last executing test programs: 7.303883718s ago: executing program 3 (id=351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d040200"/20, @ANYRES32=r2, @ANYBLOB="0a0000000400000024001280110001006272796467655f736c12b465000000000c00058006001f00ff"], 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) 6.163052329s ago: executing program 3 (id=355): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5.970180118s ago: executing program 3 (id=358): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 5.909960249s ago: executing program 1 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10065010704bfb0000"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='dlm_lock_start\x00', 0xffffffffffffffff, 0x0, 0x2000020003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) 5.406239889s ago: executing program 2 (id=362): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) 5.40555996s ago: executing program 3 (id=363): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.15912039s ago: executing program 2 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) 4.705183554s ago: executing program 2 (id=367): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) ftruncate(0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x1000006, 0x4000010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006df000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) 4.319994083s ago: executing program 0 (id=370): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x33) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.074859233s ago: executing program 0 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x2) getdents64(r0, &(0x7f0000000240)=""/37, 0x25) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) 2.795749129s ago: executing program 0 (id=376): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000003c0)={0x1f, 0x0, @any, 0x0, 0xffffffffffffffff}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000200)=0x3, 0x4) 2.784527376s ago: executing program 4 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) semctl$IPC_RMID(0x0, 0x0, 0x0) 2.741722264s ago: executing program 2 (id=378): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000004008100140011"], 0x40}}, 0x0) 2.50093439s ago: executing program 1 (id=379): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x110b, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1.551577541s ago: executing program 0 (id=380): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getcwd(0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 1.550077713s ago: executing program 3 (id=381): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1.549711591s ago: executing program 4 (id=382): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x33) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.52933854s ago: executing program 2 (id=383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) 1.4546148s ago: executing program 1 (id=384): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000304000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e000000000400028008001a8004001c00"], 0x3c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) unshare(0x28000600) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x0) bind$x25(r0, &(0x7f0000000e00), 0x12) 1.30312785s ago: executing program 4 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x804, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x4}}]}) 991.486589ms ago: executing program 2 (id=386): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x3ff, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vnet(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf97, 0x0, 0x3, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x200000000, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x4000, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYBLOB="df2c00dde0dc087f76d1b0a5b2c244e7eef479998eadc12e488d772b493ed3ba98f6459e28167642d4b15de1c9ed3b2a46803a6824ed3841f62c71c4dcf7b88f59a041ee311de13b026119a93e8ae2f14059507b0da922f4a077fc15f9c5db2e5635b7e311d07ecfb6b8e03c2330589bcba1c0a75d9cb80645a82da9d824017660fdca7986b1804c7d9080af35a88902f812db6bbe1b4292412c80"], 0x3c}, 0x1, 0x0, 0x0, 0x300}, 0x0) syslog(0x4, &(0x7f0000000480)=""/51, 0x33) dup(0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x800000}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 922.703391ms ago: executing program 1 (id=387): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8008, &(0x7f0000000180)={[{@stats}], [{@seclabel}]}) 889.553391ms ago: executing program 4 (id=388): socketpair(0xb, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14109aa1", @ANYRES16=r2, @ANYBLOB="0100010000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x810}, 0x20040001) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000400)=0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmat(r9, &(0x7f0000ffc000/0x4000)=nil, 0xa0a3cda08fd04c51) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000f00f4000040"]) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x70bd27, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r13) keyctl$set_timeout(0xf, r13, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r14, 0x7}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) 402.771307ms ago: executing program 3 (id=389): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10065010704bfb0000"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='dlm_lock_start\x00', 0xffffffffffffffff, 0x0, 0x2000020003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) 379.710378ms ago: executing program 1 (id=390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001700)="f2"}) 197.002759ms ago: executing program 0 (id=391): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x5, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) 0s ago: executing program 1 (id=392): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 79.206732][ T5804] cgroup: Unknown subsys name 'net' [ 79.345358][ T5804] cgroup: Unknown subsys name 'cpuset' [ 79.354665][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.965930][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.106133][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.120487][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.140479][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.150905][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.160416][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.324256][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.339023][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.347341][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.355227][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.363697][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.371469][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.392840][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.407246][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.416635][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.420638][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.424515][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.432904][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.446979][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.465626][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.473832][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.493024][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.503627][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.511552][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.524940][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.533528][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.762546][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 