last executing test programs: 10.476038341s ago: executing program 3 (id=719): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200cc084, &(0x7f0000000280)={0xa, 0xc20, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000016"], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000240), &(0x7f0000000440)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x7c}}, 0x20000040) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x3, 0x5) 8.827992192s ago: executing program 3 (id=725): socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, &(0x7f0000000240)=""/167, 0xa7) 7.120099705s ago: executing program 3 (id=735): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 6.158740786s ago: executing program 3 (id=739): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.127942657s ago: executing program 0 (id=740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000000) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x402) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.121570868s ago: executing program 1 (id=741): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, &(0x7f00000001c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.955976995s ago: executing program 1 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x0, 0x12, 0x1, 0x3, 0x0, 0x4, 0x0}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000), 0x2, 0x2) 4.789684965s ago: executing program 0 (id=746): socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, &(0x7f0000000240)=""/167, 0xa7) 4.458922099s ago: executing program 4 (id=749): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) 3.705902601s ago: executing program 3 (id=751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket(0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}], 0x1, 0x1404c894) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0xc) 3.094349807s ago: executing program 1 (id=752): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, &(0x7f00000001c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.600025809s ago: executing program 2 (id=753): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.597401369s ago: executing program 4 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.507346043s ago: executing program 2 (id=755): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080), 0x0, 0x8001, 0x0) 2.429540256s ago: executing program 4 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000000) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x402) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.403306797s ago: executing program 0 (id=757): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000100850000000e000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) tkill(r1, 0xb) 2.152160558s ago: executing program 0 (id=758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x7) 2.035389333s ago: executing program 1 (id=759): syz_emit_ethernet(0xdf, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@snap={0xa9, 0xaa, '.', "f4ddb3", 0x16, "6c469260b0c816320e1a9a369db2133d1d54181b78410ae1c85f6183b3a81c38cac236f23de69e075ccfd7f8b7c2a1accf971fd2858b1e6441440b23e0be23d0c96265d9d782b6812b79cd15bf6db1244cca9ed3b2f2b17ca4755a3d71fb1717227cbdad05a575f8354e492ee1bffc8cdf3aa6dfec5d3aa9ad87fab175f45a1f93bfff76f4b63583e0aa4b200a8e3104e79b7f9b71201de7f870d9338aca0ba12e88b3d0b7af3466b9720bee12c7f18581c474e6e455955809ed35ceaf156f1271c7c62b8e37830679"}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x200000, 0x2, 0x0, 0x1, 0x3, 0xfd6}, 0xfe5a) 1.832147281s ago: executing program 3 (id=760): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d445000904"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.752026075s ago: executing program 1 (id=761): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x165542, 0x40) ftruncate(r6, 0x2007ffd) sendfile(r4, r5, 0x0, 0x1000a3) 1.440018718s ago: executing program 4 (id=762): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="24002d80050001009c000000050001000d000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20044010) 1.287974265s ago: executing program 4 (id=763): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x40af, &(0x7f0000000500)={0x0, 0x7281, 0x8, 0x3, 0x51}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000000)=[0x9, 0xc], 0x2) 784.094327ms ago: executing program 1 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x0, 0x12, 0x1, 0x3, 0x0, 0x4, 0x0}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000), 0x2, 0x2) 721.393199ms ago: executing program 2 (id=765): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x15, 0x7, 0x0, 0x0, 0x10, 0x0}) 563.399926ms ago: executing program 0 (id=766): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)) 476.16903ms ago: executing program 0 (id=767): socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, &(0x7f0000000240)=""/167, 0xa7) 476.00827ms ago: executing program 2 (id=768): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x20000006}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x10001, 0x2) 249.800729ms ago: executing program 2 (id=769): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x20f0f002, 0x5}) 76.535517ms ago: executing program 2 (id=770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket(0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}], 0x1, 0x1404c894) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0xc) 0s ago: executing program 4 (id=771): syz_emit_ethernet(0xdf, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@snap={0xa9, 0xaa, '.', "f4ddb3", 0x16, "6c469260b0c816320e1a9a369db2133d1d54181b78410ae1c85f6183b3a81c38cac236f23de69e075ccfd7f8b7c2a1accf971fd2858b1e6441440b23e0be23d0c96265d9d782b6812b79cd15bf6db1244cca9ed3b2f2b17ca4755a3d71fb1717227cbdad05a575f8354e492ee1bffc8cdf3aa6dfec5d3aa9ad87fab175f45a1f93bfff76f4b63583e0aa4b200a8e3104e79b7f9b71201de7f870d9338aca0ba12e88b3d0b7af3466b9720bee12c7f18581c474e6e455955809ed35ceaf156f1271c7c62b8e37830679"}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x200000, 0x2, 0x0, 0x1, 0x3, 0xfd6}, 0xfe5a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 49.489272][ T4173] cgroup: Unknown subsys name 'net' [ 49.626461][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.820788][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.214115][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.238552][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 52.253199][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.326132][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.387564][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.430255][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.437490][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.445974][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.453887][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.460933][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.469067][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.493129][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.500239][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.508483][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.515765][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.522982][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.530530][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.542604][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.549647][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.557412][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.589135][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.596241][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.604381][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.646960][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.657530][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.666889][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.674541][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.682513][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.701713][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.712722][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.733152][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.740194][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.747938][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.755060][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.762864][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.770403][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.779543][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.797729][ T4183] team0: Port device team_slave_0 added [ 52.809058][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.816339][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.824295][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.832510][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.855763][ T4183] team0: Port device team_slave_1 added [ 52.863204][ T4189] team0: Port device team_slave_0 added [ 52.894945][ T4189] team0: Port device team_slave_1 added [ 52.909662][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.920374][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.932227][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.943266][ T4196] team0: Port device team_slave_0 added [ 52.961058][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.976141][ T4196] team0: Port device team_slave_1 added [ 52.990156][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.997113][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.023319][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.062643][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.069586][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.096101][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.107478][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.114859][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.140773][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.153761][ T4193] team0: Port device team_slave_0 added [ 53.165025][ T4184] team0: Port device team_slave_0 added [ 53.178037][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.185066][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.211064][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.230240][ T4193] team0: Port device team_slave_1 added [ 53.243667][ T4184] team0: Port device team_slave_1 