633] kasan_set_track+0x4b/0x70 [ 106.132298][ T4633] __kasan_kmalloc+0x8e/0xa0 [ 106.136905][ T4633] hdm_probe+0x8f/0x13d0 [ 106.141157][ T4633] usb_probe_interface+0x5a0/0xaf0 [ 106.146548][ T4633] really_probe+0x2aa/0xc70 [ 106.151082][ T4633] __driver_probe_device+0x18c/0x330 [ 106.156380][ T4633] driver_probe_device+0x4f/0x420 [ 106.161440][ T4633] __device_attach_driver+0x2c6/0x510 [ 106.166846][ T4633] bus_for_each_drv+0x175/0x200 [ 106.171720][ T4633] __device_attach+0x29b/0x460 [ 106.176507][ T4633] bus_probe_device+0xbc/0x1e0 [ 106.181285][ T4633] device_add+0xa00/0xfb0 [ 106.185262][ C0] sched: RT throttling activated [ 106.190575][ T4633] usb_set_configuration+0x1991/0x1fd0 [ 106.196059][ T4633] usb_generic_driver_probe+0x89/0x150 [ 106.201532][ T4633] usb_probe_device+0x139/0x270 [ 106.206411][ T4633] really_probe+0x2aa/0xc70 [ 106.210963][ T4633] __driver_probe_device+0x18c/0x330 [ 106.216264][ T4633] driver_probe_device+0x4f/0x420 [ 106.221313][ T4633] __device_attach_driver+0x2c6/0x510 [ 106.226710][ T4633] bus_for_each_drv+0x175/0x200 [ 106.231571][ T4633] __device_attach+0x29b/0x460 [ 106.236352][ T4633] bus_probe_device+0xbc/0x1e0 [ 106.241214][ T4633] device_add+0xa00/0xfb0 [ 106.245556][ T4633] usb_new_device+0xd4d/0x1620 [ 106.250338][ T4633] hub_event+0x2d5e/0x54e0 [ 106.254777][ T4633] process_one_work+0x898/0x1160 [ 106.259720][ T4633] worker_thread+0xaa2/0x1250 [ 106.264404][ T4633] kthread+0x29d/0x330 [ 106.268485][ T4633] ret_from_fork+0x1f/0x30 [ 106.272920][ T4633] [ 106.275270][ T4633] Freed by task 4633: [ 106.279253][ T4633] kasan_set_track+0x4b/0x70 [ 106.283870][ T4633] kasan_save_free_info+0x2d/0x50 [ 106.288922][ T4633] ____kasan_slab_free+0x126/0x1e0 [ 106.294051][ T4633] slab_free_freelist_hook+0x131/0x1a0 [ 106.299516][ T4633] __kmem_cache_free+0xb6/0x1f0 [ 106.304371][ T4633] device_release+0x92/0x1c0 [ 106.308976][ T4633] kobject_put+0x21d/0x460 [ 106.313422][ T4633] hdm_disconnect+0xef/0x1c0 [ 106.318027][ T4633] usb_unbind_interface+0x1ee/0x860 [ 106.323321][ T4633] device_release_driver_internal+0x522/0x850 [ 106.329405][ T4633] bus_remove_device+0x2e2/0x400 [ 106.334360][ T4633] device_del+0x628/0xa70 [ 106.338701][ T4633] usb_disable_device+0x3e2/0x890 [ 106.343732][ T4633] usb_disconnect+0x348/0x8a0 [ 106.348433][ T4633] hub_event+0x1e24/0x54e0 [ 106.352971][ T4633] process_one_work+0x898/0x1160 [ 106.357931][ T4633] worker_thread+0xd62/0x1250 [ 106.362621][ T4633] kthread+0x29d/0x330 [ 106.366713][ T4633] ret_from_fork+0x1f/0x30 [ 106.371154][ T4633] [ 106.373484][ T4633] The buggy address belongs to the object at ffff8880790c0000 [ 106.373484][ T4633] which belongs to the cache kmalloc-8k of size 8192 [ 106.387551][ T4633] The buggy address is located 6296 bytes inside of [ 106.387551][ T4633] 8192-byte region [ffff8880790c0000, ffff8880790c2000) [ 106.401009][ T4633] [ 