86.006731][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.014324][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.022437][ T5814] bridge_slave_0: entered allmulticast mode [ 86.029888][ T5814] bridge_slave_0: entered promiscuous mode [ 86.084065][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.091969][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.099339][ T5814] bridge_slave_1: entered allmulticast mode [ 86.106857][ T5814] bridge_slave_1: entered promiscuous mode [ 86.264730][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.278454][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.372546][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.401000][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 86.421553][ T5814] team0: Port device team_slave_0 added [ 86.460948][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 86.476202][ T5814] team0: Port device team_slave_1 added [ 86.621430][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.628426][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.655426][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.672948][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.719919][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.726954][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.753467][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.867673][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.875714][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.883591][ T5820] bridge_slave_0: entered allmulticast mode [ 86.891591][ T5820] bridge_slave_0: entered promiscuous mode [ 86.935752][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.943293][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.951445][ T5827] bridge_slave_0: entered allmulticast mode [ 86.959229][ T5827] bridge_slave_0: entered promiscuous mode [ 86.985488][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.993346][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.000944][ T5820] bridge_slave_1: entered allmulticast mode [ 87.009958][ T5820] bridge_slave_1: entered promiscuous mode [ 87.056263][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.064050][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.072147][ T5827] bridge_slave_1: entered allmulticast mode [ 87.079915][ T5827] bridge_slave_1: entered promiscuous mode [ 87.211420][ T5825] Bluetooth: hci0: command tx timeout [ 87.225034][ T5814] hsr_slave_0: entered promiscuous mode [ 87.231642][ T5814] hsr_slave_1: entered promiscuous mode [ 87.266065][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.273414][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.281801][ T5821] bridge_slave_0: entered allmulticast mode [ 87.289479][ T5821] bridge_slave_0: entered promiscuous mode [ 87.301193][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.314186][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.339934][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.349928][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.357822][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.365583][ T5821] bridge_slave_1: entered allmulticast mode [ 87.372977][ T5821] bridge_slave_1: entered promiscuous mode [ 87.409945][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.417487][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.425049][ T5829] bridge_slave_0: entered allmulticast mode [ 87.432386][ T5829] bridge_slave_0: entered promiscuous mode [ 87.442609][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.452078][ T5825] Bluetooth: hci1: command tx timeout [ 87.519426][ T5820] team0: Port device team_slave_0 added [ 87.525811][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.530348][ T5825] Bluetooth: hci3: command tx timeout [ 87.538011][ T55] Bluetooth: hci2: command tx timeout [ 87.539756][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.551775][ T5829] bridge_slave_1: entered allmulticast mode [ 87.558944][ T5829] bridge_slave_1: entered promiscuous mode [ 87.569366][ T5827] team0: Port device team_slave_0 added [ 87.594747][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.610840][ T55] Bluetooth: hci4: command tx timeout [ 87.621493][ T5820] team0: Port device team_slave_1 added [ 87.640919][ T5827] team0: Port device team_slave_1 added [ 87.649085][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.741911][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.786978][ T5821] team0: Port device team_slave_0 added [ 87.794964][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.801985][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.828364][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.842034][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.855314][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.863225][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.889302][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.918317][ T5821] team0: Port device team_slave_1 added [ 87.925066][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.936106][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.962585][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.995638][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.002882][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.028888][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.075247][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.082562][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.109544][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.165019][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.172354][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.198924][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.219008][ T5829] team0: Port device team_slave_0 added [ 88.227577][ T5829] team0: Port device team_slave_1 added [ 88.307295][ T5820] hsr_slave_0: entered promiscuous mode [ 88.314275][ T5820] hsr_slave_1: entered promiscuous mode [ 88.321054][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.328911][ T5820] Cannot create hsr debugfs directory [ 88.429404][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.436709][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.463232][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.476201][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.483994][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.510531][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.555849][ T5821] hsr_slave_0: entered promiscuous mode [ 88.563084][ T5821] hsr_slave_1: entered promiscuous mode [ 88.569269][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.577398][ T5821] Cannot create hsr debugfs directory [ 88.602060][ T5827] hsr_slave_0: entered promiscuous mode [ 88.608685][ T5827] hsr_slave_1: entered promiscuous mode [ 88.616361][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.624130][ T5827] Cannot create hsr debugfs directory [ 88.853667][ T5829] hsr_slave_0: entered promiscuous mode [ 88.860699][ T5829] hsr_slave_1: entered promiscuous mode [ 88.866918][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.874587][ T5829] Cannot create hsr debugfs directory [ 88.880744][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.918455][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.958129][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.008522][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.222541][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.244738][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.255646][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.285902][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.292746][ T55] Bluetooth: hci0: command tx timeout [ 89.381862][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.423888][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.438679][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.459898][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.525528][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.536729][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.543883][ T55] Bluetooth: hci1: command tx timeout [ 89.553947][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.566848][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.610714][ T55] Bluetooth: hci3: command tx timeout [ 89.621827][ T55] Bluetooth: hci2: command tx timeout [ 89.698855][ T55] Bluetooth: hci4: command tx timeout [ 89.699475][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.722096][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.734438][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.746751][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.798418][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.874229][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.914704][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.922259][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.963197][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.971767][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.978907][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.054307][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.087710][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.117361][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.145509][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.152709][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.167083][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.186844][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.196205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.203461][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.249039][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.256208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.267149][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.274389][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.284769][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.291996][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.328623][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.335876][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.384558][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.529755][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.603733][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.611050][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.673083][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.680327][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.795728][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.828703][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.936311][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.022400][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.078639][ T5814] veth0_vlan: entered promiscuous mode [ 91.125389][ T5829] veth0_vlan: entered promiscuous mode [ 91.156183][ T5829] veth1_vlan: entered promiscuous mode [ 91.196476][ T5814] veth1_vlan: entered promiscuous mode [ 91.257140][ T5820] veth0_vlan: entered promiscuous mode [ 91.267807][ T5829] veth0_macvtap: entered promiscuous mode [ 91.278467][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.306558][ T5829] veth1_macvtap: entered promiscuous mode [ 91.325403][ T5820] veth1_vlan: entered promiscuous mode [ 91.366072][ T5814] veth0_macvtap: entered promiscuous mode [ 91.372285][ T55] Bluetooth: hci0: command tx timeout [ 91.388230][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.421169][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.445746][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.463501][ T5814] veth1_macvtap: entered promiscuous mode [ 91.496104][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.506697][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.516629][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525779][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.544299][ T5820] veth0_macvtap: entered promiscuous mode [ 91.584771][ T5820] veth1_macvtap: entered promiscuous mode [ 91.611516][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.611552][ T55] Bluetooth: hci1: command tx timeout [ 91.640939][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.654089][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.686384][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.699185][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.711240][ T55] Bluetooth: hci2: command tx timeout [ 91.711250][ T5825] Bluetooth: hci3: command tx timeout [ 91.711784][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.760150][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777687][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.786967][ T55] Bluetooth: hci4: command tx timeout [ 91.786998][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801436][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.835186][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.847726][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.858613][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.869497][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.882197][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.892136][ T5827] veth0_vlan: entered promiscuous mode [ 91.913800][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.925851][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.933055][ T9] cfg80211: failed to load regulatory.db [ 91.937765][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.952584][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.966139][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.005621][ T5827] veth1_vlan: entered promiscuous mode [ 92.023179][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.033080][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042185][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.053828][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.084386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.099725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.130392][ T5821] veth0_vlan: entered promiscuous mode [ 92.203369][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.226123][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.236156][ T5821] veth1_vlan: entered promiscuous mode [ 92.279639][ T5827] veth0_macvtap: entered promiscuous mode [ 92.299533][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.315925][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.327420][ T5827] veth1_macvtap: entered promiscuous mode [ 92.368585][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.417276][ T5821] veth0_macvtap: entered promiscuous mode [ 92.458009][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.468730][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.473406][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.494137][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.502791][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.521653][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.541851][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.556724][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.571084][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.600320][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.620117][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.635673][ T5821] veth1_macvtap: entered promiscuous mode [ 92.669619][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.686298][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.697030][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.709175][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.719209][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.732229][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.745725][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.784832][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.793981][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.804404][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813376][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.830484][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.846378][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.857875][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.858867][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.884866][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.896521][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.907839][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.918473][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.938656][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.949419][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.965879][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.087019][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.113917][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.136767][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.153098][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.165766][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.196285][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.206842][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.221319][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.233415][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.244995][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254379][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.263742][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.272875][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.452771][ T55] Bluetooth: hci0: command tx timeout [ 93.691586][ T55] Bluetooth: hci1: command tx timeout [ 93.772191][ T55] Bluetooth: hci3: command tx timeout [ 93.778024][ T55] Bluetooth: hci2: command tx timeout [ 93.853084][ T55] Bluetooth: hci4: command tx timeout [ 94.101183][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.231237][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.250805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.309623][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.330676][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.460493][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.524398][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597335][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.627396][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.636310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.645558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.655141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.664020][ T5914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.019642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.122394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.132348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.310615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.327448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.350543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.561810][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.864483][ T5940] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 96.731662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.717690][ T5960] sit0: entered promiscuous mode [ 97.747741][ T5960] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 97.858321][ T5965] ubi31: attaching mtd0 [ 97.875459][ T5960] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.025607][ T5816] IPVS: starting estimator thread 0... [ 98.030661][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.092031][ T5965] ubi31: scanning is finished [ 98.130374][ T5965] ubi31: empty MTD device detected [ 98.148410][ T5969] IPVS: using max 25 ests per chain, 60000 per kthread [ 98.253482][ T5863] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 98.326463][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.363376][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.385528][ T5965] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 98.393525][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 98.402087][ T5965] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 98.428790][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.471913][ T5965] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 98.488708][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.526850][ T5965] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 98.538156][ T5965] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 98.545782][ T5965] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.555606][ T5965] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2629800812 [ 98.570049][ T5965] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.577090][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 