last executing test programs: 1m48.110361894s ago: executing program 3 (id=365): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x85c, 0x1f5100) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1m46.827856828s ago: executing program 3 (id=366): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x5) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8800) 1m45.553235493s ago: executing program 3 (id=367): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) flistxattr(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) 1m44.372081875s ago: executing program 3 (id=370): socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = gettid() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(0xffffffffffffffff, r4, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r4, 0x60000000000, 0x0) 1m43.272053976s ago: executing program 3 (id=372): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25GETUID(r0, 0x541b, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1m42.644039348s ago: executing program 3 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) io_setup(0x8, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20040000) io_submit(0x0, 0x0, 0x0) r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='io\x00') 1m27.480230404s ago: executing program 32 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) io_setup(0x8, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20040000) io_submit(0x0, 0x0, 0x0) r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='io\x00') 19.162647817s ago: executing program 0 (id=590): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x5) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8800) 17.653038156s ago: executing program 0 (id=592): fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) fallocate(r2, 0x11, 0x100000000, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 13.902744007s ago: executing program 0 (id=599): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11.374259895s ago: executing program 0 (id=606): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0xe028, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x1733, 0x6323, 0x20, 0x0, 0x15) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0xfffd, 0x4, 0x0, 0x40, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x5, 0x4, 0x6e, 0xfffffffe, 0x80000005, 0x80000000, 0xfffffff0}) socket$inet6_tcp(0xa, 0x1, 0x0) 8.026581008s ago: executing program 2 (id=614): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 7.853624011s ago: executing program 2 (id=615): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 6.708039403s ago: executing program 2 (id=616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 6.559311146s ago: executing program 5 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 6.462469788s ago: executing program 1 (id=619): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 3.983506225s ago: executing program 1 (id=620): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.917668216s ago: executing program 4 (id=621): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000001c0)={0x0, 0x7ff, 0x2}) 3.871976597s ago: executing program 5 (id=622): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x2, &(0x7f00000000c0)="69dd"}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) 3.793848818s ago: executing program 0 (id=623): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@delneigh={0x24, 0x1d, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x14, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0xba01, 0x0, 0x40080}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}, r2}}, 0x30) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x8, 0x1f0e, r1, &(0x7f0000000140)='i', 0x1, 0x24}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x1}, &(0x7f00000006c0)=0x8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x280, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x2, {0x2}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd413, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="792ed58826ea8e89b6edcf08", 0xc}, {&(0x7f0000000340)="e7d94fc1c59f98e1a642db143546f57c5355e77b1c95d149d08a226c04b4ad2360bd5c428092b6c08aff44b9578da6e487dde8dca282f24406d901878741f7b1ed1d2bf58b625f77799d99f6b4a5be9cf703318bc182bca612f0bc0df604accdef069ee2c00aef4ccce69cf2e074e1aeacdb2b897063806bb093c650dcd2b6c60cb4c48c527b0b1696f36a7b6240854246da6ab7", 0x94}, {&(0x7f00000004c0)="706b6d868398096e94c9feb25f1d78b0598179a1c943c72db7abd9e81b37d4780029bdffde8103641f3445f18100d275165086e3329064fac0924fcb9d3b82b457a40cd744f0ac29efdcfb3ee262a698c8bac418c71ab3d76ecc10ae165c8152aa005435c9af183c98469975134848913f7059a82a795284d58e239eb0e42ffe32ea08ef30271e94fe3b2fb974153abbcda32d8346418cc962b772948fb16e4b9b05b083bfba99aa193eb4eba9cf4fca3255eccad12e313ac8b9500bfe87c61a06a3a9dd", 0xc4}, {&(0x7f00000001c0)="0909076df736daaa7e29807307e56e3676dab036cfe396339eba73cad91377406ce626", 0x23}], 0x4}, 0x4010) 3.559850532s ago: executing program 4 (id=625): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 3.559024752s ago: executing program 1 (id=626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x6, 0x1, 0x1, 0x1, 0xfffffff7}, 0x14) 3.223473799s ago: executing program 0 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r8) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000ff08df252b0000000c0005000203aaaaaaaaaaaa0a0001007770616e31000000"], 0x2c}}, 0x4) 2.982147274s ago: executing program 4 (id=628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB='(\x00/'], 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 2.865153296s ago: executing program 1 (id=629): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x3, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) 2.784361607s ago: executing program 2 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 2.681977439s ago: executing program 4 (id=631): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 2.6358792s ago: executing program 5 (id=632): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x2, 0x17, 0x0, 0x0) 2.278863617s ago: executing program 1 (id=633): r0 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x10}) 2.048557581s ago: executing program 4 (id=634): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1eb2, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), 0x0) stat(&(0x7f00000007c0)='./file0\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 1.723982237s ago: executing program 5 (id=635): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000001c0)={0x0, 0x7ff, 0x2}) 1.627696469s ago: executing program 2 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) 1.5907621s ago: executing program 5 (id=637): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@delneigh={0x24, 0x1d, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x14, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0xba01, 0x0, 0x40080}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}, r2}}, 0x30) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 72.708823][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.717517][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.725236][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.733929][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.742102][ T4271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.748236][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.749681][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.757120][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.766772][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.771499][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.777462][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.785674][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.793906][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.799884][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.807110][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.814259][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.820698][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.833888][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.836196][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.841402][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.848671][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.855597][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.862719][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.870121][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.877097][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.883107][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.890882][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.905907][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.916117][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.330313][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 73.434904][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 73.489448][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 73.546673][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 73.608069][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.615523][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.623856][ T4267] device bridge_slave_0 entered promiscuous mode [ 73.655846][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.663002][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.671544][ T4267] device bridge_slave_1 entered promiscuous mode [ 73.679137][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 73.732449][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739879][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.748482][ T4272] device bridge_slave_0 entered promiscuous mode [ 73.780455][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.798735][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.806671][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.815044][ T4272] device bridge_slave_1 entered promiscuous mode [ 73.830166][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.837462][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.845944][ T4275] device bridge_slave_0 entered promiscuous mode [ 73.855131][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.864312][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.871483][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.880133][ T4275] device bridge_slave_1 entered promiscuous mode [ 73.896136][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.903271][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.911856][ T4278] device bridge_slave_0 entered promiscuous mode [ 73.947599][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.955068][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.962926][ T4278] device bridge_slave_1 entered promiscuous mode [ 74.008696][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.026980][ T4267] team0: Port device team_slave_0 added [ 