106.403338][ T4633] The buggy address belongs to the physical page: [ 106.409770][ T4633] page:ffffea0001e43000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x790c0 [ 106.419929][ T4633] head:ffffea0001e43000 order:3 compound_mapcount:0 compound_pincount:0 [ 106.428259][ T4633] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 106.436269][ T4633] raw: 00fff00000010200 ffffea000076a600 dead000000000002 ffff888017442280 [ 106.444862][ T4633] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 106.453455][ T4633] page dumped because: kasan: bad access detected [ 106.459882][ T4633] page_owner tracks the page as allocated [ 106.465607][ T4633] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3935, tgid 3935 (dhcpcd), ts 45944845051, free_ts 45918122442 [ 106.485676][ T4633] post_alloc_hook+0x173/0x1a0 [ 106.490459][ T4633] get_page_from_freelist+0x1a26/0x1ac0 [ 106.496025][ T4633] __alloc_pages+0x1df/0x4e0 [ 106.500639][ T4633] alloc_slab_page+0x5d/0x160 [ 106.505330][ T4633] new_slab+0x87/0x2c0 [ 106.509407][ T4633] ___slab_alloc+0xbc6/0x1230 [ 106.514089][ T4633] __kmem_cache_alloc_node+0x1a0/0x260 [ 106.519554][ T4633] kmalloc_trace+0x26/0xe0 [ 106.523988][ T4633] tomoyo_init_log+0x1081/0x1f50 [ 106.528933][ T4633] tomoyo_supervisor+0x326/0x10b0 [ 106.533963][ T4633] tomoyo_env_perm+0x146/0x1e0 [ 106.538737][ T4633] tomoyo_find_next_domain+0x157a/0x1a40 [ 106.544398][ T4633] tomoyo_bprm_check_security+0x100/0x150 [ 106.550132][ T4633] security_bprm_check+0x5e/0x90 [ 106.555073][ T4633] bprm_execve+0xa77/0x18a0 [ 106.559588][ T4633] do_execveat_common+0x51b/0x6c0 [ 106.564627][ T4633] page last free stack trace: [ 106.569303][ T4633] free_unref_page_prepare+0x8b4/0x9a0 [ 106.574779][ T4633] free_unref_page+0x2e/0x3f0 [ 106.579485][ T4633] __unfreeze_partials+0x1a5/0x200 [ 106.584891][ T4633] put_cpu_partial+0x17c/0x250 [ 106.589676][ T4633] qlist_free_all+0x76/0xe0 [ 106.594190][ T4633] kasan_quarantine_reduce+0x144/0x160 [ 106.599664][ T4633] __kasan_slab_alloc+0x1e/0x80 [ 106.604565][ T4633] slab_post_alloc_hook+0x4b/0x480 [ 106.609695][ T4633] kmem_cache_alloc+0x123/0x2f0 [ 106.614555][ T4633] mas_alloc_nodes+0x2ec/0x890 [ 106.619329][ T4633] mas_preallocate+0x161/0x3c0 [ 106.624106][ T4633] do_brk_flags+0x794/0xb80 [ 106.628625][ T4633] __se_sys_brk+0x8af/0x9e0 [ 106.633134][ T4633] do_syscall_64+0x4c/0xa0 [ 106.637563][ T4633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.643471][ T4633] [ 106.645802][ T4633] Memory state around the buggy address: [ 106.651434][ T4633] ffff8880790c1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.659501][ T4633] ffff8880790c1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.667564][ T4633] >ffff8880790c1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.675630][ T4633] ^ [ 106.680490][ T4633] ffff8880790c1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.688559][ T4633] ffff8880790c1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.696620][ T4633] ================================================================== [ 107.819050][ T4633] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.826320][ T4633] CPU: 1 PID: 4633 Comm: kworker/1:7 Not tainted syzkaller #0 [ 107.833817][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.843912][ T4633] Workqueue: usb_hub_wq hub_event [ 107.849003][ T4633] Call Trace: [ 107.852313][ T4633] [ 107.855279][ T4633] dump_stack_lvl+0x168/0x22e [ 107.859999][ T4633] ? memcpy+0x3c/0x60 [ 107.864030][ T4633] ? show_regs_print_info+0x12/0x12 [ 107.869272][ T4633] ? load_image+0x3b0/0x3b0 [ 107.873834][ T4633] panic+0x2c9/0x710 [ 107.877777][ T4633] ? bpf_jit_dump+0xd0/0xd0 [ 107.882328][ T4633] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 107.888355][ T4633] ? _raw_spin_unlock+0x40/0x40 [ 107.893251][ T4633] ? print_memory_metadata+0x314/0x400 [ 107.898766][ T4633] check_panic_on_warn+0x80/0xa0 [ 107.903833][ T4633] ? hdm_disconnect+0x109/0x1c0 [ 107.908721][ T4633] end_report+0x66/0x110 [ 107.913027][ T4633] kasan_report+0x118/0x140 [ 107.917577][ T4633] ? hdm_disconnect+0x109/0x1c0 [ 107.922474][ T4633] hdm_disconnect+0x109/0x1c0 [ 107.927191][ T4633] usb_unbind_interface+0x1ee/0x860 [ 107.932415][ T4633] ? kernfs_remove_by_name_ns+0x113/0x150 [ 107.938157][ T4633] ? usb_driver_release_interface+0x1b0/0x1b0 [ 107.944241][ T4633] device_release_driver_internal+0x522/0x850 [ 107.950335][ T4633] bus_remove_device+0x2e2/0x400 [ 107.955312][ T4633] device_del+0x628/0xa70 [ 107.959681][ T4633] ? kill_device+0x160/0x160 [ 107.964287][ T4633] ? kobject_put+0x424/0x460 [ 107.968902][ T4633] usb_disable_device+0x3e2/0x890 [ 107.973943][ T4633] usb_disconnect+0x348/0x8a0 [ 107.978646][ T4633] hub_event+0x1e24/0x54e0 [ 107.983200][ T4633] ? hub_post_resume+0x120/0x120 [ 107.988157][ T4633] ? read_lock_is_recursive+0x10/0x10 [ 107.993546][ T4633] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 107.999477][ T4633] ? _raw_spin_unlock+0x40/0x40 [ 108.004344][ T4633] ? _raw_spin_unlock_irq+0x1f/0x40 [ 108.009565][ T4633] ? process_one_work+0x7a1/0x1160 [ 108.014688][ T4633] process_one_work+0x898/0x1160 [ 108.019647][ T4633] ? worker_detach_from_pool+0x240/0x240 [ 108.025296][ T4633] ? _raw_spin_lock_irq+0xab/0xe0 [ 108.030336][ T4633] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 108.035732][ T4633] ? kthread_data+0x4b/0xc0 [ 108.040299][ T4633] worker_thread+0xd62/0x1250 [ 108.045081][ T4633] ? __kthread_parkme+0x162/0x1c0 [ 108.050135][ T4633] kthread+0x29d/0x330 [ 108.054230][ T4633] ? worker_clr_flags+0x1a0/0x1a0 [ 108.059266][ T4633] ? kthread_blkcg+0xd0/0xd0 [ 108.063875][ T4633] ret_from_fork+0x1f/0x30 [ 108.068309][ T4633] [ 108.071636][ T4633] Kernel Offset: disabled [ 108.075971][ T4633] Rebooting in 86400 seconds..