98.610532][ T5970] ubi31: background thread "ubi_bgt31d" started, PID 5970 [ 98.660805][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.694661][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.755874][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 98.788883][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.823647][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.884324][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 98.918227][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.927768][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.939387][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 98.950471][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 98.968467][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.985661][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 99.194512][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 99.336415][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.385070][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 99.438090][ T5863] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 99.470857][ T5863] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.502585][ T5863] usb 1-1: config 64 interface 0 has no altsetting 0 [ 99.536712][ T5863] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.580268][ T5863] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.609309][ T5863] usb 1-1: Product: syz [ 99.613904][ T5863] usb 1-1: Manufacturer: syz [ 99.618805][ T5863] usb 1-1: SerialNumber: syz [ 99.707117][ T5863] yurex 1-1:64.0: USB YUREX device now attached to Yurex #0 [ 99.950343][ T5863] usb 1-1: USB disconnect, device number 2 [ 100.012611][ T5863] yurex 1-1:64.0: USB YUREX #0 now disconnected [ 100.199470][ T5982] mmap: syz.3.26 (5982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.374418][ T5986] netlink: 92 bytes leftover after parsing attributes in process `syz.4.27'. [ 101.797361][ T6001] binder: BINDER_SET_CONTEXT_MGR already set [ 101.858414][ T6001] binder: 5999:6001 ioctl 4018620d 200000000040 returned -16 [ 102.432360][ T6012] netlink: 'syz.0.32': attribute type 11 has an invalid length. [ 102.440333][ T6012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.32'. [ 103.263374][ T6014] netlink: 76 bytes leftover after parsing attributes in process `syz.0.34'. [ 104.869606][ T6031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.939068][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.39'. [ 106.014433][ T5866] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 106.271365][ T5866] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 106.279743][ T5866] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 106.375118][ T5866] usb 5-1: config 252 has no interface number 0 [ 106.415877][ T5866] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.451867][ T5866] usb 5-1: config 252 interface 107 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.491522][ T6048] netlink: 'syz.0.44': attribute type 8 has an invalid length. [ 106.504029][ T5866] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 106.525282][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.549626][ T5866] usb 5-1: Product: syz [ 106.559765][ T5866] usb 5-1: Manufacturer: syz [ 106.569916][ T5866] usb 5-1: SerialNumber: syz [ 106.846530][ T6052] netlink: 'syz.3.45': attribute type 11 has an invalid length. [ 106.854343][ T6052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.45'. [ 107.467491][ T5866] usb 5-1: USB disconnect, device number 2 [ 109.392027][ T6067] hub 6-0:1.0: USB hub found [ 109.399303][ T6067] hub 6-0:1.0: 1 port detected [ 111.830637][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.277173][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 112.356836][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 112.512477][ T6104] bridge_slave_1: left allmulticast mode [ 112.751193][ T55] Bluetooth: Wrong link type (-22) [ 113.113198][ T6104] bridge_slave_1: left promiscuous mode [ 113.119794][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.199105][ T6104] bridge_slave_0: left allmulticast mode [ 113.215171][ T6104] bridge_slave_0: left promiscuous mode [ 113.244555][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.486376][ T6149] evm: overlay not supported [ 116.760451][ T975] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.960649][ T975] usb 3-1: config 252 has an invalid interface number: 107 but max is 0 [ 116.969219][ T975] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 117.000134][ T975] usb 3-1: config 252 has no interface number 0 [ 117.010313][ T975] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 117.123027][ T975] usb 3-1: config 252 interface 107 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.601600][ T6158] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 117.833937][ T975] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 117.847911][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.862979][ T975] usb 3-1: Product: syz [ 117.871197][ T975] usb 3-1: Manufacturer: syz [ 117.875854][ T975] usb 3-1: SerialNumber: syz [ 117.937518][ T6147] syz.3.68 (6147) used greatest stack depth: 20296 bytes left [ 118.109796][ T975] usb 3-1: USB disconnect, device number 2 [ 118.127699][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.390311][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 118.418464][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.430950][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.449010][ T5864] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 118.461960][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.543351][ T5864] usb 1-1: Product: syz [ 118.547753][ T5864] usb 1-1: Manufacturer: syz [ 118.586729][ T5864] usb 1-1: SerialNumber: syz [ 118.616613][ T5864] usb 1-1: config 0 descriptor?? [ 118.641840][ T5864] hub 1-1:0.0: bad descriptor, ignoring hub [ 118.652108][ T5864] hub 1-1:0.0: probe with driver hub failed with error -5 [ 119.754787][ T6186] netlink: 'syz.3.82': attribute type 11 has an invalid length. [ 119.762807][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.82'. [ 120.710312][ T24] usb 1-1: USB disconnect, device number 3 [ 121.453444][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.999354][ T6217] Zero length message leads to an empty skb [ 124.470324][ T975] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.830613][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 124.868518][ T975] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.903279][ T975] usb 4-1: config 0 has no interface number 0 [ 124.908316][ T975] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.940924][ T6231] bridge1: entered promiscuous mode [ 124.945993][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.978137][ T975] usb 4-1: Product: syz [ 124.990648][ T975] usb 4-1: Manufacturer: syz [ 125.008942][ T975] usb 4-1: SerialNumber: syz [ 125.030028][ T975] usb 4-1: config 0 descriptor?? [ 125.058139][ T975] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.404524][ T6223] kvm: pic: level sensitive irq not supported [ 125.404804][ T6223] kvm: pic: level sensitive irq