74.035298][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.047311][ T4267] team0: Port device team_slave_1 added [ 74.061441][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.079226][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.099168][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.142932][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.162024][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.169366][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.177915][ T4266] device bridge_slave_0 entered promiscuous mode [ 74.194097][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.201573][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.227718][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.255534][ T4272] team0: Port device team_slave_0 added [ 74.271331][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.278676][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.287276][ T4266] device bridge_slave_1 entered promiscuous mode [ 74.296210][ T4275] team0: Port device team_slave_0 added [ 74.302614][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.309726][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.335720][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.348571][ T4272] team0: Port device team_slave_1 added [ 74.361096][ T4278] team0: Port device team_slave_0 added [ 74.376333][ T4275] team0: Port device team_slave_1 added [ 74.410352][ T4278] team0: Port device team_slave_1 added [ 74.425781][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.435545][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.442523][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.470519][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.515819][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.534142][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.541185][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.567705][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.588863][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.595955][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.622217][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.642337][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.649680][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.678285][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.702361][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.709439][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.735602][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.751422][ T4267] device hsr_slave_0 entered promiscuous mode [ 74.758560][ T4267] device hsr_slave_1 entered promiscuous mode [ 74.766232][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.773216][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.799494][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.813708][ T4266] team0: Port device team_slave_0 added [ 74.843300][ T4266] team0: Port device team_slave_1 added [ 74.899398][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.906593][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.932638][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.955429][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 74.955434][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 74.955687][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 74.961708][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 74.967901][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 74.993401][ T4272] device hsr_slave_0 entered promiscuous mode [ 75.000769][ T4272] device hsr_slave_1 entered promiscuous mode [ 75.007755][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.016234][ T4272] Cannot create hsr debugfs directory [ 75.026153][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.033129][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.059381][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.074267][ T4278] device hsr_slave_0 entered promiscuous mode [ 75.081308][ T4278] device hsr_slave_1 entered promiscuous mode [ 75.088163][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.095951][ T4278] Cannot create hsr debugfs directory [ 75.104951][ T4275] device hsr_slave_0 entered promiscuous mode [ 75.111764][ T4275] device hsr_slave_1 entered promiscuous mode [ 75.119050][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.126689][ T4275] Cannot create hsr debugfs directory [ 75.277528][ T4266] device hsr_slave_0 entered promiscuous mode [ 75.284402][ T4266] device hsr_slave_1 entered promiscuous mode [ 75.291688][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.299462][ T4266] Cannot create hsr debugfs directory [ 75.558874][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.577648][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.592435][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.607665][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.648149][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.659753][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.672015][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.686006][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.751676][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.762846][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.791951][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.817331][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.891890][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.919723][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.932233][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.942013][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.972201][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.983347][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.994338][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.012192][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.038982][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.060714][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.074237][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.085106][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.094125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.104376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.114947][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.122248][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.133088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.142188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.150775][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.157885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.168691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.199642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.210434][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.246448][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.254150][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.264867][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.273439][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.303642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.313423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.332967][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.347982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.356941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.366017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.375216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.427075][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.445335][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.458257][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.466866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.476397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.485006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.494102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.502805][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.509936][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.521244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.530073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.538657][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.545802][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.553477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.563856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.612210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.620555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.632343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.643427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.659180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.671170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.684129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.698247][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.736220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.746843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.756715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.766534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.775625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.806608][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.816134][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.831359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.841111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.855814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.862967][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.876276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.891706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.901562][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.908755][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.946398][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.968417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.977358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.988106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.997353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.006855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.017349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.027676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.034932][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 77.039355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.041522][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 77.051562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.062546][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 77.064373][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 77.070533][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 