last executing test programs: 9.576006497s ago: executing program 3 (id=150): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="005ecd") read$char_usb(r1, &(0x7f0000000300)=""/215, 0xd7) 8.091987536s ago: executing program 1 (id=154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000040817839d0144b6d201040000000000"], 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 7.363621403s ago: executing program 1 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000003080104000100000000000000000000050003000600000024000480080004400000000008000a5f00000000080009400000000008000b400000"], 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') fcntl$setstatus(r1, 0x4, 0x6800) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = syz_usb_connect(0x4, 0x24, &(0x7f0000019100)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'unlock', ' ', 'mem'}, 0xb) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2f, 0xf3, 0x80000001, 0x1008, 0x726, 0x6, 0x1ff, 0x7f, 0x27, 0x10, {0x52b2, 0x100040}, 0x5, 0xfd}}) syz_io_uring_setup(0x73ed, &(0x7f0000000100)={0x0, 0x1431, 0x4, 0x0, 0x17b}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000)) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @remote}}}, 0x88) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000280)={0xe, 0x2, 0x5, 0x880, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x1) 6.658351721s ago: executing program 1 (id=157): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010700"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f00000000c0)=0x408, 0x4) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 5.935552268s ago: executing program 3 (id=160): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x6145, 0x7721, 0x17, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a0, 0xdb00, 0x1, 0x26}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) connect$unix(r5, &(0x7f0000000440)=@file={0x1}, 0x6e) close(0x3) 5.395728897s ago: executing program 2 (id=161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x2a, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r4 = socket(0x80000000000000a, 0x80000, 0x20000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) 5.3281022s ago: executing program 4 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 5.109284832s ago: executing program 4 (id=164): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xfffff001, @empty, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x10, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e24, 0x2, @empty, 0x1000}, @in={0x2, 0x4e24, @multicast1}], 0x94) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x4, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x4d, 0x24040814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x1, 0x56, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.836056177s ago: executing program 2 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 4.694431384s ago: executing program 3 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020108001342f0ae008008000100ac1414aa08000200e00000010c0002800500010093000000b38bbadbb04f8fa8119ac70919b3159198ace01b0e7262456e9ae9439500ee41e139d9ffa38b96356eebae66619ff42bf91d2b2087b65f322529734451b85bb08b81207c8a9a593974c07769de9a7d267493df18dadec0fdd514abbae4d23e4a93ff96056552291aacecd37914f004213e194e26a01c877e8d7cb0901e6156d524b6b793a9b9084bdf4219755e4bd6efdd5b63ab2e4f4057fcbca2411a1958c081aebe8cdf975ec32b950d298343372a32a236adfa2ef3"], 0x38}}, 0x4004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xff, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.660917766s ago: executing program 2 (id=167): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c240200000000000008000005240500000824070000c9009e0c240700000000a3e82f07070d240701060000fd80"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 4.068059366s ago: executing program 1 (id=168): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2af82) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3f, &(0x7f0000000400)=[{0x11, '\x00', @data=0x1, 0x3}]}) 4.067679357s ago: executing program 3 (id=169): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 3.880585967s ago: executing program 3 (id=170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601019e560000000000000000000505000100070000000900020073797a31000000001400078008000600ffffffff08001340000000020500050002000000050004000000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x4000820) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket(0x1e, 0x4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES16=r1, @ANYRES8=r3, @ANYBLOB="163cde62889bde70eb928e", @ANYRESDEC=r0], 0xfc}}, 0x8001) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x7) r7 = open_tree(r6, &(0x7f0000000280)='./file0\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) 2.921863137s ago: executing program 4 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x1f, 0x108, 0xfd, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000045}, 0x40814) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f00000000c0)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) syz_usb_control_io(r2, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x0, 0x9, 0x2002, {0x0, 0xb}, 0x6, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x28, r7, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_BEARER]}, 0x1d}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) 2.920018367s ago: executing program 1 (id=174): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 2.766126405s ago: executing program 0 (id=175): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') lseek(r0, 0x4, 0x1) 2.649063311s ago: executing program 1 (id=176): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x480, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioprio_set$pid(0x3, 0x0, 0x0) r2 = io_uring_setup(0x476, &(0x7f0000000280)={0x0, 0x7362, 0x40, 0x0, 0x5f}) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x81, @mcast2, 0x2}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/65, 0x0, 0x9000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/166, &(0x7f0000000140)=""/68, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) r5 = eventfd(0x42287084) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x1000040000906, 0x12) 2.580171775s ago: executing program 0 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="525cfc80ae17ce55a8dd0aacc55c4b86faa82835f9dfd5cf8aa6220e6e33dee8286f6c78f904f531292b21041f8f49d95e4f", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0x8, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.114942449s ago: executing program 0 (id=178): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.964753337s ago: executing program 2 (id=179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 1.849913603s ago: executing program 3 (id=180): fsopen(&(0x7f0000000000)='adfs\x00', 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0xb0, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8c64, 0x3}, {0x6, 0x24, 0x1a, 0x20fc, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x17, 0xa, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0xbe, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xe0, 0x4}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, &(0x7f00000000c0)=@string={0x7, 0x3, "c579646132"}}]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002c80)={0x2020}, 0x2020) pipe2(0x0, 0x4880) 1.671490773s ago: executing program 2 (id=181): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) writev(r0, &(0x7f0000002880)=[{&(0x7f00000000c0)="07a3", 0x2}, {&(0x7f0000000380)="5c59308b2295de6dc83ec114f83bbe1943e2a62f76b8f3a0a5382f3b77c3be1b7dbeb29d499b8e45a19157bf49574d0bfbefef914bc50bbe569afbee8c04fbe3d7811fe05015d3496b41ee3948642335ca9dc818ae282de2a94d179046d3210aa5b2441b758cbadc7dbc086589a2af6ddf412954fd72fd06dc40c74fed12f513d794f70d3267221641d42576b9046c81624a368a62eb4f6e0c55b0483daa318dd540e040af9423d1cf6fcaceec56b30e30176435d4c9587833beaf9d114b90f813418599bd1e4e28c65d026f24efc7f779e89fccdf579cebb122be42868b9fa0425f5998ef2fb7fde322046a55", 