not supported [ 125.420795][ T6223] kvm: pic: single mode not supported [ 125.427397][ T6223] kvm: pic: level sensitive irq not supported [ 125.477285][ T6223] kvm: pic: single mode not supported [ 125.483936][ T6223] kvm: pic: level sensitive irq not supported [ 125.493640][ T6223] kvm: pic: single mode not supported [ 125.500037][ T6223] kvm: pic: level sensitive irq not supported [ 125.506162][ T6223] kvm: pic: level sensitive irq not supported [ 125.516633][ T6223] kvm: pic: level sensitive irq not supported [ 125.523378][ T6223] kvm: pic: single mode not supported [ 125.529557][ T6223] kvm: pic: level sensitive irq not supported [ 125.807411][ T6227] sp0: Synchronizing with TNC [ 125.919855][ T975] usb 4-1: qt2_attach - failed to power on unit: -71 [ 125.981625][ T975] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 126.023872][ T975] usb 4-1: USB disconnect, device number 2 [ 127.532558][ T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.761632][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 127.778894][ T975] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.812806][ T975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.036608][ T975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.061451][ T975] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.078941][ T975] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.089419][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.165762][ T6265] sp0: Synchronizing with TNC [ 128.339288][ T975] usb 4-1: GET_CAPABILITIES returned 0 [ 128.357262][ T975] usbtmc 4-1:16.0: can't read capabilities [ 128.501058][ T6275] netlink: 'syz.1.112': attribute type 8 has an invalid length. [ 128.558724][ T975] usb 4-1: USB disconnect, device number 3 [ 130.131467][ T6292] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 130.156358][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 130.180662][ T6292] binder: 6290:6292 ioctl 4018620d 200000000080 returned -1 [ 130.671401][ T6305] netlink: 'syz.3.124': attribute type 8 has an invalid length. [ 131.661773][ T6324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.609931][ T6336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.916170][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930318][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.634757][ T6357] binder: 6356:6357 ioctl 4018620d 0 returned -22 [ 134.762944][ T6368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.830577][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 134.992797][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 135.006162][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.023754][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.064095][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.084399][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.106864][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.117640][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.134883][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.153656][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.165956][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.179909][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.201089][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.220769][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.245644][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.269198][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.304228][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.316198][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.324757][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.338196][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.363175][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.388056][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.422743][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.445672][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.467188][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.470337][ T975] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 135.525057][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.551717][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.591310][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 135.667954][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 135.683518][ T975] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.696753][ T975] usb 3-1: config 1 interface 0 has no altsetting 0 [ 135.705571][ T6382] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 135.717910][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.789253][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.797397][ T975] usb 3-1: Product: syz [ 135.801665][ T975] usb 3-1: Manufacturer: syz [ 135.806288][ T975] usb 3-1: SerialNumber: syz [ 135.910217][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.929675][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.938933][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 136.215571][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 136.310484][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.320973][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 136.400479][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 136.430803][ T24] usb 5-1: Product: syz [ 136.435046][ T24] usb 5-1: Manufacturer: syz [ 136.440398][ T24] usb 5-1: SerialNumber: syz [ 136.454914][ T24] usb 5-1: config 0 descriptor?? [ 136.460805][ T6366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.479356][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 136.741435][ T24] usb 5-1: USB disconnect, device number 3 [ 136.800885][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 137.286249][ T6400] ubi31: detaching mtd0 [ 137.409751][ T6400] ubi31: mtd0 is detached [ 138.842273][ T975] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 139.236029][ T6418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.280444][ T975] usb 3-1: USB disconnect, device number 3 [ 139.451715][ T975] usblp0: removed [ 141.930343][ T5863] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 142.193802][ T5863] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 142.450204][ T5863] usb 5-1: config 252 has no interface number 0 [ 142.472171][ T5863] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.533145][ T5863] usb 5-1: config 252 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.602952][ T5863] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 142.635149][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.655299][ T5863] usb 5-1: Product: syz [ 142.664718][ T5863] usb 5-1: Manufacturer: syz [ 142.675517][ T5863] usb 5-1: SerialNumber: syz [ 143.237805][ T5866] usb 5-1: USB disconnect, device number 4 [ 143.418977][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 143.427996][ T6452] bridge_slave_1: left allmulticast mode [ 143.433695][ T6452] bridge_slave_1: left promiscuous mode [ 143.439419][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.473015][ T6452] bridge_slave_0: left allmulticast mode [ 143.474213][ T6455] hub 6-0:1.0: USB hub found [ 143.478704][ T6452] bridge_slave_0: left promiscuous mode [ 143.489594][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.490361][ T6455] hub 6-0:1.0: 1 port detected [ 143.630420][ T6460] syz_tun: entered allmulticast mode [ 143.895080][ T6454] syz_tun: left allmulticast mode [ 144.257406][ T6468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.460256][ T55] Bluetooth: hci4: link tx timeout [ 144.465799][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.970512][ T5825] Bluetooth: hci4: link tx timeout [ 144.975703][ T5825] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.854022][ T6488] bridge0: entered promiscuous mode [ 146.490390][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 147.736151][ T6509] block device autoloading is deprecated and will be removed. [ 148.636756][ T6519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.116386][ T6555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.392464][ T6558] process 'syz.2.195' launched './file0' with NULL argv: empty string added [ 155.860302][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.083745][ T975] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.117444][ T975] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.137834][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.159910][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.180491][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.193979][ T975] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.203129][ T975] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.212524][ T975] usb 2-1: Product: syz [ 156.216732][ T975] usb 2-1: Manufacturer: syz [ 156.311732][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 156.367261][ T975] cdc_wdm 2-1:1.0: skipping garbage [ 156.375881][ T975] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 156.382069][ T975] cdc_wdm 2-1:1.0: Unknown control protocol [ 158.883178][ T6671] can0: slcan on ptm0. [ 158.959850][ T975] usb 2-1: USB disconnect, device number 2 [ 159.110295][ T6665] can0 (unregistered): slcan off ptm0. [ 159.778733][ T6697] binder: Unknown parameter 'seclabel' [ 160.044805][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 160.382299][ T55] Bluetooth: Wrong link type (-22) [ 164.183234][ T6758] overlayfs: missing 'lowerdir' [ 164.201000][ T30] audit: type=1326 audit(1746048356.573:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.268394][ T30] audit: type=1326 audit(1746048356.573:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.352770][ T30] audit: type=1326 audit(1746048356.603:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.473356][ T30] audit: type=1326 audit(1746048356.703:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.566181][ T30] audit: type=1326 audit(1746048356.703:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.664393][ T30] audit: type=1326 audit(1746048356.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.791409][ T30] audit: type=1326 audit(1746048356.713:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 164.897743][ T6777] 9pnet_virtio: no channels available for device syz [ 164.930628][ T30] audit: type=1326 audit(1746048356.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 165.683674][ T30] audit: type=1326 audit(1746048356.713:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 165.759356][ T30] audit: type=1326 audit(1746048356.713:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6754 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2653f8e969 code=0x7ffc0000 [ 166.000467][ T6789] 9pnet_virtio: no channels available for device syz [ 168.271032][ T6823] 9pnet_virtio: no channels available for device syz [ 168.310512][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.063547][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 169.115260][ T5909] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 169.152916][ T5909] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 169.207383][ T5909] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 169.207420][ T5909] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 169.207448][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.212529][ T5909] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 169.390223][ T5909] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 169.398821][ T5909] usb 1-1: Product: syz [ 169.435807][ T5909] usb 1-1: Manufacturer: syz [ 169.467339][ T5909] usb 1-1: SerialNumber: syz [ 169.791354][ T5909] usb 1-1: config 0 descriptor?? [ 170.016488][ T5909] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 170.038331][ T6833] tmpfs: Unknown parameter 'Dȅ3GK-Wƹ 7quF ' [ 170.059508][ T5909] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.466344][ T6873] 9pnet_virtio: no channels available for device syz [ 171.793788][ T12] tipc: Subscription rejected, illegal request [ 171.949179][ T6889] input: syz1 as /devices/virtual/input/input8 [ 172.655248][ T5909] usb 1-1: USB disconnect, device number 4 [ 172.701570][ T5909] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 174.675073][ T6921] sp0: Synchronizing with TNC [ 174.844933][ T6924] [U] [ 174.981513][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 174.990856][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 175.001714][ T55] Bluetooth: hci2: hardware error 0x00 [ 175.509819][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.710361][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 175.730615][ T6943] 9pnet_virtio: no channels available for device syz [ 175.737843][ T5909] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.390306][ T5909] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.399009][ T5909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.409158][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.419253][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.429051][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.470352][ T5909] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.523483][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.604314][ T5909] usb 2-1: config 0 descriptor?? [ 176.871410][ T5909] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.897545][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 177.130863][ T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 178.356471][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.305'. [ 179.472544][ T5816] usb 2-1: USB disconnect, device number 3 [ 179.553889][ T6988] ======================================================= [ 179.553889][ T6988] WARNING: The mand mount option has been deprecated and [ 179.553889][ T6988] and is ignored by this kernel. Remove the mand [ 179.553889][ T6988] option from the mount to silence this warning. [ 179.553889][ T6988] ======================================================= [ 180.038522][ T5816] usblp0: removed [ 180.213204][ T6995] binder: 6992:6995 ioctl c0306201 0 returned -14 [ 180.667988][ T7005] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 181.512040][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 182.211188][ T7024] binder: BINDER_SET_CONTEXT_MGR already set [ 182.217304][ T7024] binder: 7023:7024 ioctl 