added [ 53.250260][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.257235][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.283400][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.317939][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.324906][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.350899][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.374802][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.381769][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.407819][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.428691][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.435294][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.450231][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.457289][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.483198][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.494906][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.502233][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.528333][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.558987][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.566286][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.592443][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.618910][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.625475][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.632365][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.640086][ T4189] Cannot create hsr debugfs directory [ 53.648179][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.654966][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.661399][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.669074][ T4196] Cannot create hsr debugfs directory [ 53.762755][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.769347][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.776287][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.783944][ T4184] Cannot create hsr debugfs directory [ 53.838436][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.845306][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.851998][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.859549][ T4193] Cannot create hsr debugfs directory [ 53.912292][ T3162] Bluetooth: hci3: command 0x0409 tx timeout [ 53.912292][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 53.912715][ T3162] Bluetooth: hci2: command 0x0409 tx timeout [ 53.918414][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 53.924496][ T3162] Bluetooth: hci0: command 0x0409 tx timeout [ 54.081732][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.092399][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.101215][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.109947][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.157264][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.166427][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.183556][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.201403][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.246555][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.257276][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.268711][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.279773][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.363714][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.381855][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.391480][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.408892][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.429722][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.438086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.447286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.462733][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.473937][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.503910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.517597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.527696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.534875][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.544289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.553269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.560818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.572758][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.583201][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.594609][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.603095][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.610125][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.623601][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.635040][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.645438][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.655260][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.665883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.688455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.703662][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.712869][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.721384][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.728546][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.738552][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.746839][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.755336][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.782942][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.790586][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.799707][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.808172][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.815233][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.824802][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.834453][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.843232][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.851419][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.860067][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.868726][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.884460][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.894885][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.904369][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.914892][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.923953][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.932900][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.956815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.965337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.974622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.983660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.992948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.001080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.014690][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.029709][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.045437][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.056568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.067682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.087208][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.103897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.118521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.127524][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.134624][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.148933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.157623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.166242][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.173347][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.181761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.195747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.217593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.230984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.254459][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.263291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.272258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.279681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.296376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.306182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.323006][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.336455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.367875][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.379576][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.388875][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.395976][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.405422][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.413935][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.422328][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.429349][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.437959][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.446974][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.455868][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.464995][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.473702][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.482321][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.490528][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.499190][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.511018][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.542938][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.550650][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.558751][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.569187][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.577348][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.585866][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.594538][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.602523][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.610055][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.618304][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.627632][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.636163][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.644880][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.652830][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.661209][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.682363][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.689174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.699717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.711816][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.725461][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.747535][ T4183] device veth0_vlan entered promiscuous mode [ 55.779201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.791556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.808186][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.815312][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.829925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.838624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.848382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.857275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.866345][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.873673][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.881320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.890331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.898226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.918242][ T4183] device veth1_vlan entered promiscuous mode [ 55.946710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.959093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.968524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.977381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.986554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.991936][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 56.002255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.010374][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 56.022985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.031216][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 56.033663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.045676][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 56.045713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.052746][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 56.065441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.088160][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.097379][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.106273][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.115872][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.124536][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.147215][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.159123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.167306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.175878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.186794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.197092][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.211976][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.235249][ T4183] device veth0_macvtap entered promiscuous mode [ 56.270171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.290117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.301425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.310152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.319153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.327972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.335792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.345737][ T4189] device veth0_vlan entered promiscuous mode [ 56.356085][ T4183] device veth1_macvtap entered promiscuous mode [ 56.377745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.386806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.413067][ T4189] device veth1_vlan entered promiscuous mode [ 56.438937][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.464231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.481163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.490876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.500029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.508799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.516949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.528591][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.536875][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.546462][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.557567][ T4184] device veth0_vlan entered promiscuous mode [ 56.571554][ T4189] device veth0_macvtap entered promiscuous mode [ 56.585272][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.595959][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.605707][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.616372][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.628388][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.638804][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.647629][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.660008][ T4189] device veth1_macvtap entered promiscuous mode [ 56.686786][ T4184] device veth1_vlan entered promiscuous mode [ 56.693939][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.702700][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.710757][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.718762][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.746883][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.758562][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.769701][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.780802][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.790928][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.802900][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.813674][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.822284][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.830693][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.839601][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.849210][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.857725][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.866444][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.875848][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.908210][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918017][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.928260][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.937093][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.946895][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.957321][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.967790][ T4196] device veth0_vlan entered promiscuous mode [ 57.004235][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.012748][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.020300][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.029814][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.048784][ T4196] device veth1_vlan entered promiscuous mode [ 57.056620][ T4184] device veth0_macvtap entered promiscuous mode [ 57.071042][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.079895][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.087929][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.097304][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.120571][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.129671][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.158640][ T4184] device veth1_macvtap entered promiscuous mode [ 57.168896][ T4193] device veth0_vlan entered promiscuous mode [ 57.180425][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.188966][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.197121][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.205116][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.213362][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.221430][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.230677][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.240999][ T4196] device veth0_macvtap entered promiscuous mode [ 57.267301][ T4193] device veth1_vlan entered promiscuous mode [ 57.282538][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.290202][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.299571][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.307830][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.318400][ T4196] device veth1_macvtap entered promiscuous mode [ 57.348872][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.361149][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.372797][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.378292][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.380686][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.391132][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.393259][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.454254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.455481][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.469894][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.470358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.487132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.496803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.507184][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.518556][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.529562][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.540102][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.550140][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.560587][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.571341][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.581358][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.592433][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.603203][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.613734][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.629481][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.644538][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.662352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.671472][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.677679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.689425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.698274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.707152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.716977][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.727773][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737925][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.750877][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.762756][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.773534][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.784828][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.793490][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.802475][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.811180][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.820158][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.842389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.851223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.860266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.871240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.888174][ T4193] device veth0_macvtap entered promiscuous mode [ 57.900310][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.909383][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.919027][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927985][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.953824][ T4193] device veth1_macvtap entered promiscuous mode [ 58.054802][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.067965][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.078820][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 58.082948][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.086015][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 58.096059][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.112093][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.123477][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.133627][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.144423][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.161353][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.179444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.218266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.277620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.349381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.512723][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.639394][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.712537][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.823760][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.913293][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.016887][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 59.023355][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 59.047656][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.063302][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.084069][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.107858][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.119112][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.137042][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.151089][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.169585][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.174990][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.185827][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.200726][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.240577][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.254585][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.281904][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.348964][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.388210][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.406433][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.415609][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.423107][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.424889][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.471710][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.471996][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.498735][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.511361][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.521039][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.548927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.559799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.595200][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.613837][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.634053][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.690481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.984985][ T4233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.073411][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 60.162234][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 60.701711][ T4233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 60.754647][ T4233] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 60.775284][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.795298][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.842663][ T4312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.032423][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 61.038683][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 61.071241][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 61.155162][ T4299] usb 4-1: USB disconnect, device number 2 [ 62.312704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.089010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 63.101616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.110632][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.119580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.128557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.241645][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.250636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.046739][ T4367] ./file0: Can't open blockdev [ 64.148919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.211790][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.216916][ T4315] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.228261][ T4315] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 67.261727][ T4315] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 67.296746][ T4315] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.331663][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.363706][ T4427] binder: 4423:4427 ioctl 0 200000000040 returned -22 [ 67.472124][ T4404] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.586626][ T4424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34'. [ 67.595905][ T4424] Zero length message leads to an empty skb [ 69.361834][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 69.677503][ T4315] usb 5-1: USB disconnect, device number 2 [ 71.128514][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.135066][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.934513][ T4512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 73.941134][ T4512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 76.010441][ T4532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 76.036996][ T4532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 76.326720][ T1326] cfg80211: failed to load regulatory.db [ 77.152530][ T1326] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 77.152593][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.471954][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 77.641779][ T1107] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 77.650942][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.661136][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.671395][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 77.714745][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 77.741699][ T1107] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.792155][ T1326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.802334][ T1107] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.811360][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.826095][ T1326] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=79.04 [ 77.872034][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.926083][ T1326] usb 5-1: config 0 descriptor?? [ 77.993101][ T1326] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 78.181870][ T1107] usb 2-1: usb_control_msg returned -32 [ 78.187598][ T1107] usbtmc 2-1:16.0: can't read capabilities [ 78.225355][ T4234] usb 5-1: USB disconnect, device number 3 [ 78.812303][ T4558] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 79.062921][ T4234] usb 2-1: USB disconnect, device number 2 [ 79.683140][ T4567] xt_l2tp: v2 sid > 0xffff: 117440512 [ 80.759655][ T3162] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.541834][ T3162] usb 5-1: Using ep0 maxpacket: 32 [ 83.101768][ T3162] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.122939][ T3162] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.181712][ T3162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.230402][ T3162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.371840][ T3162] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.394314][ T3162] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.432723][ T3162] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.460562][ T3162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.531008][ T3162] usb 5-1: config 0 descriptor?? [ 83.588884][ T3162] usb 5-1: can't set config #0, error -71 [ 83.631380][ T3162] usb 5-1: USB disconnect, device number 4 [ 84.356015][ T4622] xt_l2tp: v2 sid > 0xffff: 117440512 [ 85.889282][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 87.869897][ T4676] sched: RT throttling activated [ 88.808227][ T4686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.110'. [ 88.915288][ T4691] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 89.007441][ T4686] input: syz1 as /devices/virtual/input/input5 [ 90.026089][ T4718] xt_l2tp: v2 sid > 0xffff: 117440512 [ 90.811166][ T4723] team0: Device xfrm1 is of different type [ 90.927979][ T4729] device vlan0 entered promiscuous mode [ 94.640247][ T4763] overlayfs: unrecognized mount option "verity=on" or missing value [ 97.021696][ T3162] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.333384][ T4803] xt_l2tp: v2 sid > 0xffff: 117440512 [ 97.981801][ T3162] usb 2-1: Using ep0 maxpacket: 8 [ 98.101774][ T3162] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.419763][ T3162] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.509431][ T3162] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.633468][ T3162] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.651330][ T3162] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.665796][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.051784][ T3162] usb 2-1: usb_control_msg returned -71 [ 100.070383][ T3162] usbtmc 2-1:16.0: can't read capabilities [ 100.615811][ T3162] usb 2-1: USB disconnect, device number 3 [ 100.630956][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.702649][ T4234] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.312851][ T4850] xt_l2tp: v2 sid > 0xffff: 117440512 [ 102.696730][ T4877] capability: warning: `syz.4.161' uses 32-bit capabilities (legacy support in use) [ 102.712830][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 105.958396][ T3162] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.331785][ T3162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.353575][ T3162] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.899901][ T3162] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.911096][ T3162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.941772][ T3162] usb 3-1: can't set config #1, error -71 [ 107.952704][ T3162] usb 3-1: USB disconnect, device number 2 [ 108.841692][ T3162] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.008607][ T4950] process 'syz.4.183' launched './file0' with NULL argv: empty string added [ 110.071963][ T3162] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 110.113436][ T3162] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 110.310612][ T4953] ODEBUG: Out of memory. ODEBUG disabled [ 110.311765][ T3162] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 110.439732][ T3162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.579475][ T3162] usb 3-1: Product: syz [ 110.594429][ T3162] usb 3-1: Manufacturer: syz [ 110.599029][ T3162] usb 3-1: SerialNumber: syz [ 110.688422][ T3162] usb 3-1: config 0 descriptor?? [ 110.841985][ T4920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.851919][ T4920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.882481][ T3162] usb 3-1: ucan: probing device on interface #0 [ 110.911766][ T3162] usb 3-1: ucan: invalid EP count (1) [ 110.917199][ T3162] usb 3-1: ucan: probe failed; try to update the device firmware [ 111.463045][ T3162] usb 3-1: USB disconnect, device number 3 [ 114.369494][ T5002] sd 0:0:1:0: device reset [ 114.461822][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.353594][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.365400][ T5041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.389657][ T4292] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.417888][ T4292] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.045615][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.471733][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 121.611800][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 121.651667][ T13] usb 1-1: can't read configurations, error -71 [ 121.831693][ T4292] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.131768][ T4292] usb 3-1: Using ep0 maxpacket: 16 [ 122.251993][ T4292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.304583][ T4292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.851779][ T4315] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 122.861937][ T4292] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.889346][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.906298][ T4292] usb 3-1: Product: syz [ 122.910770][ T4292] usb 3-1: Manufacturer: syz [ 123.059762][ T4292] usb 3-1: SerialNumber: syz [ 123.559892][ T5117] xt_hashlimit: max too large, truncated to 1048576 [ 124.863882][ T4315] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 124.875089][ T4292] usb 3-1: cannot find UAC_HEADER [ 124.889787][ T4292] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 124.898364][ T4292] usb 3-1: USB disconnect, device number 4 [ 126.055190][ T4329] udevd[4329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.185570][ T4315] usb 2-1: string descriptor 0 read error: -71 [ 126.334304][ T4315] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 126.611677][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.658715][ T4315] usb 2-1: can't set config #7, error -71 [ 127.370326][ T4315] usb 2-1: USB disconnect, device number 4 [ 127.621711][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.646416][ T5157] xt_l2tp: v2 sid > 0xffff: 117440512 [ 128.371690][ T26] usb 5-1: device descriptor read/64, error -71 [ 128.494310][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 128.503805][ T5168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 128.531703][ T5168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.540693][ T5168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.549455][ T5168] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.558541][ T5168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.641896][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.861687][ T26] usb 5-1: device descriptor read/64, error -71 [ 129.391881][ T26] usb usb5-port1: attempt power cycle [ 129.558803][ T5174] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.613388][ T5174] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 129.628957][ T5174] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 129.639105][ T5174] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 129.653014][ T5174] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 129.661361][ T5174] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 129.675227][ T5174] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 129.686627][ T5174] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 129.702839][ T5174] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 129.711305][ T5174] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 131.357378][ T5200] xt_l2tp: v2 sid > 0xffff: 117440512 [ 132.554705][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.561017][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658614][ T5205] ceph: No mds server is up or the cluster is laggy [ 132.700630][ T7] libceph: connect (1)[c::]:6789 error -101 [ 132.760837][ T5211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.824204][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 133.079601][ T5211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.192797][ T13] libceph: connect (1)[c::]:6789 error -101 [ 133.246501][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 133.326482][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 136.581761][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.034481][ T5244] xt_l2tp: v2 sid > 0xffff: 117440512 [ 138.099875][ T5254] device vlan2 entered promiscuous mode [ 138.175662][ T5254] device bridge0 entered promiscuous mode [ 140.986985][ T5313] xt_l2tp: v2 sid > 0xffff: 117440512 [ 141.677404][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.696054][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.704565][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.789625][ T5314] device vlan2 left promiscuous mode [ 141.795234][ T5314] device bridge0 left promiscuous mode [ 142.367877][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.403677][ T5319] device bridge_slave_0 left promiscuous mode [ 142.421545][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.498984][ T5319] device bridge_slave_1 left promiscuous mode [ 142.537631][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.568725][ T5319] bond0: (slave bond_slave_0): Releasing backup interface [ 142.660080][ T5319] bond0: (slave bond_slave_1): Releasing backup interface [ 142.806571][ T5319] team0: Port device team_slave_0 removed [ 142.853518][ T5319] team0: Port device team_slave_1 removed [ 142.869099][ T5319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.878047][ T5319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.917225][ T5319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.937520][ T5319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.076416][ T5319] syz.2.290 (5319) used greatest stack depth: 20032 bytes left [ 143.632242][ T4256] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.750838][ T5349] xt_l2tp: v2 sid > 0xffff: 117440512 [ 144.421753][ T4256] usb 2-1: device descriptor read/64, error -71 [ 144.519720][ T5353] overlayfs: overlapping lowerdir path [ 144.563992][ T5353] overlayfs: failed to verify origin (64/file0, ino=355, err=-116) [ 144.602007][ T5353] overlayfs: failed to verify upper root origin [ 144.782863][ T4256] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.561688][ T4256] usb 2-1: device descriptor read/64, error -71 [ 145.681826][ T4256] usb usb2-port1: attempt power cycle [ 146.101742][ T4256] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.371688][ T4256] usb 2-1: device not accepting address 7, error -71 [ 146.621763][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.052100][ T4315] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 147.080713][ T4315] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 147.158575][ T4315] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 147.549298][ T5390] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.574118][ T5390] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.676393][ T4315] usb 4-1: config 220 has no interface number 2 [ 147.682946][ T4315] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 147.696278][ T4315] usb 4-1: config 220 interface 0 has no altsetting 0 [ 147.703273][ T4315] usb 4-1: config 220 interface 76 has no altsetting 0 [ 147.710128][ T4315] usb 4-1: config 220 interface 1 has no altsetting 0 [ 147.838918][ T5400] xt_l2tp: v2 sid > 0xffff: 117440512 [ 147.902222][ T4315] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 147.974161][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.170419][ T4315] usb 4-1: Product: syz [ 148.253880][ T4315] usb 4-1: Manufacturer: syz [ 148.347588][ T4315] usb 4-1: SerialNumber: syz [ 149.502607][ T4315] usb 4-1: selecting invalid altsetting 0 [ 149.515649][ T4315] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 149.572129][ T4315] usb 4-1: No valid video chain found. [ 149.736285][ T4315] usb 4-1: selecting invalid altsetting 