0xed}, {&(0x7f0000001880)="40a957698d404439dae0a63e1378b244f09991fb3b9d136c19c0b5507732fa71a52ba5c0d1e5b8487b396bb3535b8dce060496ad975dbe59c1ab242c2d2d73a9ce9c82279d7edf6890e5ae8b50f9537763a46ec519dd79c8f63f0a38761817292bc1cbc9a7704831e420bdc94333521df70e28a4e67ec12120156a26f77d55880451feb9a8c6c8553881e6be092b5514038dfc7e23901fa187ed67278db1e11af6d16c611778398edfb46c3cfaff41005531cc0e719eebcfb1de53377d55de3f1253a288efbf8c758fd7ce2a727585aba18b56b1cbc0cfd846e7cd2c0c6b2bae1a8de7ef7d5923ad0015e9845441fe1b0b2f6626614f9fa58aa3985f06331db73f85384ba9497f3547f769f97a9b10854c23305832300c922ef4981ddb87e229ab9894efd38382faaa95eb04740791e71e19b5ec5233c7d85173c7e47c3f3f75d41fd0ab66b4f26029fce2a2d7bf039db300e86e7531d5ee796c5e2b2335b397c10e2259d61092e40ea08008585d0574825c4ded5f85dd1170a634b604014d95009d3d9e5cda1f665a4f51e1e9b599d346b6ee4755370c69e68f412f1656365104f21f48432f4e763b82dbf32c8894b89b16b2bd77eac1a5cfcdeeb5a01e340c9e1d4a7b369f81941cc86e9a0a9f6083f1576f1814aa9c0a32973c58cd22e265edcae05423c9c7ac180e36ba3e027f0343129a1a569f6f6482268ca289c1c2606541bac812b0beabfa3becd50a38c0f2f71fc5e7e0cc1b4fa512c5554f2ea9409cb15804218aa94051de92aa696b7ff66a3131510e22ab4858ac0410f43cff0acfbee59443ee1f79fa0fb54d6f1be081d42eb8bfdb1eb1d6832e67371596cd44460b6a75afb96ab0ce20aa72a4d679a430520a5ef7ea7daba4c3f0f73a53cfaa9f281c1ed218cd594bdb59871192cf549a964bd5fc1b33e0117f7c7e0f5c5f686fc9de8cc6349f9c4f951b912969cd99f673b73826bdf744b546bb510b43b2c07a66df592dbf1ca6c58d9631e8f33b2b1bc6c230f9f8c1a1aa86ee65175f2764d4f01117dedd00d58b195545832336e5f3ea4803e4426a4f9a7f35c36b201d76d4b073b292902e4f19ef6286a1cbc2179232502c67fd7f6f894d726a2be877d3459aa7b5a76c42aa26743d38cad5da4acbf36223c5f163ef281f0a9e16941a9a835221aeab31d0ac5d41315952f2570a3a36e547e4e294a91c926fbc818dd220070c7962095a53f9cdec27e1d3251c196776639ca6bb4c99a4673e86f987ff253cc441dee279e4274190c865ffcb3aeec455156e5299f01fcc12c0d6c75107a4746a42b289ee7c5cddf421533e12fa1268573753bd9c221809aec13fc7dd018ea818cc8e48b8a106e5354e14af11b8351cc7543edf0ad18c4cf9449b3336893bc959651e0a195e1bf1fb68d71bb1326e1bc337664eeb47e765cc496c9cba753bd812328c3333b8a6d27673614c00d9b88c876dea9c5435fe1c07a403a4d5d76035dcad86cce8929b37f8e87c098b6c692ab4b2bc5f4376744163cc0b5aac3bc714ab4885ec8d9d7bfe5ed949a196985dac1e6d774e1b9652d2e9e3ba1b1453bd4cf5fff7f8a28d8fe4096879f4417fca40ccf4592e24a9f80c934177107c66b8cabf7a84274ffc9e773611a7f2787d6a576d164f018ec23dd445a1bca1fed60aadaae9585d7113ea2f816030f1a7d3dbd22d2a1dd03bc5ff8a442c36ea0b56401dd3cde60d284cf039b4206515418131e1b277c378c56446cad52d89677fbc585d38e62656ad641c68a581562d028b24d2142e613a3df9709a6e7a78347b19a137fa4ffd9aed87977c805e72d56a536cae904b58492b786eec8ec87fa5fec1541f6ce19aaab9fafb8bb3398df7e001f227f70ca77e8d8a3d22255effdc31f041593bcc919a5f19028e97a94f2f91922fb15daf2cc857dc38fb33224569be0c6c0d1fd0ff087d6aaf4135708486dd2ce5ef9d2266f5781117dd567393626c15c564e8829bc671cfd06c49cb0c4deac631ac2ce340768a3f24bd82d5273b0c1200bc781cc181d13a1f7f059ff3aef909114092f1ce3bf11a307c9e3ee1bdc4c8dae84c8f3478243492ecb226ff5c0625bdb6817073a25ac2f057773a1aed1467bdf62391593d5deda5d7923a2c55a26d80ad72a738c047cc302e287c48a734a6ff8e15c6b74fb69ad664bcc1b98a2f8e82f96f4d0d9abd0691453dbf264fd7f9fc847b1f9310eb315da43aa277905d33dd1b74abc0a57b4547f5d04e6cc3801cca4b8c1617c0dda87c398bfd7ab10f9f0b0591a21a7ce1467ecfd703450aa5cd6a41e3e9e36080fdafae6f956e45427799f47a0a6d543e7b87b7e638155a5d3e62c19c24ee4f87134910c5d37d1eced5407a17a4e1df3de51133395526b889b1dbddf4b1d0cd14063d8397cb76bdd369bf1e2af06bdd17240d0962c0bb0801b656063f8aea70c881ff39e41833233d8f08a7dca6be58221d40252e29367bc2bfef7d310697c29ff83927691e2c926a7fbf2a0d7392e7ff9bc1eb794edc2b2bad1b2a96cb04aad331fbb28e586df07a0f792cb9", 0x712}], 0x3) 1.597862287s ago: executing program 2 (id=182): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 452.549007ms ago: executing program 0 (id=183): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x27, &(0x7f0000000340)={0x3d, 0x3f78, 0x3}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 350.691352ms ago: executing program 0 (id=184): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4c, 0x8000, 0x100000000007, 0x9, 0x3, 0x2, 0x106c, 0x100, 0x8008000000000, 0x80000004000080, 0xff, 0xa, 0x0, 0x4, 0x0, 0x8002], 0x1, 0x3c5210}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 206.8534ms ago: executing program 0 (id=185): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 185.983481ms ago: executing program 4 (id=186): syz_emit_ethernet(0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="36ed"], 0x0) 127.455734ms ago: executing program 4 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r2}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r4, 0x6f50, 0x42a9) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 4 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 58.440098][ T4173] cgroup: Unknown subsys name 'net' [ 58.545595][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.013446][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.919977][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.974129][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.025301][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.035015][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.124480][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.152581][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.160538][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.169087][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.182489][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.189887][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.198348][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.262061][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.269287][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.277607][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.290572][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.313310][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.320548][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.328806][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.336417][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.343799][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.351624][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.360576][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.375626][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.382871][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.391411][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.399071][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.406146][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.414109][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.436211][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.443420][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.451811][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.480028][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.515393][ T4190] team0: Port device team_slave_0 added [ 62.523432][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.548455][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.560206][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.571410][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.581772][ T4190] team0: Port device team_slave_1 added [ 62.623632][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.641604][ T4196] team0: Port device team_slave_0 added [ 62.647689][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.654786][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.663743][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.672542][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.680344][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.706544][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.725544][ T4186] team0: Port device team_slave_0 added [ 62.732968][ T4196] team0: Port device team_slave_1 added [ 62.739942][ T4186] team0: Port device team_slave_1 added [ 62.745784][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.753030][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.761108][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.768798][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.775864][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.802189][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.843390][ T4187] team0: Port device team_slave_0 added [ 62.863784][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.871044][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.897318][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.923218][ T4187] team0: Port device team_slave_1 added [ 