last executing test programs: 9.052935504s ago: executing program 4 (id=64): rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2c00, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) fchown(r1, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001480)=""/4082, 0xff2}], 0x1) read(r0, &(0x7f0000000140)=""/215, 0xd7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) 8.942235351s ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="ee97dc81da16e99180c3d0a9bf3177fef439c60e38e601e9845ad6929b09813c5d2ac1528e4ef34d3aec52f4914ac09cd8") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.933918889s ago: executing program 3 (id=66): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r2, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 8.029031186s ago: executing program 4 (id=67): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x400c890) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.589962736s ago: executing program 4 (id=69): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) openat$userio(0xffffff9c, &(0x7f0000000080), 0x40080, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 7.477583793s ago: executing program 2 (id=71): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 7.39241728s ago: executing program 3 (id=72): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 6.807071527s ago: executing program 2 (id=73): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000540)=""/240, &(0x7f0000000280)=0xf0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x9, 0x8b, 0x1, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.067820698s ago: executing program 0 (id=74): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.67465603s ago: executing program 4 (id=75): syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2080) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.523857862s ago: executing program 2 (id=76): r0 = socket(0x2, 0x3, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 5.510602069s ago: executing program 1 (id=77): socket$kcm(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.465442331s ago: executing program 3 (id=78): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.438483613s ago: executing program 0 (id=79): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003100)="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", 0xd5c}, {&(0x7f0000000340)="61bf3039a3afe69d", 0x8}, {0x0}], 0x3}}], 0x1, 0x200088d5) 4.940439342s ago: executing program 0 (id=80): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x11ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) readv(r5, &(0x7f0000000880)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1) 4.889861879s ago: executing program 2 (id=81): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f00000000c0)="50416b67a2c5681c39fe32e111883962943964be9093a3880ab7552fee", 0x1d, 0x64000804, &(0x7f0000000100)={0xa, 0x4e20, 0xa, @loopback, 0x2}, 0x1c) r2 = open$dir(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x800, 0x8) r3 = openat(r2, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x6, 0x80000001) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.480334019s ago: executing program 1 (id=82): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000080)='./control\x00') 3.565008303s ago: executing program 4 (id=83): socket$vsock_stream(0x28, 0x1, 0x28) socket(0x10, 0x803, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xa3d9, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x800}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.372088945s ago: executing program 1 (id=84): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3.176427123s ago: executing program 3 (id=85): getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.956293458s ago: executing program 0 (id=86): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 2.570428717s ago: executing program 3 (id=87): syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) 2.167220664s ago: executing program 2 (id=88): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.901491007s ago: executing program 2 (id=89): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r2, 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 1.462366116s ago: executing program 3 (id=90): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc401020301090212"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 1.327484675s ago: executing program 4 (id=91): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) 1.267251122s ago: executing program 1 (id=92): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000800001c0012800900013b79007866726d000000000c925e"], 0xb4}, 0x1, 0x0, 0x0, 0x2404c881}, 0x61910926728ca924) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b", 0x72, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x40}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.023140012s ago: executing program 0 (id=93): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 918.840845ms ago: executing program 1 (id=94): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 0s ago: executing program 1 (id=95): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000300), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 66.953852][ T5828] cgroup: Unknown subsys name 'net' [ 67.086728][ T5828] cgroup: Unknown subsys name 'cpuset' [ 