77.090062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.100519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.122503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.142019][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.166254][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.179669][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.194319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.208082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.241296][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.255518][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.298253][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.308491][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.320355][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.329548][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.336735][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.347872][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.358424][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.367643][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.374827][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.383210][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.393303][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.403037][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.411810][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.452744][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.493769][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.505683][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.516581][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.526191][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.535256][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.543677][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.550813][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.559987][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.569126][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.578681][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.586024][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.595241][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.604210][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.613038][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.621645][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.630745][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.639291][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.664775][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.673772][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.683584][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.701686][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.712666][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.727013][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.738310][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.757383][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.796365][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.810587][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.821528][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.838309][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.851838][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.860768][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.876455][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.896786][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.921104][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.935878][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.956776][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.983444][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.993176][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.002361][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.014384][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.043658][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.094491][ T4272] device veth0_vlan entered promiscuous mode [ 78.137167][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.152797][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.179282][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.207142][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.240509][ T4272] device veth1_vlan entered promiscuous mode [ 78.278741][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.287013][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.296224][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.304301][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.313438][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.370036][ T4267] device veth0_vlan entered promiscuous mode [ 78.423069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.432139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.446097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.453646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.463939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.472898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.483401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.495197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.503312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.515307][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.534213][ T4272] device veth0_macvtap entered promiscuous mode [ 78.554212][ T4278] device veth0_vlan entered promiscuous mode [ 78.567891][ T4267] device veth1_vlan entered promiscuous mode [ 78.577282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.594402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.604028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.613743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.646583][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.657535][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.665727][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.676864][ T4272] device veth1_macvtap entered promiscuous mode [ 78.704213][ T4278] device veth1_vlan entered promiscuous mode [ 78.724240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.738141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.751149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.776268][ T4267] device veth0_macvtap entered promiscuous mode [ 78.810963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.821728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.833218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.847265][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.858372][ T4267] device veth1_macvtap entered promiscuous mode [ 78.889912][ T4266] device veth0_vlan entered promiscuous mode [ 78.903185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.912424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.927374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.942054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.953749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.967924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.980906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.989068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.003654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.013228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.042895][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.064853][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.077484][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.089881][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102049][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111084][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.120756][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 79.121165][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.127076][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 79.136247][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 79.141763][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 79.148627][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 79.168490][ T4278] device veth0_macvtap entered promiscuous mode [ 79.186186][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.198160][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.212424][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.251256][ T4278] device veth1_macvtap entered promiscuous mode [ 79.273674][ T4266] device veth1_vlan entered promiscuous mode [ 79.282475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.293225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.302198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.310500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.319722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.331137][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.341908][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.353423][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.373388][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.387658][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.397597][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.408238][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.420216][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.430316][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.440244][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.449708][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.458640][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.473398][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.482452][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.491480][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.503973][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524097][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.535175][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.546028][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.556820][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.568338][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.576999][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.585785][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.595843][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.605088][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.615564][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.660721][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.672476][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.683431][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.692361][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713612][ T4266] device veth0_macvtap entered promiscuous mode [ 79.751172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.762131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.771330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.829466][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.840676][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.852894][ T4275] device veth0_vlan entered promiscuous mode [ 79.860863][ T4266] device veth1_macvtap