62.930611][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.937711][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.964478][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.976283][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.983718][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.010278][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.027449][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.045170][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.055462][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.065276][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.091982][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.127920][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.135230][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.154777][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.162238][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.189004][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.202075][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.209350][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.235838][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.280671][ T4185] team0: Port device team_slave_0 added [ 63.298380][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.305085][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.312529][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.320840][ T4186] Cannot create hsr debugfs directory [ 63.331448][ T4185] team0: Port device team_slave_1 added [ 63.387750][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.394799][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.402121][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.410082][ T4187] Cannot create hsr debugfs directory [ 63.420752][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.428269][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.454934][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.470575][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.478206][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.484867][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.492502][ T4196] Cannot create hsr debugfs directory [ 63.517187][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.524248][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.551465][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.617455][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 63.626745][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 63.633068][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 63.697029][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.703935][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.707242][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.717353][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.723983][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.731627][ T4185] Cannot create hsr debugfs directory [ 63.900072][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.914448][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.936943][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.960158][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.004400][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.028184][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.038634][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.054473][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.083291][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.093781][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.112825][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.124589][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.189487][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.201882][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.228964][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.238478][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.320725][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.335414][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.345283][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.363932][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.375985][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.387442][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.399307][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.411318][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.424498][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.434151][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.443778][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.451311][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.461836][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.501325][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.510384][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.519644][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.532058][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.539311][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.548011][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.568439][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.602012][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.613008][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.622876][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.633955][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.642208][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.650558][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.663490][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.673979][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.683838][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.702748][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.722692][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.741645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.752332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.760295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.770610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.779497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.789155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.798023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.805792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.815062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.824259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.832867][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.840016][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.855641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.864501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.873685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.882504][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.889623][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.899140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.908011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.916572][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.923699][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.932327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.947995][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.959127][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.973319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.981846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.991058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.000169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.010112][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.017237][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.034598][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.050033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.065988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.080602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.098506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.107530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.116033][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.123326][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.158089][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.167749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.176075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.186265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.196532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.207781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.216070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.225863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.234821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.243900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.253573][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.260792][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