67.094908][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.563333][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.416104][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422506][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.250000][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.259056][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.266994][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.274986][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.283763][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.291430][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.299934][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.307425][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.314801][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.330118][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.338011][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.346165][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.353985][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.356594][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.361817][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.369397][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.376598][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.384254][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.390065][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.397928][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.403925][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.418048][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.428191][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.443091][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.455961][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.820028][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 72.879785][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 72.996948][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 73.029282][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 73.076860][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.085025][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.092408][ T5854] bridge_slave_0: entered allmulticast mode [ 73.100341][ T5854] bridge_slave_0: entered promiscuous mode [ 73.155521][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.163082][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.170286][ T5854] bridge_slave_1: entered allmulticast mode [ 73.177963][ T5854] bridge_slave_1: entered promiscuous mode [ 73.191898][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 73.256794][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.267062][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.274749][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.281970][ T5860] bridge_slave_0: entered allmulticast mode [ 73.288810][ T5860] bridge_slave_0: entered promiscuous mode [ 73.295876][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.303986][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.311183][ T5855] bridge_slave_0: entered allmulticast mode [ 73.318058][ T5855] bridge_slave_0: entered promiscuous mode [ 73.329786][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.337198][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.344850][ T5855] bridge_slave_1: entered allmulticast mode [ 73.351699][ T5855] bridge_slave_1: entered promiscuous mode [ 73.377347][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.387193][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.394519][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.401804][ T5860] bridge_slave_1: entered allmulticast mode [ 73.409139][ T5860] bridge_slave_1: entered promiscuous mode [ 73.438910][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.446190][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.453538][ T5857] bridge_slave_0: entered allmulticast mode [ 73.460229][ T5857] bridge_slave_0: entered promiscuous mode [ 73.488062][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.497462][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505228][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.512408][ T5857] bridge_slave_1: entered allmulticast mode [ 73.519326][ T5857] bridge_slave_1: entered promiscuous mode [ 73.537926][ T5854] team0: Port device team_slave_0 added [ 73.556990][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.584880][ T5854] team0: Port device team_slave_1 added [ 73.592469][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.616549][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.635701][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.670203][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.696893][ T5860] team0: Port device team_slave_0 added [ 73.711966][ T5855] team0: Port device team_slave_0 added [ 73.720513][ T5855] team0: Port device team_slave_1 added [ 73.742605][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.750136][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.776377][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.789937][ T5860] team0: Port device team_slave_1 added [ 73.805093][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.812289][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.819757][ T5859] bridge_slave_0: entered allmulticast mode [ 73.827084][ T5859] bridge_slave_0: entered promiscuous mode [ 73.853640][ T5857] team0: Port device team_slave_0 added [ 73.860063][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.867254][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.893661][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.913869][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.920868][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.947212][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.959618][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.967050][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.975383][ T5859] bridge_slave_1: entered allmulticast mode [ 73.982117][ T5859] bridge_slave_1: entered promiscuous mode [ 74.007185][ T5857] team0: Port device team_slave_1 added [ 