0 [ 149.752070][ T4315] usbtest: probe of 4-1:220.1 failed with error -22 [ 150.181444][ T4315] usb 4-1: USB disconnect, device number 3 [ 150.371749][ T4257] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.621991][ T4257] usb 1-1: Using ep0 maxpacket: 32 [ 151.131845][ T4257] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 151.151839][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.179928][ T4257] usb 1-1: Product: syz [ 151.184470][ T4257] usb 1-1: Manufacturer: syz [ 151.189066][ T4257] usb 1-1: SerialNumber: syz [ 151.501978][ T4257] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 151.525980][ T5460] xt_l2tp: v2 sid > 0xffff: 117440512 [ 151.540456][ T4257] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 151.679158][ T4257] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 151.797635][ T4257] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 152.076799][ T4257] usb 1-1: USB disconnect, device number 4 [ 152.095507][ T25] audit: type=1800 audit(1764544109.904:2): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.328" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 152.121846][ T5452] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 152.125635][ T4257] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 152.204212][ T4257] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 152.214366][ T5452] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 152.229665][ T5452] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 152.257786][ T4257] visor 1-1:1.0: device disconnected [ 152.390463][ T5452] syz.3.328 (5452) used greatest stack depth: 18560 bytes left [ 154.765488][ T4241] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.842736][ T5506] xt_l2tp: v2 sid > 0xffff: 117440512 [ 155.051931][ T4241] usb 5-1: Using ep0 maxpacket: 16 [ 155.192137][ T4241] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.261941][ T4241] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.412705][ T4241] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.435992][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.631576][ T5521] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.349'. [ 155.644737][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 155.881776][ T4234] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.943649][ T4241] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 156.155215][ T4241] usb 5-1: USB disconnect, device number 9 [ 156.311878][ T4234] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 156.325267][ T4234] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 156.334451][ T4234] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.343599][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.401711][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.801871][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 156.885695][ T4315] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 156.893206][ T5533] netlink: 256 bytes leftover after parsing attributes in process `syz.0.350'. [ 157.163626][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.197694][ T4315] usb 4-1: config 0 descriptor?? [ 157.217557][ T4234] usb 1-1: USB disconnect, device number 5 [ 157.276283][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 157.306243][ T5541] device veth3 entered promiscuous mode [ 157.314087][ T5541] bridge1: port 1(veth3) entered blocking state [ 157.320522][ T5541] bridge1: port 1(veth3) entered disabled state [ 157.377726][ T5541] bridge1: port 1(veth3) entered blocking state [ 157.384133][ T5541] bridge1: port 1(veth3) entered forwarding state [ 157.403877][ T4355] bridge1: port 1(veth3) entered disabled state [ 157.421154][ T5541] device veth5 entered promiscuous mode [ 157.793666][ T5541] bridge1: port 2(veth5) entered blocking state [ 157.833219][ T5541] bridge1: port 2(veth5) entered disabled state [ 157.888097][ T5541] bridge1: port 2(veth5) entered blocking state [ 157.894469][ T5541] bridge1: port 2(veth5) entered forwarding state [ 157.965541][ T4306] bridge1: port 2(veth5) entered disabled state [ 158.213305][ T4315] pantherlord 0003:0810:0001.0004: invalid report_size 27696 [ 158.220720][ T4315] pantherlord 0003:0810:0001.0004: item 0 2 1 7 parsing failed [ 158.239598][ T4315] pantherlord 0003:0810:0001.0004: parse failed [ 158.243096][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.360'. [ 158.246151][ T4315] pantherlord: probe of 0003:0810:0001.0004 failed with error -22 [ 158.312400][ T5553] xt_l2tp: v2 sid > 0xffff: 117440512 [ 159.002525][ T4315] usb 4-1: USB disconnect, device number 4 [ 159.026370][ T25] audit: type=1326 audit(1764544116.834:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.1.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0544607749 code=0x0 [ 159.072440][ T5559] binder: 5556:5559 ioctl c0145608 0 returned -22 [ 161.910377][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.171746][ T4241] usb 4-1: Using ep0 maxpacket: 32 [ 162.301807][ T4315] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.321871][ T4241] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 162.334191][ T4241] usb 4-1: config 0 has no interface number 0 [ 162.431676][ T4241] usb 4-1: config 0 interface 12 has no altsetting 0 [ 162.621719][ T4241] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 162.637415][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.645468][ T4241] usb 4-1: Product: syz [ 162.649987][ T4241] usb 4-1: Manufacturer: syz [ 162.655083][ T4241] usb 4-1: SerialNumber: syz [ 162.664738][ T4241] usb 4-1: config 0 descriptor?? [ 162.973835][ T4315] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 162.998316][ T4315] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 163.026953][ T4315] usb 2-1: Product: syz [ 163.087306][ T5613] netlink: 'syz.4.380': attribute type 3 has an invalid length. [ 163.098960][ T5613] netlink: 'syz.4.380': attribute type 3 has an invalid length. [ 163.121635][ T5613] 9pnet: Insufficient options for proto=fd [ 163.391812][ T4315] usb 2-1: Manufacturer: syz [ 163.436778][ T4315] usb 2-1: SerialNumber: syz [ 163.572230][ T4315] usb 2-1: config 0 descriptor?? [ 163.696066][ T4315] ch341 2-1:0.0: ch341-uart converter detected [ 164.191935][ T4241] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.282624][ T5621] xt_l2tp: v2 sid > 0xffff: 117440512 [ 164.791232][ T4241] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.808630][ T4241] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.888707][ T5624] input: syz1 as /devices/virtual/input/input6 [ 164.893708][ T4241] f81534: probe of 4-1:0.12 failed with error -71 [ 164.918513][ T4241] usb 4-1: USB disconnect, device number 5 [ 165.342084][ T4315] ch341-uart ttyUSB0: failed to read break control: -71 [ 165.351998][ T4315] ch341-uart: probe of ttyUSB0 failed with error -71 [ 165.420719][ T4315] usb 2-1: USB disconnect, device number 9 [ 165.485595][ T4315] ch341 2-1:0.0: device disconnected [ 167.210851][ T5664] xt_l2tp: v2 sid > 0xffff: 117440512 [ 173.382248][ T4241] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.872911][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.921636][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.932155][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.947168][ T4241] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.956492][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.970297][ T4241] usb 3-1: config 0 descriptor?? [ 175.039303][ T4241] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 175.070635][ T4241] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 175.126127][ T4241] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 175.222745][ T4241] usb 3-1: USB disconnect, device number 5 [ 175.538161][ T5782] fido_id[5782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.591897][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 175.603921][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 175.633471][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 175.639715][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 176.103768][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 176.235512][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.303437][ T5790] xt_l2tp: v2 sid > 0xffff: 117440512 [ 176.508932][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.790762][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.704670][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.927695][ T5786] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.955158][ T5786] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.970842][ T5786] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.988657][ T5786] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.379449][ T5842] xt_l2tp: v2 sid > 0xffff: 117440512 [ 181.425524][ T3162] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.811665][ T3162] usb 5-1: Using ep0 maxpacket: 16 [ 181.931968][ T3162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 182.111876][ T3162] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.130087][ T3162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.151995][ T3162] usb 5-1: Product: syz [ 182.156274][ T3162] usb 5-1: Manufacturer: syz [ 182.166560][ T3162] usb 5-1: SerialNumber: syz [ 182.186778][ T3162] usb 5-1: config 0 descriptor?? [ 182.235140][ T3162] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.710010][ T3162] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 183.672502][ T21] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 184.244648][ T3162] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 184.841911][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.911038][ T5885] xt_l2tp: v2 sid > 0xffff: 117440512 [ 185.222083][ T3162] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.266950][ T3162] em28xx 5-1:0.0: board has no eeprom [ 185.356971][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 185.441827][ T21] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 185.453129][ T21] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 185.461695][ T3162] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.465605][ T21] usb 2-1: config 4 has no interface number 0 [ 185.471409][ T3162] em28xx 5-1:0.0: dvb set to bulk mode. [ 185.510406][ T4315] em28xx 5-1:0.0: Binding DVB extension [ 185.524981][ T3162] usb 5-1: USB disconnect, device number 10 [ 