.276975][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.288280][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.315621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.324911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.336410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.345368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.353714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.362921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.372541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.382434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.391652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.399682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.410693][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.419924][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.433331][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.442678][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.453733][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.461368][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.470984][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.480309][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.489391][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.496560][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.525127][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.537113][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.553442][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.565331][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.576187][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.585097][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.595537][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.604126][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.614595][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.624862][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.634047][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.642874][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.652575][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.666834][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.674934][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.698238][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 65.709476][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.717766][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 65.729441][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 65.736266][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.752344][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.763507][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.777797][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 65.785652][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 65.793717][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.804426][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.813345][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.822577][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.831394][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.840438][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.848825][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.860535][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.879900][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.903614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.916011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.925666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.935831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.945814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.953912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.963995][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.990159][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.029101][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.058832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.066396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.080344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.090446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.123733][ T4190] device veth0_vlan entered promiscuous mode [ 66.155287][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.172131][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.195702][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.211864][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.222844][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.239161][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.285074][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.294001][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.305326][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.313281][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.324242][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.333100][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.344730][ T4190] device veth1_vlan entered promiscuous mode [ 66.357087][ T4186] device veth0_vlan entered promiscuous mode [ 66.363808][ T4187] device veth0_vlan entered promiscuous mode [ 66.375896][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.384252][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.392176][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.401003][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.409439][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.418594][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.426441][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.443537][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.462779][ T4187] device veth1_vlan entered promiscuous mode [ 66.472476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.481013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.489652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.497698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.509380][ T4186] device veth1_vlan entered promiscuous mode [ 66.528551][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.565318][ T4190] device veth0_macvtap entered promiscuous mode [ 66.613250][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.624130][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.633855][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.642830][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.652757][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.662941][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.671713][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.680843][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.689718][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.702765][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.714674][ T4186] device veth0_macvtap entered promiscuous mode [ 66.734092][ T4187] device veth0_macvtap entered promiscuous mode [ 66.750941][ T4190] device veth1_macvtap entered promiscuous mode [ 66.763252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.774149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.784103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.793101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.802019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.811761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.820773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.829827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.839064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.852872][ T4186] device veth1_macvtap entered promiscuous mode [ 66.861012][ T4196] device veth0_vlan entered promiscuous mode [ 66.882423][ T4187] device veth1_macvtap entered promiscuous mode [ 66.895685][ T4196] device veth1_vlan entered promiscuous mode [ 