74.018149][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.025374][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.051390][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.071812][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.079203][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.105281][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.117554][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.125034][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.151393][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.179811][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.186857][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.213301][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.230840][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.248264][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.261435][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.268591][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.295188][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.363831][ T5854] hsr_slave_0: entered promiscuous mode [ 74.370256][ T5854] hsr_slave_1: entered promiscuous mode [ 74.392573][ T5860] hsr_slave_0: entered promiscuous mode [ 74.401731][ T5860] hsr_slave_1: entered promiscuous mode [ 74.408269][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.416219][ T5860] Cannot create hsr debugfs directory [ 74.425350][ T5859] team0: Port device team_slave_0 added [ 74.434125][ T5859] team0: Port device team_slave_1 added [ 74.445147][ T5855] hsr_slave_0: entered promiscuous mode [ 74.451614][ T5855] hsr_slave_1: entered promiscuous mode [ 74.457942][ T5847] Bluetooth: hci2: command tx timeout [ 74.458487][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.464350][ T5847] Bluetooth: hci0: command tx timeout [ 74.473288][ T5855] Cannot create hsr debugfs directory [ 74.510751][ T5857] hsr_slave_0: entered promiscuous mode [ 74.517109][ T5857] hsr_slave_1: entered promiscuous mode [ 74.523663][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.531257][ T5857] Cannot create hsr debugfs directory [ 74.537326][ T5847] Bluetooth: hci1: command tx timeout [ 74.542959][ T55] Bluetooth: hci4: command tx timeout [ 74.543246][ T55] Bluetooth: hci3: command tx timeout [ 74.623329][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.630419][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.657523][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.691447][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.698642][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.724740][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.833248][ T5859] hsr_slave_0: entered promiscuous mode [ 74.839415][ T5859] hsr_slave_1: entered promiscuous mode [ 74.846060][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.853758][ T5859] Cannot create hsr debugfs directory [ 75.035733][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.050513][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.075019][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.101758][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.134990][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.146135][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.169537][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.193621][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.222795][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.239697][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.260661][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.297523][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.338087][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.363823][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.384125][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.410392][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.446459][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.454818][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.466571][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.488745][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.496573][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.514699][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.537795][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.545115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.598344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.605487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.626059][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.708187][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.720608][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.746036][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.753660][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.799953][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.807092][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.831348][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.852614][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.876391][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.892032][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.899186][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.920764][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.940405][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.947565][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.972118][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.999512][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.006805][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.026213][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.040728][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.047924][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.080027][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.087290][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.134680][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.141814][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.185498][ T5854] veth0_vlan: entered promiscuous mode [ 76.213780][ T5854] veth1_vlan: entered promiscuous mode [ 76.236284][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.280737][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.290465][ T5854] veth0_macvtap: entered promiscuous mode [ 76.301642][ T5854] veth1_macvtap: entered promiscuous mode [ 76.344266][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.367879][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.378054][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.410944][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.420325][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429950][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.438945][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.482583][ T5855] veth0_vlan: entered promiscuous mode [ 76.496539][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.520025][ T5857] veth0_vlan: entered promiscuous mode [ 76.533866][ T55] Bluetooth: hci2: command tx timeout [ 76.542971][ T55] Bluetooth: hci0: command tx timeout [ 76.562707][ T5855] veth1_vlan: entered promiscuous mode [ 76.573600][ T5857] veth1_vlan: entered promiscuous mode [ 76.582808][ T5859] veth0_vlan: entered promiscuous mode [ 76.613545][ T55] Bluetooth: hci3: command tx timeout [ 76.614433][ T5847] Bluetooth: hci1: command tx timeout [ 76.619021][ T55] Bluetooth: hci4: command tx timeout [ 76.677324][ T5860] veth0_vlan: entered promiscuous mode [ 76.686009][ T5855] veth0_macvtap: entered promiscuous mode [ 76.695710][ T5859] veth1_vlan: entered promiscuous mode [ 76.710990][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.716162][ T5860] veth1_vlan: entered promiscuous mode [ 76.726493][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.737279][ T5855] veth1_macvtap: entered promiscuous mode [ 76.790094][ T5860] veth0_macvtap: entered promiscuous mode [ 76.809799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.815880][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.828546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.835533][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.848584][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.862344][ T5860] veth1_macvtap: entered promiscuous mode [ 76.879836][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.895786][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.907706][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.927173][ T5857] veth0_macvtap: entered promiscuous mode [ 76.939893][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.949637][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959412][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.968839][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.994949][ T5859] veth0_macvtap: entered promiscuous mode [ 76.998623][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.007394][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.030259][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.040669][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.051523][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.062775][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.072669][ T5857] veth1_macvtap: entered promiscuous mode [ 77.082089][ T5859] veth1_macvtap: entered promiscuous mode [ 77.115225][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.127602][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.138921][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.172292][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.187197][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.227962][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.241260][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.266067][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.277858][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.287885][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.302290][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.318090][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.330842][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.358352][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.367670][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377212][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.389036][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.401120][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.412809][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.426304][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.436960][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.447669][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.457698][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.468636][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.480374][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.491129][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.504458][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.514468][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.525175][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.535110][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.545591][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.556441][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.581865][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591061][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600968][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.609891][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.637152][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.650387][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.661045][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.671846][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.682036][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.692552][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.702506][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.713062][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.723299][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.734192][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.746664][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.776679][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.786608][