185.540877][ T3162] em28xx 5-1:0.0: Disconnecting em28xx [ 185.633535][ T4315] em28xx 5-1:0.0: Registering input extension [ 185.643589][ T3162] em28xx 5-1:0.0: Closing input extension [ 185.680551][ T3162] em28xx 5-1:0.0: Freeing device [ 185.862759][ T21] usb 2-1: Dual-Role OTG device on HNP port [ 185.882132][ T21] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 185.918762][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 185.974854][ T21] usb 2-1: Product: syz [ 185.979975][ T21] usb 2-1: Manufacturer: syz [ 186.010132][ T21] usb 2-1: SerialNumber: syz [ 186.738699][ T21] usb 2-1: USB disconnect, device number 10 [ 187.532084][ T5925] loop3: detected capacity change from 0 to 7 [ 188.234915][ T5925] Dev loop3: unable to read RDB block 7 [ 188.254583][ T5925] loop3: unable to read partition table [ 188.281141][ T5925] loop3: partition table beyond EOD, truncated [ 188.338652][ T5932] xt_l2tp: v2 sid > 0xffff: 117440512 [ 188.556653][ T5925] loop_reread_partitions: partition scan of loop3 (Cjmmý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.315142][ T5980] xt_l2tp: v2 sid > 0xffff: 117440512 [ 192.893571][ T5994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.488'. [ 194.142769][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.150578][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.332592][ T6019] xt_l2tp: v2 sid > 0xffff: 117440512 [ 195.336412][ T6025] Illegal XDP return value 4294967274, expect packet loss! [ 196.535249][ T5417] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 196.695445][ T6060] xt_l2tp: v2 sid > 0xffff: 117440512 [ 197.891715][ T5417] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.903498][ T5417] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=6d.ea [ 197.921712][ T5417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.934581][ T5417] usb 3-1: config 0 descriptor?? [ 198.401779][ T5417] usb 3-1: string descriptor 0 read error: -71 [ 198.424586][ T5417] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 198.453626][ T5417] usb 3-1: USB disconnect, device number 6 [ 199.116882][ T6103] xt_l2tp: v2 sid > 0xffff: 117440512 [ 199.570149][ C0] hrtimer: interrupt took 39660 ns [ 202.071673][ T5417] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.374409][ T6145] xt_l2tp: v2 sid > 0xffff: 117440512 [ 202.563454][ T5417] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.585658][ T5417] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.599269][ T5417] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.609417][ T5417] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.616431][ T5417] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 202.625858][ T5417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.637040][ T5417] usb 4-1: config 0 descriptor?? [ 203.283423][ T5417] kye 0003:0458:5015.0006: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 203.306758][ T5417] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 203.332596][ T5417] kye 0003:0458:5015.0006: tablet enabling failed [ 203.352894][ T5417] usb 4-1: USB disconnect, device number 6 [ 204.125061][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 205.509392][ T6201] xt_l2tp: v2 sid > 0xffff: 117440512 [ 209.371723][ T4299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.633823][ T6255] xt_l2tp: v2 sid > 0xffff: 117440512 [ 209.691650][ T4299] usb 1-1: Using ep0 maxpacket: 16 [ 209.811785][ T4299] usb 1-1: config 254 has an invalid interface number: 201 but max is 0 [ 209.823385][ T4299] usb 1-1: config 254 has no interface number 0 [ 209.834908][ T4299] usb 1-1: config 254 interface 201 has no altsetting 0 [ 210.001799][ T4299] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=d3.70 [ 210.015106][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.031533][ T4299] usb 1-1: Product: syz [ 210.038944][ T4299] usb 1-1: Manufacturer: syz [ 210.048835][ T4299] usb 1-1: SerialNumber: syz [ 211.169185][ T4299] gspca_main: spca501-2.14.0 probing 1776:501c [ 211.201871][ T4299] gspca_spca501: reg write: error -71 [ 211.210657][ T4299] spca501 1-1:254.201: Reg write failed for 0x02,0x07,0x05 [ 211.262137][ T4299] spca501: probe of 1-1:254.201 failed with error -22 [ 211.333631][ T4299] usb 1-1: USB disconnect, device number 6 [ 212.459734][ T6298] xt_l2tp: v2 sid > 0xffff: 117440512 [ 214.718355][ T5417] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 215.301723][ T5417] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 215.310791][ T5417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.336867][ T5417] usb 5-1: config 0 descriptor?? [ 215.423557][ T5417] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 215.564661][ T6350] xt_l2tp: v2 sid > 0xffff: 117440512 [ 216.102140][ T5417] cpia1 5-1:0.0: unexpected state after lo power cmd: c2 [ 216.598723][ T5417] gspca_cpia1: usb_control_msg 02, error -71 [ 216.687702][ T5417] gspca_cpia1: usb_control_msg 05, error -71 [ 216.695705][ T5417] cpia1 5-1:0.0: unexpected systemstate: c2 [ 216.714042][ T5417] usb 5-1: USB disconnect, device number 11 [ 219.968305][ T6410] xt_l2tp: v2 sid > 0xffff: 117440512 [ 220.101641][ T6395] orangefs_mount: mount request failed with -4 [ 220.148954][ T6404] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 220.197114][ T6404] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 223.694890][ T6456] xt_l2tp: v2 sid > 0xffff: 117440512 [ 227.551271][ T6506] xt_l2tp: v2 sid > 0xffff: 117440512 [ 228.021523][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 228.032007][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 228.145146][ T6509] ceph: No mds server is up or the cluster is laggy [ 228.281734][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.587029][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 228.692465][ T3162] libceph: connect (1)[c::]:6789 error -101 [ 228.698458][ T3162] libceph: mon0 (1)[c::]:6789 connect error [ 228.901757][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.568969][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.758376][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28276, setting to 1024 [ 229.771231][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 229.786155][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.966462][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.976596][ T13] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.985500][ T13] usb 4-1: Manufacturer: syz [ 230.000398][ T13] usb 4-1: config 0 descriptor?? [ 230.341705][ T13] rc_core: IR keymap rc-hauppauge not found [ 230.348266][ T13] Registered IR keymap rc-empty [ 230.372950][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.431736][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.474308][ T13] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 230.488781][ T13] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 230.531832][ T4234] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.534765][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.601714][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.651696][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.711750][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.772184][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 230.821704][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 231.037348][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.041817][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 231.078939][ T4234] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.106933][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 231.111390][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.174193][ T4234] usb 2-1: config 0 descriptor?? [ 231.181718][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 231.238918][ T4234] pwc: Askey VC010 type 2 USB webcam detected. [ 231.321683][ T13] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 231.456489][ T6553] xt_l2tp: v2 sid > 0xffff: 117440512 [ 231.515035][ T13] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 231.527366][ T13] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.547024][ T13] usb 4-1: USB disconnect, device number 7 [ 231.731728][ T4234] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.771766][ T4234] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.812229][ T4234] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.851736][ T4234] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.891716][ T4234] pwc: recv_control_msg error -32 req 04 val 1300 [ 231.931746][ T4234] pwc: recv_control_msg error -32 req 04 val 1400 [ 231.971762][ T4234] pwc: recv_control_msg error -32 req 02 val 2000 [ 232.011732][ T4234] pwc: recv_control_msg error -32 req 02 val 2100 [ 232.051859][ T4234] pwc: recv_control_msg error -32 req 04 val 1500 [ 232.929302][ T4234] pwc: recv_control_msg error -71 req 02 val 2400 [ 232.961926][ T4234] pwc: recv_control_msg error -71 req 02 val 2600 [ 232.981712][ T4234] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.001730][ T4234] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.021702][ T4234] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.041689][ T4234] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.063552][ T4234] pwc: Registered as video103. [ 233.080899][ T4234] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 233.129218][ T4234] usb 2-1: USB disconnect, device number 11 [ 233.784657][ T6593] xt_l2tp: v2 sid > 0xffff: 117440512 [ 235.610851][ T6634] xt_l2tp: v2 sid > 0xffff: 117440512 [ 237.993121][ T6679] tmpfs: Unknown parameter 'quota' [ 238.374302][ T6688] xt_l2tp: v2 sid > 0xffff: 117440512 [ 239.092883][ T3162] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 239.160197][ T6699] lo: Caught tx_queue_len zero misconfig [ 239.166915][ T6699] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 239.501873][ T3162] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.522417][ T3162] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.560306][ T3162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.570493][ T3162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.991777][ T3162] usb 5-1: GET_CAPABILITIES returned 0 [ 239.997615][ T3162] usbtmc 5-1:16.0: can't read capabilities [ 240.189259][ T3162] usb 5-1: USB disconnect, device number 12 [ 240.812996][ T6730] netlink: 'syz.3.706': attribute type 12 has an invalid length. [ 241.600351][ T6740] xt_l2tp: v2 sid > 0xffff: 117440512 [ 241.701662][ T6742] D\ [ 244.579409][ T6799] xt_l2tp: v2 sid > 0xffff: 117440512 [ 247.221696][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.286530][ T6841] xt_l2tp: v2 sid > 0xffff: 117440512 [ 247.481641][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 247.621753][ T4234] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 247.629862][ T4234] usb 4-1: config 2 has no interface number 0 [ 247.636059][ T4234] usb 4-1: config 2 interface 88 has no altsetting 0 [ 247.922688][ T4234] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 247.956274][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.980416][ T4234] usb 4-1: Product: syz [ 247.984902][ T4234] usb 4-1: Manufacturer: syz [ 247.990203][ T4234] usb 4-1: SerialNumber: syz [ 248.943755][ T4234] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 248.954947][ T4234] asix: probe of 4-1:2.88 failed with error -71 [ 248.964423][ T4234] usb 4-1: USB disconnect, device number 8 [ 250.663238][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 250.670542][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 250.701682][ T6886] ceph: No mds server is up or the cluster is laggy [ 251.483120][ T4315] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 252.416953][ T4315] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 252.458142][ T6915] usb usb1: usbfs: process 6915 (syz.2.765) did not claim interface 0 before use [ 252.573510][ T6920] xt_l2tp: v2 sid > 0xffff: 117440512 [ 252.771918][ T4315] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 252.796603][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.817819][ T4315] usb 4-1: Product: syz [ 252.828268][ T4315] usb 4-1: Manufacturer: syz [ 252.840955][ T4315] usb 4-1: SerialNumber: syz [ 253.242059][ T4192] Bluetooth: hci1: Unknown advertising packet type: 0x619e [ 253.242307][ T4192] ================================================================== [ 253.257806][ T4192] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 253.265620][ T4192] Read of size 1 at addr ffff888062523c03 by task kworker/u5:4/4192 [ 253.273588][ T4192] [ 253.275905][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 253.283446][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.293499][ T4192] Workqueue: hci1 hci_rx_work [ 253.298193][ T4192] Call Trace: [ 253.301467][ T4192] [ 253.304397][ T4192] dump_stack_lvl+0x168/0x230 [ 253.309088][ T4192] ? show_regs_print_info+0x20/0x20 [ 253.314300][ T4192] ? load_image+0x3b0/0x3b0 [ 253.318809][ T4192] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 253.324191][ T4192] print_address_description+0x60/0x2d0 [ 253.329748][ T4192] ? hci_le_meta_evt+0x12db/0x3b80 [ 253.334862][ T4192] kasan_report+0xdf/0x130 [ 253.339269][ T4192] ? hci_le_meta_evt+0x12db/0x3b80 [ 253.344364][ T4192] hci_le_meta_evt+0x12db/0x3b80 [ 253.349288][ T4192] ? hci_event_packet+0x2a0/0x12f0 [ 253.354393][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 253.360445][ T4192] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 253.366063][ T4192] ? mark_lock+0x94/0x320 [ 253.370374][ T4192] ? mutex_unlock+0x10/0x10 [ 253.374862][ T4192] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.380824][ T4192] ? lock_chain_count+0x20/0x20 [ 253.385656][ T4192] ? __rwlock_init+0x140/0x140 [ 253.390403][ T4192] hci_event_packet+0xe05/0x12f0 [ 253.395322][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 253.400510][ T4192] ? rcu_lock_release+0x20/0x20 [ 253.405347][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 253.410528][ T4192] hci_rx_work+0x255/0xa10 [ 253.414937][ T4192] process_one_work+0x863/0x1000 [ 253.419870][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 253.425480][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 253.430750][ T4192] ? _raw_spin_lock_irq+0xab/0xe0 [ 253.435753][ T4192] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 253.441108][ T4192] ? wq_worker_running+0x97/0x170 [ 253.446113][ T4192] worker_thread+0xaa8/0x12a0 [ 253.450789][ T4192] kthread+0x436/0x520 [ 253.454837][ T4192] ? rcu_lock_release+0x20/0x20 [ 253.459665][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 253.464233][ T4192] ret_from_fork+0x1f/0x30 [ 253.468642][ T4192] [ 253.471641][ T4192] [ 253.473946][ T4192] Allocated by task 6898: [ 253.478248][ T4192] __kasan_kmalloc+0xb5/0xf0 [ 253.482819][ T4192] __alloc_skb+0x22c/0x750 [ 253.487216][ T4192] vhci_write+0xbc/0x450 [ 253.491439][ T4192] vfs_write+0x712/0xd00 [ 253.495659][ T4192] ksys_write+0x14d/0x250 [ 253.499967][ T4192] do_syscall_64+0x4c/0xa0 [ 253.504363][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.510235][ T4192] [ 253.512538][ T4192] The buggy address belongs to the object at ffff888062523800 [ 253.512538][ T4192] which belongs to the cache kmalloc-1k of size 1024 [ 253.526567][ T4192] The buggy address is located 3 bytes to the right of [ 253.526567][ T4192] 1024-byte region [ffff888062523800, ffff888062523c00) [ 253.540252][ T4192] The buggy address belongs to the page: [ 253.545866][ T4192] page:ffffea0001894800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62520 [ 253.555999][ T4192] head:ffffea0001894800 order:3 compound_mapcount:0 compound_pincount:0 [ 253.564301][ T4192] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 253.572265][ T4192] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 253.580828][ T4192] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 253.589385][ T4192] page dumped because: kasan: bad access detected [ 253.595779][ T4192] page_owner tracks the page as allocated [ 253.601468][ T4192] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 51892947358, free_ts 11407774789 [ 253.620541][ T4192] get_page_from_freelist+0x1b77/0x1c60 [ 253.626072][ T4192] __alloc_pages+0x1e1/0x470 [ 253.630642][ T4192] new_slab+0xc0/0x4b0 [ 253.634690][ T4192] ___slab_alloc+0x81e/0xdf0 [ 253.639259][ T4192] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 253.645041][ T4192] __alloc_skb+0x22c/0x750 [ 253.649436][ T4192] rtmsg_fib+0xe7/0x4b0 [ 253.653572][ T4192] fib_table_insert+0x987/0x1b20 [ 253.658490][ T4192] fib_magic+0x2c1/0x390 [ 253.662710][ T4192] fib_add_ifaddr+0x3f7/0x5e0 [ 253.667364][ T4192] fib_netdev_event+0x35c/0x480 [ 253.672196][ T4192] raw_notifier_call_chain+0xcb/0x160 [ 253.677550][ T4192] __dev_notify_flags+0x178/0x2d0 [ 253.682558][ T4192] dev_change_flags+0xe3/0x1a0 [ 253.687309][ T4192] do_setlink+0xc01/0x3980 [ 253.691711][ T4192] rtnl_newlink+0x1419/0x17d0 [ 253.696378][ T4192] page last free stack trace: [ 253.701029][ T4192] free_unref_page_prepare+0x637/0x6c0 [ 253.706468][ T4192] free_unref_page+0x94/0x280 [ 253.711125][ T4192] free_contig_range+0x96/0xf0 [ 253.715880][ T4192] destroy_args+0x100/0xa20 [ 253.720368][ T4192] debug_vm_pgtable+0x318/0x370 [ 253.725201][ T4192] do_one_initcall+0x1ee/0x680 [ 253.729947][ T4192] do_initcall_level+0x137/0x1f0 [ 253.734870][ T4192] do_initcalls+0x4b/0x90 [ 253.739178][ T4192] kernel_init_freeable+0x3ce/0x560 [ 253.744360][ T4192] kernel_init+0x19/0x1b0 [ 253.748674][ T4192] ret_from_fork+0x1f/0x30 [ 253.753081][ T4192] [ 253.755389][ T4192] Memory state around the buggy address: [ 253.760995][ T4192] ffff888062523b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 253.769036][ T4192] ffff888062523b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 253.777074][ T4192] >ffff888062523c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.785111][ T4192] ^ [ 253.789154][ T4192] ffff888062523c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.797191][ T4192] ffff888062523d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.805239][ T4192] ================================================================== [ 253.813274][ T4192] Disabling lock debugging due to kernel taint [ 253.819466][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.834634][ T4192] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.841843][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 253.850771][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.860821][ T4192] Workqueue: hci1 hci_rx_work [ 253.865503][ T4192] Call Trace: [ 253.868861][ T4192] [ 253.871788][ T4192] dump_stack_lvl+0x168/0x230 [ 253.876465][ T4192] ? show_regs_print_info+0x20/0x20 [ 253.881667][ T4192] ? load_image+0x3b0/0x3b0 [ 253.886171][ T4192] panic+0x2c9/0x7f0 [ 253.890074][ T4192] ? bpf_jit_dump+0xd0/0xd0 [ 253.894580][ T4192] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 253.900471][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 253.905319][ T4192] ? hci_le_meta_evt+0x12db/0x3b80 [ 253.910424][ T4192] check_panic_on_warn+0x80/0xa0 [ 253.915361][ T4192] ? hci_le_meta_evt+0x12db/0x3b80 [ 253.920466][ T4192] end_report+0x6d/0xf0 [ 253.924617][ T4192] kasan_report+0x102/0x130 [ 253.929115][ T4192] ? hci_le_meta_evt+0x12db/0x3b80 [ 253.934225][ T4192] hci_le_meta_evt+0x12db/0x3b80 [ 253.939156][ T4192] ? hci_event_packet+0x2a0/0x12f0 [ 253.944274][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 253.950341][ T4192] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 253.955969][ T4192] ? mark_lock+0x94/0x320 [ 253.960286][ T4192] ? mutex_unlock+0x10/0x10 [ 253.964774][ T4192] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.970740][ T4192] ? lock_chain_count+0x20/0x20 [ 253.975576][ T4192] ? __rwlock_init+0x140/0x140 [ 253.980319][ T4192] hci_event_packet+0xe05/0x12f0 [ 253.985237][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 253.990415][ T4192] ? rcu_lock_release+0x20/0x20 [ 253.995246][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 254.000423][ T4192] hci_rx_work+0x255/0xa10 [ 254.004822][ T4192] process_one_work+0x863/0x1000 [ 254.009863][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 254.015485][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 254.020753][ T4192] ? _raw_spin_lock_irq+0xab/0xe0 [ 254.025757][ T4192] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 254.031109][ T4192] ? wq_worker_running+0x97/0x170 [ 254.036113][ T4192] worker_thread+0xaa8/0x12a0 [ 254.040779][ T4192] kthread+0x436/0x520 [ 254.044828][ T4192] ? rcu_lock_release+0x20/0x20 [ 254.049659][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 254.054234][ T4192] ret_from_fork+0x1f/0x30 [ 254.058639][ T4192] [ 254.061863][ T4192] Kernel Offset: disabled [ 254.066177][ T4192] Rebooting in 86400 seconds..