66.923600][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.949307][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.962822][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.973144][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.983961][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.993634][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.005264][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.017737][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.029521][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.053321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.063096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.077519][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.098711][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.110344][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.122251][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.132104][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.143916][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.154803][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.165908][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.178176][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.185912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.195617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.205062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.214070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.223672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.232702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.241888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.251946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.278594][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.288090][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299000][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.313800][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.342786][ T4185] device veth0_vlan entered promiscuous mode [ 67.354508][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.363874][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372721][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.383567][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.395351][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.406262][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.416543][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.427635][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.444312][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.452174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.460849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.470077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.479287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.487892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.496577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.505858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.513788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.526949][ T4196] device veth0_macvtap entered promiscuous mode [ 67.537987][ T4196] device veth1_macvtap entered promiscuous mode [ 67.550497][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.564234][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.573284][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.582127][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.618288][ T4185] device veth1_vlan entered promiscuous mode [ 67.703021][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.720670][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731296][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.742219][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.752438][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762906][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.774272][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.783882][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 67.798197][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 67.814063][ T4185] device veth0_macvtap entered promiscuous mode [ 67.816293][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 67.824743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.836181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.844538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.853511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.861503][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 67.868204][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 67.868467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.883468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.892473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.901634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.910483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.936527][ T4185] device veth1_macvtap entered promiscuous mode [ 67.951395][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.962287][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972429][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.983184][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.993333][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.004101][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.015389][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.049465][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.049465][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.049522][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.058389][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.081477][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.090073][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.100047][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.109905][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.117946][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.128143][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.137679][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146603][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.155702][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.228015][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.232266][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.243599][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.256541][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.256742][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.276385][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.286922][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.297821][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.308393][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.319876][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.331242][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.377082][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.385398][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.394827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.409522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.419059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.428450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.438572][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.449499][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.459978][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.471128][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.482926][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.493659][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.504306][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.515380][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.527737][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.548627][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.573149][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.590176][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.602992][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.613359][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.622791][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.639281][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.647579][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.647627][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.662616][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.695486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.706133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.776505][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.794624][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.830701][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.847738][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.873917][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.906065][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.023724][ T4266] loop1: detected capacity change from 0 to 512 [ 69.281732][ T4266] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 69.859134][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 69.867528][ T4225] Bluetooth: hci4: command 0x0419 tx timeout [ 69.905393][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 