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.790208][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.804086][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.813381][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.822107][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.948390][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.982726][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.000209][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.035160][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.101345][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.109786][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.149065][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.168142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.211244][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.249657][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.318262][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.330342][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.354990][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.534348][ T9] usb 3-1: config 162 has an invalid interface number: 251 but max is 1 [ 78.563622][ T9] usb 3-1: config 162 has an invalid interface number: 209 but max is 1 [ 78.603703][ T9] usb 3-1: config 162 has no interface number 0 [ 78.610130][ T9] usb 3-1: config 162 has no interface number 1 [ 78.613429][ T55] Bluetooth: hci0: command tx timeout [ 78.622527][ T5847] Bluetooth: hci2: command tx timeout [ 78.665763][ T9] usb 3-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.680635][ T9] usb 3-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 78.692254][ T9] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 78.705184][ T5847] Bluetooth: hci4: command tx timeout [ 78.705671][ T55] Bluetooth: hci1: command tx timeout [ 78.710884][ T5847] Bluetooth: hci3: command tx timeout [ 78.723109][ T9] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 78.737545][ T9] usb 3-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 78.749991][ T9] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 78.762255][ T9] usb 3-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 78.778438][ T9] usb 3-1: config 162 interface 251 has no altsetting 0 [ 78.786134][ T9] usb 3-1: config 162 interface 209 has no altsetting 0 [ 78.795361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.797789][ T9] usb 3-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 78.804112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 78.806016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.826656][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.848050][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.872030][ T9] usb 3-1: Product: syz [ 78.883068][ T9] usb 3-1: Manufacturer: syz [ 78.895769][ T9] usb 3-1: SerialNumber: syz [ 78.923256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.953071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.023215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.063846][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 79.099264][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.124697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.133205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.141735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.150245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.168878][ T9] io_edgeport 3-1:162.251: required endpoints missing [ 79.285654][ T24] usb 4-1: config 0 has no interfaces? [ 79.315774][ T24] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 79.387465][ T9] io_edgeport 3-1:162.209: Edgeport 2 port adapter converter detected [ 79.403288][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.481343][ T24] usb 4-1: config 0 descriptor?? [ 79.785050][ T9] usb 3-1: ꒫ꕪ弃쿵㗑媖ꧺ蕞暘嗇䐨鍷Ŀ深ʼꠉꐎ댁괌鰃ꦞ￀ detected [ 79.896576][ T5922] syz.1.2 (5922): drop_caches: 2 [ 79.975541][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.022613][ T9] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 80.031480][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.065087][ T5903] usb 4-1: USB disconnect, device number 2 [ 80.112735][ T9] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 80.213372][ T5905] usb 3-1: USB disconnect, device number 2 [ 80.213443][ C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb [ 80.389158][ T5905] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 80.676540][ T5905] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 80.693292][ T5847] Bluetooth: hci0: command tx timeout [ 80.702956][ T5847] Bluetooth: hci2: command tx timeout [ 80.772930][ T5847] Bluetooth: hci1: command tx timeout [ 80.778382][ T5847] Bluetooth: hci4: command tx timeout [ 80.784130][ T5853] Bluetooth: hci3: command tx timeout [ 80.928910][ T5905] io_edgeport 3-1:162.209: device disconnected [ 82.913630][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.985291][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.116117][ T9] usb 4-1: config 0 has no interfaces? [ 83.137421][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 83.154711][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.186250][ T9] usb 4-1: Product: syz [ 83.193764][ T5892] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 83.237098][ T9] usb 4-1: Manufacturer: syz [ 83.241869][ T9] usb 4-1: SerialNumber: syz [ 83.263318][ T5892] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 83.288503][ T9] usb 4-1: config 0 descriptor?? [ 83.386285][ T5892] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 83.425911][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.488166][ T5892] usb 1-1: Product: syz [ 83.543824][ T5892] usb 1-1: Manufacturer: syz [ 83.548493][ T5892] usb 1-1: SerialNumber: syz [ 83.651653][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.819790][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 84.878404][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 