entered promiscuous mode [ 79.883044][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.892228][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.894046][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.900559][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.920748][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.929109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.979074][ T4275] device veth1_vlan entered promiscuous mode [ 80.001393][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.012441][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.023417][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.035016][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.045677][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.058138][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.069633][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.090206][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.095851][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.107290][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.115645][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.120311][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.131788][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.155035][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.168298][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.181270][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.192295][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.202327][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.213971][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.229117][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.262502][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.270908][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.284286][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.306082][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.319879][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.327688][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.327739][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.330340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.356755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.368264][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.377587][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389432][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.399360][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.422457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.437030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.466217][ T4275] device veth0_macvtap entered promiscuous mode [ 80.492501][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.518710][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.542541][ T4275] device veth1_macvtap entered promiscuous mode [ 80.545322][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.556701][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.595650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.622719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.631687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.642070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.659634][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.671119][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.681316][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.692821][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.702906][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.714290][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.731296][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.742227][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.754354][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.764832][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.775764][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.787703][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.800575][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.811767][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.822529][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.832709][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.843906][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.858111][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.882427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.892108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.902668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.911483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.998000][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.008071][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.024562][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.056350][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.102521][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.111559][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.167588][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.195401][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 81.201593][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 81.207709][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 81.213756][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 81.214773][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 81.269155][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.326262][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.399906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.449565][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.881447][ T4401] device syzkaller0 entered promiscuous mode [ 81.889638][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.914704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.922964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.925076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.931244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.939473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.947539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.955739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 81.963916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.972143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 81.980216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.134501][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.358551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.381295][ T4411] Zero length message leads to an empty skb [ 82.413351][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.453287][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.049408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.764686][ T4402] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.512146][ T4424] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 84.551987][ T4431] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 84.702569][ T4433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.804576][ T4402] usb 1-1: Using ep0 maxpacket: 8 [ 84.829239][ T4402] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.848130][ T4426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 85.422601][ T4440] loop7: detected capacity change from 0 to 16384 [ 85.436206][ T4402] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 85.485165][ T4402] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 85.535982][ T4402] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.935866][ T4441] loop7: detected capacity change from 16384 to 0 [ 86.473774][ T4432] delete_channel: no stack [ 86.647245][ T37] cfg80211: failed to load regulatory.db [ 88.068224][ T4402] usb 1-1: string descriptor 0 read error: -71 [ 88.088890][ T4402] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 88.184670][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.307640][ T4402] usb 1-1: can't set config #1, error -71 [ 88.433666][ T4402] usb 1-1: USB disconnect, device number 2 [ 88.550372][ T4460] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 89.488000][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.556126][ T14] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.314445][ C0] sched: RT throttling activated [ 93.473152][ T4493] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 93.534513][ T2118] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 94.471805][ T4499] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 94.580463][ T2118] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 94.589063][ T2118] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 94.597596][ T2118] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 94.606869][ T2118] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 94.623267][ T2118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 94.635172][ T2118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.654939][ T2118] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 95.189478][ T2118] usb 2-1: string descriptor 0 read error: -22 [ 95.195947][ T2118] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 95.205373][ T2118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.486607][ T2118] usb 2-1: config 0 descriptor?? [ 95.506859][ T2118] hub 2-1:0.0: bad descriptor, ignoring hub [ 95.512980][ T2118] hub: probe of 2-1:0.0 failed with error -5 [ 95.538158][ T2118] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 100.437019][ T14] usb 2-1: USB disconnect, device number 2 [ 101.545951][ T4546] device syzkaller0 entered promiscuous mode [ 104.139369][ T4578] tipc: Enabling of bearer rejected, failed to enable media [ 104.428231][ T4578] device syzkaller0 entered promiscuous mode [ 105.021565][ T4592] device syzkaller0 entered promiscuous mode [ 112.141309][ T4637] tipc: Enabling of bearer rejected, failed to enable media [ 112.194268][ T4641] device syzkaller0 entered promiscuous mode [ 112.220876][ T4640] device syzkaller0 entered promiscuous mode [ 116.915778][ T4685] tipc: Enabling of bearer rejected, failed to enable media [ 116.955493][ T4685] device syzkaller0 entered promiscuous mode [ 117.869863][ T4691] device syzkaller0 entered promiscuous mode [ 120.304502][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.096426][ T127] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.127923][ T127] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 121.174591][ T127] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 121.276902][ T127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.371222][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.605129][ T4726] tipc: Enabling of bearer rejected, failed to enable media [ 121.901126][ T4732] device syzkaller0 entered promiscuous mode [ 122.153727][ T127] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 122.225244][ T127] usb 4-1: USB disconnect, device number 2 [ 122.496741][ T4748] udevd[4748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.738153][ T4747] device syzkaller0 entered promiscuous mode [ 122.753528][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 124.976335][ T4795] tipc: Enabling of bearer rejected, failed to enable media [ 124.987241][ T4795] device syzkaller0 entered promiscuous mode [ 126.214543][ T4377] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.424592][ T4377] usb 5-1: Using ep0 maxpacket: 32 [ 126.447439][ T4377] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 126.494764][ T4377] usb 5-1: config 0 has no interface number 0 [ 126.535724][ T4377] usb 5-1: config 0 interface 184 has no altsetting 0 [ 126.583955][ T4377] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.640587][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.687609][ T4377] usb 5-1: Product: syz [ 126.713066][ T4377] usb 5-1: Manufacturer: syz [ 126.740773][ T4377] usb 5-1: SerialNumber: syz [ 126.790459][ T4377] usb 5-1: config 0 descriptor?? [ 126.833537][ T4377] smsc75xx v1.0.0 [ 127.193624][ T4811] device syzkaller0 entered promiscuous mode [ 127.240451][ T4377] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.263337][ T4377] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.285120][ T4377] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 127.316960][ T4377] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 127.356740][ T4377] usb 5-1: USB disconnect, device number 2 [ 127.793234][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 127.903071][ T4825] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.912281][ T4825] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.921199][ T4825] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.929974][ T4825] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.185253][ T4825] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.194235][ T4825] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.203822][ T4825] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.213005][ T4825] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.939127][ T4844] tipc: Enabling of bearer rejected, failed to enable media [ 129.013281][ T4845] device syzkaller0 entered promiscuous mode [ 130.914383][ T4862] device syzkaller0 entered promiscuous mode [ 132.718097][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724508][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.916843][ T4896] tipc: Enabling of bearer rejected, failed to enable media [ 134.025943][ T4896] device syzkaller0 entered promiscuous mode [ 135.588486][ T4925] device syzkaller0 entered promiscuous mode [ 137.910516][ T4942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.152'. [ 140.503629][ T4964] tipc: Enabling of bearer rejected, failed to enable media [ 140.570769][ T4967] device syzkaller0 entered promiscuous mode [ 141.242714][ T4969] device syzkaller0 entered promiscuous mode [ 143.247077][ T4986] netlink: 48 bytes leftover after parsing attributes in process `syz.4.166'. [ 146.653920][ T5007] PKCS7: Unknown OID: [5] (bad) [ 146.800068][ T5007] PKCS7: Only support pkcs7_signedData type [ 146.843275][ T5012] device syzkaller0 entered promiscuous mode [ 147.173326][ T5017] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 148.484514][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.104487][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 149.111598][ T4316] usb 3-1: config 0 has no interfaces? [ 149.128178][ T4316] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 149.150436][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.171354][ T4316] usb 3-1: Product: syz [ 149.177094][ T4316] usb 3-1: Manufacturer: syz [ 149.183583][ T4316] usb 3-1: SerialNumber: syz [ 149.205621][ T4316] usb 3-1: config 0 descriptor?? [ 149.663408][ T5040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.181'. [ 152.057148][ T5057] capability: warning: `syz.0.186' uses deprecated v2 capabilities in a way that may be insecure [ 152.783854][ T5060] device syzkaller0 entered promiscuous mode [ 153.280529][ T127] usb 3-1: USB disconnect, device number 2 [ 154.181282][ T5077] device syzkaller0 entered promiscuous mode [ 154.262409][ T5079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 156.726657][ T5102] device syzkaller0 entered promiscuous mode [ 157.840537][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 157.973357][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.046279][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.089278][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.161015][ T5121] device bridge_slave_0 left promiscuous mode [ 158.206908][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.274363][ T5121] device bridge_slave_1 left promiscuous mode [ 158.283655][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.302937][ T5121] bond0: (slave bond_slave_0): Releasing backup interface [ 158.348962][ T5121] bond0: (slave bond_slave_1): Releasing backup interface [ 158.575838][ T5121] team0: Port device team_slave_0 removed [ 158.660953][ T5121] team0: Port device team_slave_1 removed [ 158.841534][ T5121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.913156][ T5121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.015195][ T5121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.091038][ T5121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.248805][ T5126] device syzkaller0 entered promiscuous mode [ 160.654359][ T5146] overlayfs: failed to resolve './file1': -2 [ 162.723209][ T5163] device syzkaller0 entered promiscuous mode [ 162.892374][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.218'. [ 163.163496][ T5177] device syzkaller0 entered promiscuous mode [ 163.688261][ T5186] overlayfs: failed to resolve './file1': -2 [ 166.559709][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 167.084554][ T5215] device syzkaller0 entered promiscuous mode [ 168.075600][ T5236] overlayfs: failed to resolve './file1': -2 [ 168.947104][ T5243] device syzkaller0 entered promiscuous mode [ 170.424965][ T5257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 170.779646][ T5266] device syzkaller0 entered promiscuous mode [ 170.894609][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.104531][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 171.112050][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.163444][ T4316] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 171.183305][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.230330][ T4316] usb 1-1: config 0 descriptor?? [ 171.584694][ T4316] rc_core: IR keymap rc-xbox-dvd not found [ 171.590889][ T4316] Registered IR keymap rc-empty [ 171.644188][ T4316] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 171.708833][ T4316] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 172.937247][ T4316] usb 1-1: USB disconnect, device number 3 [ 172.943147][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 172.996332][ T5280] device syzkaller0 entered promiscuous mode [ 174.399541][ T5294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 175.165382][ T5308] device syzkaller0 entered promiscuous mode [ 179.013197][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 179.333862][ T5357] Invalid ELF header magic: != ELF [ 179.680407][ T5363] device syzkaller0 entered promiscuous mode [ 179.794707][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 179.817761][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 181.184844][ T5379] device syzkaller0 entered promiscuous mode [ 181.457505][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 181.459534][ T5386] openvswitch: netlink: Message has 8 unknown bytes. [ 183.730826][ T5415] device syzkaller0 entered promiscuous mode [ 183.954619][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.144547][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 184.151839][ T37] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 184.169927][ T37] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 184.178672][ T37] usb 3-1: config 166 has no interface number 0 [ 184.185296][ T37] usb 3-1: config 166 has no interface number 1 [ 184.191918][ T37] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 184.203025][ T37] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 184.233702][ T37] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 184.304705][ T37] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 184.381017][ T37] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 184.406466][ T37] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 184.417549][ T37] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 184.431038][ T37] usb 3-1: config 166 interface 177 has no altsetting 0 [ 184.438765][ T37] usb 3-1: config 166 interface 34 has no altsetting 0 [ 184.480655][ T37] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 184.540762][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.595236][ T37] usb 3-1: Product: syz [ 184.621910][ T37] usb 3-1: Manufacturer: syz [ 184.653249][ T37] usb 3-1: SerialNumber: syz [ 184.948946][ T37] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 185.062895][ T37] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 185.210751][ T37] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 185.235707][ T37] usb 3-1: No valid video chain found. [ 185.293521][ T5431] device syzkaller0 entered promiscuous mode [ 185.300028][ T37] usb 3-1: USB disconnect, device number 3 [ 185.641032][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 187.772420][ T5457] device syzkaller0 entered promiscuous mode [ 192.281779][ T5497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.355744][ T5500] device syzkaller0 entered promiscuous mode [ 194.025562][ T5518] device syzkaller0 entered promiscuous mode [ 194.161863][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169985][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.234849][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 196.234853][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 196.247037][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 196.247849][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 197.376459][ T5539] device syzkaller0 entered promiscuous mode [ 198.250980][ T5555] process 'syz.2.336' launched '/dev/fd/-1' with NULL argv: empty string added [ 199.625600][ T5551] IPVS: rr: FWM 3 0x00000003 - no destination available [ 199.632863][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 200.800749][ T4273] Bluetooth: hci4: command 0x0405 tx timeout [ 200.974569][ T37] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.166578][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 201.173806][ T37] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 201.345668][ T37] usb 2-1: config 0 has no interface number 0 [ 201.351838][ T37] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.375268][ T37] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 202.171119][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.184446][ T37] usb 2-1: Product: syz [ 202.188671][ T37] usb 2-1: Manufacturer: syz [ 202.193293][ T37] usb 2-1: SerialNumber: syz [ 202.333847][ T37] usb 2-1: config 0 descriptor?? [ 202.341068][ T37] usb 2-1: can't set config #0, error -71 [ 202.412911][ T5580] random: crng reseeded on system resumption [ 202.445446][ T37] usb 2-1: USB disconnect, device number 3 [ 202.674634][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.884687][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 202.894284][ T14] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 202.934170][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.977542][ T14] usb 3-1: Product: syz [ 203.010946][ T14] usb 3-1: Manufacturer: syz [ 203.033791][ T14] usb 3-1: SerialNumber: syz [ 203.078992][ T14] usb 3-1: config 0 descriptor?? [ 203.131094][ T14] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 203.893385][ T5609] random: crng reseeded on system resumption [ 204.953297][ T14] gspca_ov534_9: reg_r err -71 [ 205.324655][ T14] gspca_ov534_9: Unknown sensor 0000 [ 205.324969][ T14] ov534_9: probe of 3-1:0.0 failed with error -22 [ 206.185928][ T14] usb 3-1: USB disconnect, device number 4 [ 209.572619][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 210.654624][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 211.426970][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.440854][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 211.465158][ T7] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 211.588272][ T7] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 211.608615][ T7] usb 5-1: config 129 has no interface number 0 [ 211.620322][ T7] usb 5-1: config 129 interface 28 altsetting 250 has an invalid endpoint with address 0xFD, skipping [ 211.669956][ T7] usb 5-1: config 129 interface 28 has no altsetting 0 [ 211.691254][ T7] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 211.710624][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.729000][ T7] usb 5-1: Product: syz [ 211.733243][ T7] usb 5-1: Manufacturer: syz [ 211.749278][ T7] usb 5-1: SerialNumber: syz [ 211.981068][ T7] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 212.050894][ T7] usb 5-1: USB disconnect, device number 3 [ 215.955673][ T5703] device syzkaller0 entered promiscuous mode [ 223.790709][ T5751] device syzkaller0 entered promiscuous mode [ 228.759363][ T5791] tipc: Enabling of bearer rejected, failed to enable media [ 228.805660][ T5791] device syzkaller0 entered promiscuous mode [ 230.651774][ T5811] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 233.146097][ T4271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.155761][ T4271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.164177][ T4271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.172943][ T4271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.180615][ T4271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.188032][ T4271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.268015][ T5834] Bluetooth: MGMT ver 1.22 [ 233.781112][ T5839] tipc: Enabling of bearer rejected, failed to enable media [ 234.796649][ T4400] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.961890][ T4400] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.291856][ T4400] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.304764][ T4273] Bluetooth: hci5: command 0x0409 tx timeout [ 235.724557][ T2118] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.921034][ T2118] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 236.089417][ T2118] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.214339][ T2118] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.261781][ T2118] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.270734][ T2118] usb 1-1: Product: syz [ 236.281084][ T2118] usb 1-1: Manufacturer: syz [ 236.296028][ T2118] usb 1-1: SerialNumber: syz [ 236.312249][ T2118] usb 1-1: config 0 descriptor?? [ 236.336170][ T2118] usb 1-1: selecting invalid altsetting 0 [ 236.345550][ T4400] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.472679][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 236.587864][ T14] usb 1-1: USB disconnect, device number 4 [ 237.141286][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.167613][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.180551][ T5830] device bridge_slave_0 entered promiscuous mode [ 237.223054][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.244332][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.266887][ T5830] device bridge_slave_1 entered promiscuous mode [ 237.364691][ T4273] Bluetooth: hci5: command 0x041b tx timeout [ 238.243248][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.352996][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.922708][ T5830] team0: Port device team_slave_0 added [ 239.110922][ T5830] team0: Port device team_slave_1 added [ 239.249929][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.285132][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.434736][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.445937][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 239.616179][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.623288][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.751829][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.839333][ T5909] tipc: Started in network mode [ 239.870648][ T5909] tipc: Node identity veJn@v, cluster identity 4711 [ 239.906865][ T5909] tipc: Enabled bearer , priority 0 [ 240.055705][ T5907] tipc: Resetting bearer [ 240.260283][ T5830] device hsr_slave_0 entered promiscuous mode [ 240.288533][ T5830] device hsr_slave_1 entered promiscuous mode [ 240.319960][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.359331][ T5830] Cannot create hsr debugfs directory [ 240.423957][ T5903] tipc: Disabling bearer [ 241.153531][ T5934] tipc: Enabling of bearer rejected, failed to enable media [ 242.805744][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 243.839244][ T4400] device hsr_slave_0 left promiscuous mode [ 243.871233][ T4400] device hsr_slave_1 left promiscuous mode [ 243.936121][ T4400] device veth1_macvtap left promiscuous mode [ 243.942739][ T4400] device veth0_macvtap left promiscuous mode [ 243.964656][ T4400] device veth1_vlan left promiscuous mode [ 243.981098][ T4400] device veth0_vlan left promiscuous mode [ 245.274679][ T4273] Bluetooth: hci5: command 0x0405 tx timeout [ 245.599073][ T127] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 245.798968][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.810834][ T127] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.833883][ T127] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 245.843309][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.852362][ T127] usb 5-1: Product: syz [ 245.857441][ T127] usb 5-1: Manufacturer: syz [ 245.862165][ T127] usb 5-1: SerialNumber: syz [ 245.870849][ T127] usb 5-1: config 0 descriptor?? [ 246.090012][ T127] usb 5-1: USB disconnect, device number 4 [ 246.138798][ T4400] bond0 (unregistering): Released all slaves [ 246.233772][ T5973] tipc: Enabling of bearer rejected, failed to enable media [ 247.649860][ T5830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.784301][ T5830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.841308][ T5830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.965084][ T5830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.068769][ T6019] tipc: Enabling of bearer rejected, failed to enable media [ 248.220181][ T6016] device syzkaller0 entered promiscuous mode [ 250.021376][ T6051] tipc: Started in network mode [ 250.071111][ T6051] tipc: Node identity 2ac19a50afd8, cluster identity 4711 [ 250.124222][ T6051] tipc: Enabled bearer , priority 0 [ 250.287734][ T6051] tipc: Resetting bearer [ 250.370009][ T6049] tipc: Disabling bearer [ 250.426901][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.477537][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.536209][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.579288][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.618991][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.650658][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.675386][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.682567][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.812385][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.865525][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.926281][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.992551][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.999960][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.573862][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.679433][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.757734][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.911110][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.955160][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.023823][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.578580][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.648118][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.682553][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.708348][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.724911][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.234634][ T4402] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.470037][ T4402] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 254.513346][ T6093] mmap: syz.1.465 (6093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 254.548939][ T4402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.605816][ T4402] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.652779][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 254.704515][ T4402] usb 5-1: Product: syz [ 254.709180][ T4402] usb 5-1: Manufacturer: syz [ 254.731821][ T4402] usb 5-1: SerialNumber: syz [ 254.754642][ T4402] usb 5-1: config 0 descriptor?? [ 254.776112][ T4402] usb 5-1: selecting invalid altsetting 0 [ 254.786368][ T6113] tipc: Enabling of bearer rejected, failed to enable media [ 254.820014][ T6113] device syzkaller0 entered promiscuous mode [ 255.019766][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.043173][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.054717][ T2118] usb 5-1: USB disconnect, device number 5 [ 255.144270][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.596972][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603533][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.685805][ T6130] tipc: Started in network mode [ 255.722086][ T6130] tipc: Node identity 82595a29a163, cluster identity 4711 [ 255.769912][ T6130] tipc: Enabled bearer , priority 0 [ 255.777884][ T6130] device syzkaller0 entered promiscuous mode [ 256.946161][ T2118] tipc: Node number set to 591026729 [ 256.977259][ T6128] tipc: Resetting bearer [ 257.637898][ T6128] tipc: Disabling bearer [ 258.025460][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 258.263019][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.304445][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.332451][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.352264][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.581185][ T7] usb 2-1: usb_control_msg returned -32 [ 258.585429][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.594619][ T7] usbtmc 2-1:16.0: can't read capabilities [ 258.606853][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.699036][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.965607][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.013805][ T5830] device veth0_vlan entered promiscuous mode [ 259.030196][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.135358][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.260571][ T5830] device veth1_vlan entered promiscuous mode [ 259.340384][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.363593][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.424138][ T5830] device veth0_macvtap entered promiscuous mode [ 259.443462][ T5830] device veth1_macvtap entered promiscuous mode [ 259.526962][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.559665][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.613906][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 259.624187][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.647966][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.662552][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.673931][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.684935][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.705295][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.730745][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.747202][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.759715][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.770311][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.827245][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.853258][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.878991][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.913163][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.936899][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.964088][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.018507][ T5830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.042872][ T5830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.066686][ T5830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.098741][ T5830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.125393][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.135956][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.144259][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.162025][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.185385][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.195398][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.470684][ T4316] usb 2-1: USB disconnect, device number 4 [ 260.583560][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.612543][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.222351][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.243805][ T6196] device syzkaller0 entered promiscuous mode [ 261.299916][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.344946][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.371513][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.524754][ T4339] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 261.744296][ T4339] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.767794][ T4339] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.814512][ T4339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.824098][ T4339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 261.845318][ T4339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 261.873645][ T4339] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.883331][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.894428][ T4339] usb 2-1: Product: syz [ 261.898728][ T4339] usb 2-1: Manufacturer: syz [ 261.950905][ T4339] cdc_wdm 2-1:1.0: skipping garbage [ 261.956547][ T4339] cdc_wdm 2-1:1.0: skipping garbage [ 261.984976][ T4339] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 261.991484][ T4339] cdc_wdm 2-1:1.0: Unknown control protocol [ 262.419300][ T2118] usb 2-1: USB disconnect, device number 5 [ 262.895384][ T26] audit: type=1326 audit(1759594816.644:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5f8eec9 code=0x7fc00000 [ 263.208654][ T26] audit: type=1326 audit(1759594816.964:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ee5f8eec9 code=0x7fc00000 [ 263.362769][ T6237] random: crng reseeded on system resumption [ 266.367899][ T6260] tipc: Enabled bearer , priority 0 [ 266.407043][ T6260] device syzkaller0 entered promiscuous mode [ 266.519434][ T6259] tipc: Resetting bearer [ 266.576649][ T6261] delete_channel: no stack [ 266.833149][ T6259] tipc: Disabling bearer [ 269.387185][ T6302] ALSA: mixer_oss: invalid OSS volume 'DI' [ 270.684472][ T127] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 270.864160][ T6309] delete_channel: no stack [ 270.936582][ T127] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 270.991025][ T127] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 271.036048][ T6321] tipc: Enabled bearer , priority 0 [ 271.047542][ T127] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 271.125787][ T6323] device syzkaller0 entered promiscuous mode [ 271.135449][ T127] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 271.255507][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 271.283599][ T6321] tipc: Resetting bearer [ 271.289529][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.321410][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 271.365295][ T6320] tipc: Resetting bearer [ 271.373993][ T127] usb 2-1: string descriptor 0 read error: -22 [ 271.390823][ T127] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 271.453266][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.941822][ T127] usb 2-1: config 0 descriptor?? [ 271.948209][ T6320] tipc: Disabling bearer [ 271.972611][ T127] hub 2-1:0.0: bad descriptor, ignoring hub [ 271.996283][ T127] hub: probe of 2-1:0.0 failed with error -5 [ 272.013831][ T127] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 274.877241][ T7] usb 2-1: USB disconnect, device number 6 [ 275.324615][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 275.403347][ T6359] IPVS: Error connecting to the multicast addr [ 275.682001][ T6360] delete_channel: no stack [ 276.378572][ T6377] syz.0.531 uses obsolete (PF_INET,SOCK_PACKET) [ 278.882347][ T6370] sctp: failed to load transform for md5: -2 [ 281.384106][ T6427] delete_channel: no stack [ 282.261325][ T6442] netlink: 'syz.4.547': attribute type 9 has an invalid length. [ 282.364882][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.389305][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 282.534647][ T14] usb 6-1: device descriptor read/64, error -71 [ 282.702323][ T6449] tipc: Enabling of bearer rejected, failed to enable media [ 282.751866][ T6449] device syzkaller0 entered promiscuous mode [ 282.824433][ T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 283.324574][ T14] usb 6-1: device descriptor read/64, error -71 [ 283.448225][ T14] usb usb6-port1: attempt power cycle [ 283.454642][ T127] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 284.505859][ T127] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDA, skipping [ 284.534136][ T127] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.597916][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.637903][ T127] usb 1-1: Product: syz [ 284.667002][ T127] usb 1-1: Manufacturer: syz [ 284.688956][ T127] usb 1-1: SerialNumber: syz [ 284.694654][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.735997][ T127] usb 1-1: config 0 descriptor?? [ 284.875784][ T127] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 284.906776][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.931168][ T14] usb 6-1: device not accepting address 4, error -71 [ 286.795487][ T127] usb 1-1: USB disconnect, device number 5 [ 286.902460][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 289.640436][ T6518] vivid-007: ================= START STATUS ================= [ 289.649116][ T6518] vivid-007: Enable Output Cropping: true [ 289.662547][ T6518] vivid-007: Enable Output Composing: true [ 289.668785][ T6518] vivid-007: Enable Output Scaler: true [ 289.677258][ T6518] vivid-007: Tx RGB Quantization Range: Automatic [ 289.687840][ T6518] vivid-007: Transmit Mode: HDMI [ 289.754634][ T6518] vivid-007: Display Present: true inactive [ 289.760755][ T6518] vivid-007: Hotplug Present: 0x00000001 [ 289.766903][ T6518] vivid-007: RxSense Present: 0x00000001 [ 289.772910][ T6518] vivid-007: EDID Present: 0x00000001 [ 289.779553][ T6518] vivid-007: ================== END STATUS ================== [ 292.905997][ T6540] device syzkaller0 entered promiscuous mode [ 293.438134][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 293.462468][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.298117][ T22] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 294.540054][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 294.740566][ T22] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 294.752646][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.797363][ T22] usb 6-1: config 0 descriptor?? [ 294.828313][ T6557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 295.982443][ T22] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 296.096261][ T22] usb 6-1: USB disconnect, device number 6 [ 297.281329][ T6577] fido_id[6577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 297.381780][ T6591] input: syz1 as /devices/virtual/input/input8 [ 298.634632][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 298.719160][ T6601] tipc: Enabled bearer , priority 0 [ 298.785230][ T6605] device syzkaller0 entered promiscuous mode [ 298.802594][ T6601] tipc: Resetting bearer [ 298.819586][ T6599] tipc: Resetting bearer [ 298.919663][ T6599] tipc: Disabling bearer [ 299.924566][ T4324] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 300.314643][ T4324] usb 6-1: Using ep0 maxpacket: 8 [ 300.324915][ T4324] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 300.384424][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.396131][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.406458][ T4324] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 300.420783][ T4324] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 300.431814][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.461204][ T4324] usb 6-1: config 0 descriptor?? [ 