69.914838][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.949630][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.960345][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.990291][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.013698][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.021320][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.114814][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.153650][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.196531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.379487][ T4291] usb usb8: usbfs: process 4291 (syz.1.8) did not claim interface 0 before use [ 70.626984][ T4258] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.897171][ T4258] usb 4-1: Using ep0 maxpacket: 16 [ 71.037463][ T4258] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.058066][ T4258] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.075945][ T4317] loop4: detected capacity change from 0 to 128 [ 71.093991][ T4258] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 71.116992][ T4258] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.124055][ T4258] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 71.133958][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.147495][ T4258] usb 4-1: config 0 descriptor?? [ 71.228312][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 71.305065][ T4317] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.329969][ T4322] loop0: detected capacity change from 0 to 512 [ 71.355250][ T4322] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 71.386085][ T4322] device syzkaller0 entered promiscuous mode [ 71.466674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.486664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.496664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.506664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.516664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.536678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.546672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.568496][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.575267][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.784922][ T4284] device veth1_macvtap left promiscuous mode [ 71.880713][ T4284] device veth1_macvtap entered promiscuous mode [ 71.996940][ T4258] usbhid 4-1:0.0: can't add hid device: -71 [ 72.003279][ T4258] usbhid: probe of 4-1:0.0 failed with error -71 [ 72.025751][ T4258] usb 4-1: USB disconnect, device number 2 [ 72.483481][ T4349] capability: warning: `syz.0.24' uses deprecated v2 capabilities in a way that may be insecure [ 72.552840][ T4284] syz.3.4 (4284) used greatest stack depth: 20112 bytes left [ 72.559258][ T4351] binder: 4350:4351 ioctl c0306201 0 returned -14 [ 72.588101][ T4351] binder: 4350:4351 unknown command 1074553619 [ 72.594720][ T4351] binder: 4350:4351 ioctl c0306201 200000000040 returned -22 [ 72.626125][ T4351] binder: 4350:4351 ioctl 4018620d 0 returned -22 [ 72.719154][ T4358] IPVS: length: 247 != 8 [ 72.825489][ T4364] loop0: detected capacity change from 0 to 128 [ 72.940521][ T4364] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 72.946542][ T4368] device syzkaller0 entered promiscuous mode [ 72.973402][ T4364] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.026678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.046674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.076686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.483046][ T4373] device bridge0 entered promiscuous mode [ 73.511946][ T4373] device vlan2 entered promiscuous mode [ 73.541773][ T4373] bridge0: port 3(vlan2) entered blocking state [ 73.585570][ T4373] bridge0: port 3(vlan2) entered disabled state [ 74.135335][ T4384] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 74.348283][ T4392] device syzkaller0 entered promiscuous mode [ 74.361782][ T4395] loop0: detected capacity change from 0 to 128 [ 74.404718][ T4398] process 'syz.1.43' launched './file2' with NULL argv: empty string added [ 74.534610][ T4395] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 74.550677][ T4395] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.492883][ T4404] ======================================================= [ 75.492883][ T4404] WARNING: The mand mount option has been deprecated and [ 75.492883][ T4404] and is ignored by this kernel. Remove the mand [ 75.492883][ T4404] option from the mount to silence this warning. [ 75.492883][ T4404] ======================================================= [ 75.839719][ T4427] loop2: detected capacity change from 0 to 128 [ 75.909675][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 75.922914][ T4427] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.152083][ T4432] loop0: detected capacity change from 0 to 128 [ 76.292051][ T4432] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 76.323219][ T4432] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.930700][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 77.196408][ T4445] input: syz0 as /devices/virtual/input/input5 [ 77.476958][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.656801][ T4450] input: syz1 as /devices/virtual/input/input6 [ 77.744466][ T4453] loop0: detected capacity change from 0 to 128 [ 77.846900][ T7] usb 3-1: config 0 has no interfaces? [ 77.876316][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 77.876399][ T4453] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.225938][ T4458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.59'. [ 78.239918][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.248605][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.373195][ T7] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 78.411680][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.446757][ T7] usb 3-1: Product: syz [ 78.504527][ T7] usb 3-1: Manufacturer: syz [ 78.527550][ T7] usb 3-1: SerialNumber: syz [ 78.592915][ T7] usb 3-1: config 0 descriptor?? [ 78.776216][ T4466] loop0: detected capacity change from 0 to 128 [ 78.808895][ T4469] loop1: detected capacity change from 0 to 128 [ 78.810036][ T4466] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 78.828852][ T4466] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.905696][ T1107] usb 3-1: USB disconnect, device number 2 [ 78.921488][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 79.091471][ T4469] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.713900][ T4481] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 79.942633][ T144] device veth1_macvtap left promiscuous mode [ 80.112206][ T4498] loop2: detected capacity change from 0 to 128 [ 80.256244][ T4498] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 80.277440][ T4498] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.525147][ T4514] loop3: detected capacity change from 0 to 128 [ 81.614296][ T4514] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 81.698431][ T4514] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.855822][ T4519] loop4: detected capacity change from 0 to 128 [ 81.991531][ T4519] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 82.009592][ T4519] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.612296][ T4524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.80'. [ 82.720080][ T4526] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 82.764217][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.771995][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.183028][ T4259] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.416793][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.426740][ T4259] usb 4-1: Using ep0 maxpacket: 32 [ 83.546995][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.563155][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.573910][ T4259] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 83.585527][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.606366][ T4259] usb 4-1: config 0 descriptor?? [ 83.634682][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.676785][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 83.688738][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.799508][ T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 83.977018][ T23] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 83.992365][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.001509][ T23] usb 2-1: Product: syz [ 84.005771][ T23] usb 2-1: Manufacturer: syz [ 84.016707][ T23] usb 2-1: SerialNumber: syz [ 84.090873][ T4259] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 84.099952][ T4259] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 84.125484][ T4507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.128261][ T4259] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 84.134878][ T4507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.158068][ T4507] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.167345][ T4507] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.416907][ T4259] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 84.479367][ T23] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.581423][ T4545] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 84.581423][ T4545] The task syz.2.87 (4545) triggered the difference, watch for misbehavior. [ 84.627686][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 84.696996][ T23] usb 2-1: USB disconnect, device number 2 [ 84.722265][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.847047][ T4259] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 85.152773][ T4528] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 85.257440][ T4528] ft260 0003:0403:6030.0001: failed to reset I2C controller: -108 [ 85.364807][ T4562] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 85.416920][ T4227] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 85.615797][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 85.795269][ T4567] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 85.802087][ T4567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.869478][ T4567] vhci_hcd vhci_hcd.0: Device attached [ 86.126762][ T4225] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 86.291941][ T4565] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 86.302597][ T4259] usb 4-1: USB disconnect, device number 3 [ 86.446297][ T4579] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 86.453061][ T4579] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.520895][ T4579] vhci_hcd vhci_hcd.0: Device attached [ 86.557662][ T26] audit: type=1326 audit(1777351377.202:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.3.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a716edd9 code=0x0 [ 86.579371][ T4572] vhci_hcd: connection reset by peer [ 86.587754][ T4580] vhci_hcd: connection closed [ 86.594108][ T9] vhci_hcd: stop threads [ 86.626769][ T9] vhci_hcd: release socket [ 86.645038][ T9] vhci_hcd: disconnect device [ 86.665344][ T9] vhci_hcd: stop threads [ 86.679613][ T9] vhci_hcd: release socket [ 86.691614][ T9] vhci_hcd: disconnect device [ 86.821843][ T1335] cfg80211: failed to load regulatory.db [ 88.012534][ T4604] loop0: detected capacity change from 0 to 128 [ 88.147675][ T4604] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 88.181174][ T4604] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.536826][ T4258] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.765351][ T4633] device syzkaller0 entered promiscuous mode [ 89.946412][ T4258] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 89.993260][ T4258] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.227167][ T4258] usb 3-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 90.276695][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.307357][ T4258] usb 3-1: Product: syz [ 90.311687][ T4258] usb 3-1: Manufacturer: syz [ 90.348729][ T4258] usb 3-1: SerialNumber: syz [ 90.526807][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 90.658501][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 90.703722][ T4655] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.763594][ T4655] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.805917][ T4655] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.835696][ T4655] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.876435][ T4655] device geneve2 entered promiscuous mode [ 90.898099][ T4655] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.936949][ T4655] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.963227][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.976692][ T23] usb 1-1: config 0 has no interface number 0 [ 90.976995][ T4655] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.992388][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 91.018052][ T4655] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.034037][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 91.069668][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.111453][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.156346][ T23] usb 1-1: config 0 descriptor?? [ 91.207094][ T4642] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.239358][ T23] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 91.297884][ T4225] vhci_hcd: vhci_device speed not set [ 91.425982][ T4258] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 91.453388][ T4258] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 91.464461][ T4259] usb 1-1: USB disconnect, device number 2 [ 91.476694][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 91.544376][ T4258] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 91.611214][ T4553] udevd[4553]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.630684][ T4258] usb 3-1: USB disconnect, device number 3 [ 92.324651][ T4680] loop2: detected capacity change from 0 to 128 [ 92.557845][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 92.604248][ T4680] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.100791][ T4697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.940388][ T4719] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.994143][ T4721] xt_hashlimit: size too large, truncated to 1048576 [ 94.022140][ T4719] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.083297][ T4719] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.132568][ T4719] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.151611][ T4719] device geneve2 entered promiscuous mode [ 94.182374][ T4719] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.206205][ T4719] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.225741][ T4719] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.256306][ T4719] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.638823][ T4742] loop1: detected capacity change from 0 to 128 [ 94.719242][ T4742] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 94.767916][ T4742] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.430542][ T4750] fuse: Bad value for 'fd' [ 96.936838][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.065140][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 97.197116][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 97.366971][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.469448][ T1107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 97.489926][ T1107] usb 3-1: can't read configurations, error -71 [ 97.876708][ T1335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.137524][ T4823] loop1: detected capacity change from 0 to 128 [ 98.247168][ T1335] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.274221][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.274516][ T4823] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 98.299453][ T4823] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.484187][ T1335] usb 4-1: config 0 descriptor?? [ 98.706860][ T1107] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 99.137251][ T1335] usbhid 4-1:0.0: can't add hid device: -71 [ 99.166926][ T1335] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.167097][ T1107] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 99.210439][ T1335] usb 4-1: USB disconnect, device number 4 [ 99.219970][ T1107] usb 3-1: config 0 has no interface number 0 [ 99.246031][ T1107] usb 3-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.441909][ T4835] team0 (unregistering): Port device team_slave_0 removed [ 99.456953][ T1107] usb 3-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 99.477567][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.499103][ T4835] team0 (unregistering): Port device team_slave_1 removed [ 99.606901][ T1107] usb 3-1: Product: syz [ 99.616946][ T1107] usb 3-1: Manufacturer: syz [ 99.634111][ T1107] usb 3-1: SerialNumber: syz [ 99.646855][ T1335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.673165][ T1107] usb 3-1: config 0 descriptor?? [ 99.896810][ T1335] usb 4-1: Using ep0 maxpacket: 32 [ 99.995981][ T4850] udc-core: couldn't find an available UDC or it's busy [ 100.023527][ T1335] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 100.041501][ T4850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.055096][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.094604][ T1335] usb 4-1: config 0 descriptor?? [ 100.149029][ T1335] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.177582][ T1335] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.574768][ T1107] usb 3-1: USB disconnect, device number 5 [ 100.618696][ T21] usb 4-1: USB disconnect, device number 5 [ 100.625602][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.669290][ T21] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 100.913015][ T4881] capability: warning: `syz.4.158' uses 32-bit capabilities (legacy support in use) [ 102.836750][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.126736][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 103.266906][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.306369][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.348071][ T4941] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 103.359027][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.576958][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.600786][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.638050][ T23] usb 3-1: Product: syz [ 103.652765][ T23] usb 3-1: Manufacturer: syz [ 103.671067][ T23] usb 3-1: SerialNumber: syz [ 103.750950][ T26] audit: type=1326 audit(1777351394.392:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4939 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a716edd9 code=0x7ffc0000 [ 103.807448][ T26] audit: type=1326 audit(1777351394.422:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4939 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a716edd9 code=0x7ffc0000 [ 104.606880][ T4258] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.686900][ T23] usb 3-1: 0:2 : does not exist [ 104.736147][ T23] usb 3-1: USB disconnect, device number 6 [ 104.856831][ T4972] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.896065][ T4972] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.016912][ T4258] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.074457][ T4258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.121639][ T4258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.210500][ T4258] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.383176][ T4258] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.403020][ T4258] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.423017][ T4258] usb 5-1: Manufacturer: syz [ 105.451221][ T4258] usb 5-1: config 0 descriptor?? [ 105.642884][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.906783][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 105.950401][ T1335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.047213][ T1107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.257834][ T1107] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.283512][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.316169][ T1107] usb 4-1: Product: syz [ 106.326931][ T1335] usb 3-1: config 0 has no interfaces? [ 106.333128][ T1107] usb 4-1: Manufacturer: syz [ 106.357115][ T1107] usb 4-1: SerialNumber: syz [ 106.387434][ T1107] usb 4-1: config 0 descriptor?? [ 106.427755][ T4991] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.463791][ T1107] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.470773][ T1107] hub: probe of 4-1:0.0 failed with error -5 [ 106.486932][ T1335] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.506362][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.514990][ T1335] usb 3-1: Product: syz [ 106.533048][ T1335] usb 3-1: Manufacturer: syz [ 106.542108][ T1335] usb 3-1: SerialNumber: syz [ 106.575536][ T1335] usb 3-1: config 0 descriptor?? [ 106.706496][ T5012] loop0: detected capacity change from 0 to 128 [ 106.728924][ T5012] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 106.744450][ T5012] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.863089][ T23] usb 3-1: USB disconnect, device number 7 [ 107.015859][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 107.056306][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 107.106779][ T4991] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 107.129363][ T5027] device syzkaller0 entered promiscuous mode [ 107.140535][ T5027] [ 107.143181][ T5027] ============================= [ 107.148191][ T5027] WARNING: suspicious RCU usage [ 107.157052][ T5027] syzkaller #0 Not tainted [ 107.161672][ T5027] ----------------------------- [ 107.166690][ T5027] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 107.175227][ T5027] [ 107.175227][ T5027] other info that might help us debug this: [ 107.175227][ T5027] [ 107.185648][ T5027] [ 107.185648][ T5027] rcu_scheduler_active = 2, debug_locks = 1 [ 107.194463][ T5027] 4 locks held by syz.4.188/5027: [ 107.199807][ T5027] #0: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 107.209599][ T5027] #1: ffff88801ed0b108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 107.219405][ T5027] #2: ffff88801ed0b148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: packet_sendmsg+0x3dba/0x5060 [ 107.232496][ T5027] #3: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 107.242001][ T5027] [ 107.242001][ T5027] stack backtrace: [ 107.248574][ T5027] CPU: 0 PID: 5027 Comm: syz.4.188 Not tainted syzkaller #0 [ 107.256053][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.266110][ T5027] Call Trace: [ 107.269395][ T5027] [ 107.272322][ T5027] dump_stack_lvl+0x188/0x250 [ 107.277016][ T5027] ? show_regs_print_info+0x20/0x20 [ 107.282277][ T5027] ? lockdep_rcu_suspicious+0x110/0x180 [ 107.287937][ T5027] qdisc_lookup+0xa6/0x650 [ 107.292532][ T5027] qdisc_tree_reduce_backlog+0x190/0x430 [ 107.298216][ T5027] sfq_enqueue+0x14ad/0x2280 [ 107.302822][ T5027] ? ktime_get+0x7b/0x270 [ 107.307294][ T5027] ? decrement_one_qlen+0x550/0x550 [ 107.312539][ T5027] netem_dequeue+0xd4c/0x1410 [ 107.317389][ T5027] ? verify_lock_unused+0x140/0x140 [ 107.322610][ T5027] ? netem_enqueue+0x3800/0x3800 [ 107.327553][ T5027] __qdisc_run+0x236/0x1490 [ 107.332106][ T5027] __dev_queue_xmit+0xe3d/0x2f80 [ 107.337041][ T5027] ? exc_page_fault+0x88/0x100 [ 107.341932][ T5027] ? dev_queue_xmit+0x20/0x20 [ 107.346645][ T5027] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 107.352211][ T5027] ? packet_cached_dev_get+0x270/0x270 [ 107.358053][ T5027] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 107.364174][ T5027] packet_sendmsg+0x3dba/0x5060 [ 107.369091][ T5027] ? __might_sleep+0xf0/0xf0 [ 107.373733][ T5027] ? aa_sk_perm+0x7dc/0x910 [ 107.378270][ T5027] ? packet_getsockopt+0x9a0/0x9a0 [ 107.383442][ T5027] ? aa_sock_msg_perm+0x94/0x150 [ 107.389558][ T5027] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 107.394884][ T5027] ? security_socket_sendmsg+0x7c/0xa0 [ 107.400387][ T5027] __sys_sendto+0x46d/0x620 [ 107.404931][ T5027] ? __ia32_sys_getpeername+0x80/0x80 [ 107.410355][ T5027] ? __lock_acquire+0x7d10/0x7d10 [ 107.415433][ T5027] ? lock_chain_count+0x20/0x20 [ 107.420401][ T5027] ? vtime_user_exit+0x2c8/0x3e0 [ 107.425462][ T5027] __x64_sys_sendto+0xda/0xf0 [ 107.430180][ T5027] do_syscall_64+0x4c/0xa0 [ 107.434607][ T5027] ? clear_bhb_loop+0x30/0x80 [ 107.439314][ T5027] ? clear_bhb_loop+0x30/0x80 [ 107.444001][ T5027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.449895][ T5027] RIP: 0033:0x7feba70e0dd9 [ 107.454313][ T5027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.473927][ T5027] RSP: 002b:00007feba533a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.482363][ T5027] RAX: ffffffffffffffda RBX: 00007feba7359fa0 RCX: 00007feba70e0dd9 [ 107.490369][ T5027] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 107.498360][ T5027] RBP: 00007feba7176d69 R08: 0000200000000140 R09: 0000000000000014 [ 107.506337][ T5027] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 107.514401][ T5027] R13: 00007feba735a038 R14: 00007feba7359fa0 R15: 00007ffef4bba8a8 [ 107.522392][ T5027] [ 107.867607][ T4991] usb 4-1: device firmware changed [ 107.876507][ T1335] usb 4-1: USB disconnect, device number 6 [ 108.036784][ T1335] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.276713][ T1335] usb 4-1: Using ep0 maxpacket: 32 [ 108.416784][ T1335] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 108.424422][ T1335] usb 4-1: can't read configurations, error -71 [ 111.086836][ T4258] usbhid 5-1:0.0: can't add hid device: -110 [ 111.093183][ T4258] usbhid: probe of 5-1:0.0 failed with error -110