84.920745][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 85.703604][ T975] usb 4-1: USB disconnect, device number 3 [ 86.356349][ T975] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.533231][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 86.683783][ T975] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 86.720718][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.739815][ T975] usb 4-1: config 0 has no interface number 0 [ 86.753356][ T975] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.790318][ T975] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.803933][ T47] cfg80211: failed to load regulatory.db [ 86.824043][ T975] usb 4-1: config 0 interface 52 has no altsetting 0 [ 86.848545][ T975] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 86.871231][ T975] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 86.886071][ T975] usb 4-1: Manufacturer: syz [ 86.907135][ T975] usb 4-1: config 0 descriptor?? [ 88.158479][ T975] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input5 [ 88.709873][ T9] usb 1-1: USB disconnect, device number 2 [ 88.834098][ T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.034724][ T975] usb 5-1: config 0 has no interfaces? [ 89.057881][ T975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 89.073104][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.091422][ T975] usb 5-1: Product: syz [ 89.097777][ T5892] usb 4-1: USB disconnect, device number 4 [ 89.103720][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 89.116419][ T975] usb 5-1: Manufacturer: syz [ 89.121384][ T975] usb 5-1: SerialNumber: syz [ 89.186824][ T6037] veth1_to_batadv: entered promiscuous mode [ 89.192993][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.284554][ T975] usb 5-1: config 0 descriptor?? [ 89.466367][ T9] usb 2-1: config 0 has no interfaces? [ 89.476774][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 89.486825][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.691075][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.891083][ T9] usb 2-1: Product: syz [ 89.923049][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 89.969025][ T9] usb 2-1: Manufacturer: syz [ 89.987667][ T47] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 90.000196][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.043002][ T47] usb 1-1: Product: syz [ 90.047257][ T47] usb 1-1: Manufacturer: syz [ 90.063828][ T47] usb 1-1: SerialNumber: syz [ 90.107139][ T47] usb 1-1: config 0 descriptor?? [ 90.131094][ T9] usb 2-1: SerialNumber: syz [ 90.148946][ T9] usb 2-1: config 0 descriptor?? [ 90.237625][ T47] as10x_usb: device has been detected [ 90.310038][ T47] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 90.355083][ T6037] random: crng reseeded on system resumption [ 90.571289][ T47] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 90.697514][ T47] as10x_usb: error during firmware upload part1 [ 90.716641][ T47] Registered device Sky IT Digital Key (green led) [ 90.724472][ T47] usb 1-1: USB disconnect, device number 3 [ 90.831477][ T6035] ALSA: seq fatal error: cannot create timer (-19) [ 91.047740][ T47] Unregistered device Sky IT Digital Key (green led) [ 91.050364][ T47] as10x_usb: device has been disconnected [ 91.563642][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 91.577636][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 91.681535][ T6056] syz.3.32 (6056) used greatest stack depth: 20096 bytes left [ 91.691330][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.733300][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.773346][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.815641][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.883165][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.043166][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.124492][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.266033][ T24] usb 5-1: USB disconnect, device number 2 [ 92.293121][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.417146][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.504317][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.592550][ T9] usb 2-1: USB disconnect, device number 2 [ 93.694345][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 93.859555][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 93.877484][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.888367][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 93.900362][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 6400, setting to 64 [ 94.040008][ T10] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 94.060103][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.103023][ T10] usb 5-1: Product: syz [ 94.107261][ T10] usb 5-1: Manufacturer: syz [ 94.111891][ T10] usb 5-1: SerialNumber: syz [ 94.208650][ T10] usb 5-1: config 0 descriptor?? [ 94.234513][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.245296][ T10] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 94.258783][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 94.623029][ T10] usb 5-1: USB disconnect, device number 3 [ 94.630484][ T10] cypress_m8 5-1:0.0: device disconnected [ 97.805243][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.994422][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 98.104980][ T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 98.142908][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.172880][ T9] usb 1-1: config 0 has no interface number 0 [ 98.199565][ T9] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.247505][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.288803][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.323032][ T9] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.341502][ T6134] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 98.366943][ T6134] netlink: 68 bytes leftover after parsing attributes in process `syz.3.53'. [ 98.376288][ T9] usb 1-1: config 0 interface 52 has no altsetting 0 [ 98.405908][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 98.423993][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.457553][ T9] usb 1-1: config 0 descriptor?? [ 98.983095][ T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input6 [ 99.233211][ T5861] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.899398][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 99.918143][ T5861] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 99.929135][ T5861] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.952651][ T24] usb 1-1: USB disconnect, device number 4 [ 99.952726][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 99.985406][ T5861] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.000057][ T5861] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 100.014830][ T5195] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 100.080909][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.090251][ T5861] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.124856][ T5861] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.143011][ T5861] usb 4-1: Product: syz [ 100.152409][ T5861] usb 4-1: Manufacturer: syz [ 100.528958][ T5861] usb 4-1: SerialNumber: syz [ 100.557971][ T5861] usb 4-1: config 0 descriptor?? [ 100.585267][ T5861] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.626337][ T5861] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.132699][ T6142] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 101.145150][ T9] usb 4-1: USB disconnect, device number 5 [ 101.151004][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 101.256148][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 102.021483][ T30] audit: type=1326 audit(1743165489.423:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.110294][ T30] audit: type=1326 audit(1743165489.463:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.154456][ T30] audit: type=1326 audit(1743165489.463:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.286941][ T30] audit: type=1326 audit(1743165489.463:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.343669][ T30] audit: type=1326 audit(1743165489.463:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.366790][ T30] audit: type=1326 audit(1743165489.463:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.399691][ T30] audit: type=1326 audit(1743165489.463:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.435445][ T30] audit: type=1326 audit(1743165489.463:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.458385][ T30] audit: type=1326 audit(1743165489.463:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 102.943909][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 105.678923][ T6223] tipc: Started in network mode [ 105.684217][ T6223] tipc: Node identity 4, cluster identity 4711 [ 105.691598][ T6223] tipc: Node number set to 4 [ 106.703045][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.933274][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 107.150008][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.164110][ T10] usb 3-1: config 0 has no interface number 0 [ 107.189948][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 107.199306][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.207455][ T10] usb 3-1: Product: syz [ 107.213009][ T10] usb 3-1: Manufacturer: syz [ 107.221434][ T10] usb 3-1: SerialNumber: syz [ 107.227503][ T10] usb 3-1: config 0 descriptor?? [ 107.256851][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 107.686416][ T6246] Zero length message leads to an empty skb [ 107.776530][ T10] gspca_spca1528: reg_w err -71 [ 107.958563][ T6252] input: syz0 as /devices/virtual/input/input7 [ 108.004194][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 108.124598][ T10] usb 3-1: USB disconnect, device number 3 [ 108.681668][ T5861] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.843244][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 108.858213][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.868941][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.885850][ T5861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.897374][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.922962][ T5861] usb 1-1: Product: syz [ 108.939717][ T5861] usb 1-1: Manufacturer: syz [ 109.009808][ T5861] usb 1-1: SerialNumber: syz [ 109.266876][ T5861] usb 1-1: 0:2 : does not exist [ 109.289673][ T5861] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 109.438800][ T5861] usb 1-1: USB disconnect, device number 5 [ 109.749550][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.822974][ T5905] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.166815][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 110.173893][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.221050][ T6286] random: crng reseeded on system resumption [ 110.824301][ T5905] usb 4-1: config 0 has no interfaces? [ 110.832031][ T5905] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 110.841548][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.871882][ T5905] usb 4-1: Product: syz [ 110.880658][ T5905] usb 4-1: Manufacturer: syz [ 110.902478][ T5905] usb 4-1: SerialNumber: syz [ 110.936189][ T5905] usb 4-1: config 0 descriptor?? [ 111.029080][ T6289] [ 111.031471][ T6289] ====================================================== [ 111.038489][ T6289] WARNING: possible circular locking dependency detected [ 111.045602][ T6289] 6.14.0-syzkaller-07422-gacb4f33713b9 #0 Not tainted [ 111.052357][ T6289] ------------------------------------------------------ [ 111.059387][ T6289] syz.1.95/6289 is trying to acquire lock: [ 111.065228][ T6289] ffff88805a5014d0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xee/0xc60 [ 111.076708][ T6289] [ 111.076708][ T6289] but task is already holding lock: [ 111.084104][ T6289] ffff88805a500258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x234/0x540 [ 