301.028796][ T6633] tmpfs: Bad value for 'huge' [ 301.467012][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 301.941933][ T6628] sctp: failed to load transform for md5: -2 [ 303.095013][ T4324] usbhid 6-1:0.0: can't add hid device: -71 [ 303.101846][ T4324] usbhid: probe of 6-1:0.0 failed with error -71 [ 303.521707][ T4324] usb 6-1: USB disconnect, device number 7 [ 303.611248][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 305.559139][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 309.065696][ T6714] delete_channel: no stack [ 309.474850][ T2118] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 310.286337][ T2118] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.310941][ T2118] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 310.355018][ T2118] usb 2-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 310.363669][ T2118] usb 2-1: Product: syz [ 310.370506][ T2118] usb 2-1: Manufacturer: syz [ 310.399813][ T2118] usb 2-1: config 0 descriptor?? [ 311.857058][ T4346] usb 2-1: USB disconnect, device number 7 [ 314.248044][ T6759] vivid-008: kernel_thread() failed [ 314.818592][ T6773] delete_channel: no stack [ 316.671407][ T6791] device syzkaller0 entered promiscuous mode [ 317.648295][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.654762][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.392596][ T6830] [ 318.394992][ T6830] ====================================================== [ 318.402037][ T6830] WARNING: possible circular locking dependency detected [ 318.409099][ T6830] syzkaller #0 Not tainted [ 318.413543][ T6830] ------------------------------------------------------ [ 318.420596][ T6830] syz.1.638/6830 is trying to acquire lock: [ 318.426517][ T6830] ffff888079e25b58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 318.436266][ T6830] [ 318.436266][ T6830] but task is already holding lock: [ 318.443661][ T6830] ffff888053add4a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 318.454617][ T6830] [ 318.454617][ T6830] which lock already depends on the new lock. [ 318.454617][ T6830] [ 318.465236][ T6830] [ 318.465236][ T6830] the existing dependency chain (in reverse order) is: [ 318.474282][ T6830] [ 318.474282][ T6830] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 318.483036][ T6830] down_write+0x36/0x60 [ 318.487762][ T6830] process_measurement+0x33c/0x1a10 [ 318.493533][ T6830] ima_file_mmap+0x104/0x150 [ 318.498717][ T6830] __se_sys_remap_file_pages+0x53e/0x770 [ 318.505002][ T6830] do_syscall_64+0x4c/0xa0 [ 318.509959][ T6830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.516384][ T6830] [ 318.516384][ T6830] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 318.523954][ T6830] __lock_acquire+0x2cf8/0x7c50 [ 318.529343][ T6830] lock_acquire+0x1b4/0x490 [ 318.534386][ T6830] down_read_killable+0x4c/0x340 [ 318.539867][ T6830] mmap_read_lock_killable+0x1d/0x60 [ 318.545694][ T6830] lock_mm_and_find_vma+0x2b1/0x2f0 [ 318.551431][ T6830] do_user_addr_fault+0x2db/0xb10 [ 318.556990][ T6830] exc_page_fault+0x60/0x100 [ 318.562125][ T6830] asm_exc_page_fault+0x22/0x30 [ 318.567527][ T6830] fault_in_readable+0x13e/0x1f0 [ 318.573024][ T6830] fault_in_iov_iter_readable+0xbb/0x2e0 [ 318.579238][ T6830] generic_perform_write+0x1d2/0x560 [ 318.585066][ T6830] __generic_file_write_iter+0x172/0x430 [ 318.591235][ T6830] generic_file_write_iter+0xab/0x2e0 [ 318.597151][ T6830] vfs_write+0x44c/0x960 [ 318.601944][ T6830] ksys_write+0x143/0x240 [ 318.606823][ T6830] do_syscall_64+0x4c/0xa0 [ 318.611769][ T6830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.618197][ T6830] [ 318.618197][ T6830] other info that might help us debug this: [ 318.618197][ T6830] [ 318.628429][ T6830] Possible unsafe locking scenario: [ 318.628429][ T6830] [ 318.635883][ T6830] CPU0 CPU1 [ 318.641255][ T6830] ---- ---- [ 318.646710][ T6830] lock(&sb->s_type->i_mutex_key#12); [ 318.652183][ T6830] lock(&mm->mmap_lock); [ 318.659039][ T6830] lock(&sb->s_type->i_mutex_key#12); [ 318.667037][ T6830] lock(&mm->mmap_lock); [ 318.671390][ T6830] [ 318.671390][ T6830] *** DEADLOCK *** [ 318.671390][ T6830] [ 318.679623][ T6830] 3 locks held by syz.1.638/6830: [ 318.684651][ T6830] #0: ffff88807d3ef9e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 318.693917][ T6830] #1: ffff888053f4a460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 318.702833][ T6830] #2: ffff888053add4a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 318.714192][ T6830] [ 318.714192][ T6830] stack backtrace: [ 318.720102][ T6830] CPU: 1 PID: 6830 Comm: syz.1.638 Not tainted syzkaller #0 [ 318.727403][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.737571][ T6830] Call Trace: [ 318.740862][ T6830] [ 318.743819][ T6830] dump_stack_lvl+0x168/0x22e [ 318.748612][ T6830] ? load_image+0x3b0/0x3b0 [ 318.753223][ T6830] ? show_regs_print_info+0x12/0x12 [ 318.758532][ T6830] ? print_circular_bug+0x12b/0x1a0 [ 318.763782][ T6830] check_noncircular+0x274/0x310 [ 318.768740][ T6830] ? add_chain_block+0x940/0x940 [ 318.773759][ T6830] ? lockdep_lock+0xdc/0x1e0 [ 318.778415][ T6830] ? _find_first_zero_bit+0xcf/0x100 [ 318.783751][ T6830] __lock_acquire+0x2cf8/0x7c50 [ 318.788657][ T6830] ? xfd_validate_state+0x69/0x140 [ 318.793820][ T6830] ? verify_lock_unused+0x140/0x140 [ 318.799049][ T6830] ? mark_lock+0x94/0x320 [ 318.803404][ T6830] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.809409][ T6830] ? lock_chain_count+0x20/0x20 [ 318.814294][ T6830] ? __schedule+0x10ba/0x40b0 [ 318.818994][ T6830] ? finish_task_switch+0x265/0x8f0 [ 318.824220][ T6830] lock_acquire+0x1b4/0x490 [ 318.828773][ T6830] ? mmap_read_lock_killable+0x1d/0x60 [ 318.834296][ T6830] ? __schedule+0x10f4/0x40b0 [ 318.838998][ T6830] ? read_lock_is_recursive+0x10/0x10 [ 318.844387][ T6830] ? cmp_ex_search+0x1a/0x70 [ 318.849004][ T6830] ? bsearch+0x8a/0xb0 [ 318.853090][ T6830] ? fault_in_readable+0x13e/0x1f0 [ 318.858214][ T6830] ? search_extable+0x8c/0xd0 [ 318.862905][ T6830] ? trim_init_extable+0x3b0/0x3b0 [ 318.868030][ T6830] ? mmap_read_lock_killable+0x1d/0x60 [ 318.873510][ T6830] down_read_killable+0x4c/0x340 [ 318.878464][ T6830] ? mmap_read_lock_killable+0x1d/0x60 [ 318.883952][ T6830] mmap_read_lock_killable+0x1d/0x60 [ 318.889261][ T6830] lock_mm_and_find_vma+0x2b1/0x2f0 [ 318.894567][ T6830] do_user_addr_fault+0x2db/0xb10 [ 318.899615][ T6830] exc_page_fault+0x60/0x100 [ 318.904225][ T6830] asm_exc_page_fault+0x22/0x30 [ 318.909086][ T6830] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 318.914831][ T6830] Code: 38 e9 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 17 e9 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 fa e8 [ 318.934472][ T6830] RSP: 0018:ffffc9000c267a90 EFLAGS: 00050287 [ 318.940551][ T6830] RAX: ffffffff81bbe5d9 RBX: 0000000000001000 RCX: 0000000000080000 [ 318.949019][ T6830] RDX: ffffc9000dde1000 RSI: 0000000000010920 RDI: 0000000000010921 [ 318.957003][ T6830] RBP: 0000000000000000 R08: ffff888029dc8000 R09: 0000000000000002 [ 318.964992][ T6830] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000093000 [ 318.972972][ T6830] R13: dffffc0000000000 R14: 0000200000092000 R15: 0000200000092000 [ 318.980966][ T6830] ? fault_in_readable+0x139/0x1f0 [ 318.986103][ T6830] fault_in_iov_iter_readable+0xbb/0x2e0 [ 318.991771][ T6830] generic_perform_write+0x1d2/0x560 [ 318.997077][ T6830] ? generic_file_direct_write+0x660/0x660 [ 319.002902][ T6830] ? __file_remove_privs+0x5b0/0x5b0 [ 319.008199][ T6830] ? preempt_count_add+0x8d/0x190 [ 319.013233][ T6830] ? rwsem_write_trylock+0x12f/0x1b0 [ 319.018576][ T6830] ? clear_nonspinnable+0x60/0x60 [ 319.023612][ T6830] ? generic_write_checks_count+0x3d9/0x4c0 [ 319.029542][ T6830] __generic_file_write_iter+0x172/0x430 [ 319.035195][ T6830] generic_file_write_iter+0xab/0x2e0 [ 319.040585][ T6830] vfs_write+0x44c/0x960 [ 319.044850][ T6830] ? file_end_write+0x250/0x250 [ 319.049731][ T6830] ? __fget_files+0x44a/0x4d0 [ 319.054441][ T6830] ? __fdget_pos+0x2ae/0x360 [ 319.059046][ T6830] ? ksys_write+0x71/0x240 [ 319.063476][ T6830] ksys_write+0x143/0x240 [ 319.068022][ T6830] ? __ia32_sys_read+0x80/0x80 [ 319.072805][ T6830] do_syscall_64+0x4c/0xa0 [ 319.077236][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 319.081926][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 319.086616][ T6830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.092517][ T6830] RIP: 0033:0x7f4c9318eec9 [ 319.096954][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.116582][ T6830] RSP: 002b:00007f4c94055038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.125009][ T6830] RAX: ffffffffffffffda RBX: 00007f4c933e5fa0 RCX: 00007f4c9318eec9 [ 319.132992][ T6830] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 319.140985][ T6830] RBP: 00007f4c93211f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.148968][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.156946][ T6830] R13: 00007f4c933e6038 R14: 00007f4c933e5fa0 R15: 00007ffc6347bf08 [ 319.164932][ T6830] [ 319.176495][ T6821] delete_channel: no stack [ 319.354484][ T6500] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 319.528173][ T6841] loop2: detected capacity change from 0 to 512 [ 319.535312][ T6841] EXT4-fs: Ignoring removed nobh option [ 319.541030][ T6841] EXT4-fs: inline encryption not supported [ 319.578798][ T6500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.603279][ T6500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.636410][ T6500] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.651910][ T6500] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.662737][ T6500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.679618][ T6500] usb 5-1: config 0 descriptor?? [ 319.710315][ T6841] EXT4-fs (loop2): Test dummy encryption mode enabled [ 319.725850][ T6841] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 319.736444][ T6841] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.639: invalid indirect mapped block 2683928664 (level 1) [ 319.752201][ T6841] EXT4-fs (loop2): 1 truncate cleaned up [ 319.758181][ T6841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.822312][ T6841] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.639: Invalid inode table block 0 in block_group 0 [ 319.885431][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 320.115488][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.130368][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.138407][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.145904][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.153417][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.160960][ T6500] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 320.169814][ T6500] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 320.179739][ T6500] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 320.448750][ T2118] usb 5-1: USB disconnect, device number 6