111.093131][ T6289] [ 111.093131][ T6289] which lock already depends on the new lock. [ 111.093131][ T6289] [ 111.103559][ T6289] [ 111.103559][ T6289] the existing dependency chain (in reverse order) is: [ 111.112595][ T6289] [ 111.112595][ T6289] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 111.120385][ T6289] lock_acquire+0x116/0x2f0 [ 111.125453][ T6289] lock_sock_nested+0x48/0x100 [ 111.130772][ T6289] smc_listen_out+0x11b/0x3e0 [ 111.135999][ T6289] process_scheduled_works+0xac3/0x18e0 [ 111.142093][ T6289] worker_thread+0x870/0xd50 [ 111.147268][ T6289] kthread+0x7b7/0x940 [ 111.151890][ T6289] ret_from_fork+0x4b/0x80 [ 111.156854][ T6289] ret_from_fork_asm+0x1a/0x30 [ 111.162176][ T6289] [ 111.162176][ T6289] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 111.172391][ T6289] validate_chain+0xa69/0x24e0 [ 111.177706][ T6289] __lock_acquire+0xad5/0xd80 [ 111.182966][ T6289] lock_acquire+0x116/0x2f0 [ 111.188054][ T6289] __flush_work+0x75b/0xc60 [ 111.193098][ T6289] __cancel_work_sync+0xbc/0x110 [ 111.198555][ T6289] smc_clcsock_release+0x62/0xf0 [ 111.204014][ T6289] __smc_release+0x683/0x800 [ 111.209119][ T6289] smc_close_non_accepted+0xd8/0x1f0 [ 111.214920][ T6289] smc_close_active+0xadb/0xe90 [ 111.220293][ T6289] __smc_release+0xa0/0x800 [ 111.225311][ T6289] smc_release+0x2dc/0x540 [ 111.230253][ T6289] sock_close+0xbc/0x240 [ 111.235019][ T6289] __fput+0x3e9/0x9f0 [ 111.239520][ T6289] task_work_run+0x251/0x310 [ 111.244632][ T6289] syscall_exit_to_user_mode+0x13f/0x340 [ 111.250804][ T6289] __do_fast_syscall_32+0xc1/0x110 [ 111.256456][ T6289] do_fast_syscall_32+0x34/0x80 [ 111.261866][ T6289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.268735][ T6289] [ 111.268735][ T6289] other info that might help us debug this: [ 111.268735][ T6289] [ 111.279062][ T6289] Possible unsafe locking scenario: [ 111.279062][ T6289] [ 111.286534][ T6289] CPU0 CPU1 [ 111.291913][ T6289] ---- ---- [ 111.297274][ T6289] lock(sk_lock-AF_SMC/1); [ 111.301789][ T6289] lock((work_completion)(&new_smc->smc_listen_work)); [ 111.311246][ T6289] lock(sk_lock-AF_SMC/1); [ 111.318276][ T6289] lock((work_completion)(&new_smc->smc_listen_work)); [ 111.325212][ T6289] [ 111.325212][ T6289] *** DEADLOCK *** [ 111.325212][ T6289] [ 111.333355][ T6289] 3 locks held by syz.1.95/6289: [ 111.338285][ T6289] #0: ffff88805c1d3808 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 111.348490][ T6289] #1: ffff88805a500258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x234/0x540 [ 111.357923][ T6289] #2: ffffffff8ed3a2a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xee/0xc60 [ 111.367073][ T6289] [ 111.367073][ T6289] stack backtrace: [ 111.372969][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.1.95 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 111.372988][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.373000][ T6289] Call Trace: [ 111.373007][ T6289] [ 111.373013][ T6289] dump_stack_lvl+0x241/0x360 [ 111.373038][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.373057][ T6289] ? __pfx__printk+0x10/0x10 [ 111.373076][ T6289] ? print_lock+0x171/0x1a0 [ 111.373091][ T6289] print_circular_bug+0x2e1/0x300 [ 111.373109][ T6289] check_noncircular+0x142/0x160 [ 111.373127][ T6289] validate_chain+0xa69/0x24e0 [ 111.373146][ T6289] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 111.373163][ T6289] ? look_up_lock_class+0x7b/0x170 [ 111.373182][ T6289] ? register_lock_class+0x54/0x330 [ 111.373204][ T6289] __lock_acquire+0xad5/0xd80 [ 111.373228][ T6289] lock_acquire+0x116/0x2f0 [ 111.373249][ T6289] ? __flush_work+0xee/0xc60 [ 111.373267][ T6289] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.373283][ T6289] ? __flush_work+0xee/0xc60 [ 111.373299][ T6289] __flush_work+0x75b/0xc60 [ 111.373314][ T6289] ? __flush_work+0xee/0xc60 [ 111.373335][ T6289] ? __flush_work+0xee/0xc60 [ 111.373352][ T6289] ? __pfx___flush_work+0x10/0x10 [ 111.373369][ T6289] ? __pfx_wq_barrier_func+0x10/0x10 [ 111.373386][ T6289] ? __pfx___cancel_work+0x10/0x10 [ 111.373402][ T6289] ? __local_bh_enable_ip+0x168/0x200 [ 111.373424][ T6289] ? __smc_release+0x67b/0x800 [ 111.373437][ T6289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 111.373459][ T6289] ? __smc_release+0x67b/0x800 [ 111.373472][ T6289] __cancel_work_sync+0xbc/0x110 [ 111.373491][ T6289] smc_clcsock_release+0x62/0xf0 [ 111.373512][ T6289] __smc_release+0x683/0x800 [ 111.373527][ T6289] smc_close_non_accepted+0xd8/0x1f0 [ 111.373543][ T6289] smc_close_active+0xadb/0xe90 [ 111.373562][ T6289] ? __pfx_sock_def_readable+0x10/0x10 [ 111.373583][ T6289] __smc_release+0xa0/0x800 [ 111.373597][ T6289] smc_release+0x2dc/0x540 [ 111.373612][ T6289] sock_close+0xbc/0x240 [ 111.373629][ T6289] ? __pfx_sock_close+0x10/0x10 [ 111.373648][ T6289] __fput+0x3e9/0x9f0 [ 111.373666][ T6289] task_work_run+0x251/0x310 [ 111.373688][ T6289] ? __pfx_task_work_run+0x10/0x10 [ 111.373709][ T6289] ? syscall_exit_to_user_mode+0xa3/0x340 [ 111.373730][ T6289] syscall_exit_to_user_mode+0x13f/0x340 [ 111.373750][ T6289] __do_fast_syscall_32+0xc1/0x110 [ 111.373771][ T6289] ? exc_page_fault+0x599/0x8b0 [ 111.373790][ T6289] do_fast_syscall_32+0x34/0x80 [ 111.373810][ T6289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.373832][ T6289] RIP: 0023:0xf73ed579 [ 111.373848][ T6289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 111.373860][ T6289] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 111.373875][ T6289] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 111.373885][ T6289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.373893][ T6289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.373901][ T6289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.373910][ T6289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.373923][ T6289] [ 113.010037][ T6283] PM: hibernation: Basic memory bitmaps freed [ 113.035737][ T9] usb 4-1: USB disconnect, device number 6