4018620d 200000000040 returned -16 [ 183.493028][ T7043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.937800][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 183.947881][ T7056] bridge_slave_1: left allmulticast mode [ 183.954258][ T7056] bridge_slave_1: left promiscuous mode [ 183.961820][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.403839][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.480283][ T7056] bridge_slave_0: left allmulticast mode [ 184.584164][ T7056] bridge_slave_0: left promiscuous mode [ 184.608217][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.755656][ T47] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.774787][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.801354][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.826943][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.905708][ T47] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.925737][ T47] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.934427][ T47] usb 1-1: Product: syz [ 184.938805][ T47] usb 1-1: Manufacturer: syz [ 185.058952][ T47] cdc_wdm 1-1:1.0: skipping garbage [ 185.122494][ T47] cdc_wdm 1-1:1.0: skipping garbage [ 185.384628][ T47] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 185.430570][ T47] cdc_wdm 1-1:1.0: Unknown control protocol [ 185.466955][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'. [ 185.866372][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e5bc000: rx timeout, send abort [ 185.876873][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e5bc000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 186.036323][ T47] usb 1-1: USB disconnect, device number 5 [ 186.356272][ T7092] binder: BINDER_SET_CONTEXT_MGR already set [ 186.363669][ T7092] binder: 7086:7092 ioctl 4018620d 200000000040 returned -16 [ 186.392707][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 186.512043][ T7097] syz_tun: entered allmulticast mode [ 186.702150][ T7089] syz_tun: left allmulticast mode [ 187.183973][ T7116] binder: 7114:7116 ioctl c0306201 200000000540 returned -14 [ 188.016950][ T7131] syz_tun: entered allmulticast mode [ 188.474075][ T7130] syz_tun: left allmulticast mode [ 188.779579][ T7155] syz_tun: entered allmulticast mode [ 188.842061][ T7148] syz_tun: left allmulticast mode [ 189.487787][ T7172] binder: 7171:7172 ioctl c0306201 200000000100 returned -14 [ 189.684331][ T7175] capability: warning: `syz.4.366' uses deprecated v2 capabilities in a way that may be insecure [ 190.144447][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 190.228622][ T7185] IPv6: Can't replace route, no match found [ 190.674337][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 190.695451][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 190.977635][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 191.022162][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 191.123090][ T7189] ceph: No mds server is up or the cluster is laggy [ 192.796223][ T7224] binder: 7223:7224 ioctl c0306201 0 returned -14 [ 194.190716][ T7258] binder: 7257:7258 ioctl c0385720 0 returned -22 [ 194.227161][ T7253] ucma_write: process 241 (syz.4.388) changed security contexts after opening file descriptor, this is not allowed. [ 194.334063][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340704][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.772267][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 220.570250][ T5825] sched: DL replenish lagged too much [ 268.091921][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 299.350104][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 299.357179][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5829/1:b..l P7247/1:b..l [ 299.366555][ C0] rcu: (detected by 0, t=10502 jiffies, g=18917, q=232 ncpus=2) [ 299.374276][ C0] task:syz.2.386 state:R running task stack:25752 pid:7247 tgid:7246 ppid:5814 task_flags:0x400140 flags:0x00004002 [ 299.388456][ C0] Call Trace: [ 299.391744][ C0] [ 299.394681][ C0] __schedule+0x168f/0x4c70 [ 299.399198][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 299.404485][ C0] ? __pfx___schedule+0x10/0x10 [ 299.409348][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 299.414633][ C0] preempt_schedule_irq+0xb5/0x150 [ 299.419829][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 299.425642][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 299.431457][ C0] irqentry_exit+0x6f/0x90 [ 299.435874][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.441854][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 299.448014][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 27 dd 2e 04 00 <74> 1e 83 3d ea 0a 2f 04 00 74 15 65 48 8b 0c 25 08 00 72 92 31 c0 [ 299.467621][ C0] RSP: 0018:ffffc9000ebc6cf0 EFLAGS: 00000202 [ 299.473686][ C0] RAX: 0000000000000000 RBX: ffffffff9016f501 RCX: ffffc9000ebc7d28 [ 299.481655][ C0] RDX: ffffc9000ebc6e01 RSI: dffffc0000000000 RDI: ffffc9000ebc6dd0 [ 299.489623][ C0] RBP: dffffc0000000000 R08: ffffc9000ebc7d10 R09: 0000000000000000 [ 299.497592][ C0] R10: ffffc9000ebc6e18 R11: fffff52001d78dc5 R12: ffffc9000ebc7d20 [ 299.505559][ C0] R13: ffffc9000ebc0000 R14: ffffc9000ebc6dc8 R15: ffffffff817199f5 [ 299.513529][ C0] ? unwind_next_frame+0xa5/0x2390 [ 299.518658][ C0] unwind_next_frame+0x195c/0x2390 [ 299.523774][ C0] ? unwind_next_frame+0xa5/0x2390 [ 299.529057][ C0] ? populate_vma_page_range+0x26b/0x340 [ 299.534699][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.540850][ C0] arch_stack_walk+0x11c/0x150 [ 299.545620][ C0] ? __mm_populate+0x24c/0x380 [ 299.550408][ C0] stack_trace_save+0x9c/0xe0 [ 299.555082][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 299.560451][ C0] ? __lock_acquire+0xaac/0xd20 [ 299.565313][ C0] save_stack+0xf7/0x1f0 [ 299.569567][ C0] ? __pfx_save_stack+0x10/0x10 [ 299.574440][ C0] ? post_alloc_hook+0x1d8/0x230 [ 299.579380][ C0] ? get_page_from_freelist+0x21c7/0x22a0 [ 299.585098][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 299.591074][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 299.596100][ C0] ? folio_alloc_mpol_noprof+0x39/0x70 [ 299.601566][ C0] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 299.607378][ C0] ? shmem_get_folio_gfp+0x597/0x15f0 [ 299.612784][ C0] ? shmem_fault+0x179/0x390 [ 299.617368][ C0] ? __do_fault+0x135/0x390 [ 299.621869][ C0] ? __handle_mm_fault+0x363e/0x5380 [ 299.627243][ C0] ? handle_mm_fault+0x2d5/0x7f0 [ 299.632363][ C0] ? __get_user_pages+0x16f0/0x2a40 [ 299.637560][ C0] ? populate_vma_page_range+0x26b/0x340 [ 299.643200][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 299.649448][ C0] __set_page_owner+0x8d/0x4a0 [ 299.654237][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 299.659620][ C0] post_alloc_hook+0x1d8/0x230 [ 299.664393][ C0] get_page_from_freelist+0x21c7/0x22a0 [ 299.669964][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 299.675862][ C0] ? prepare_alloc_pages+0x213/0x610 [ 299.681152][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 299.686957][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.693288][ C0] ? policy_nodemask+0x27c/0x720 [ 299.698253][ C0] alloc_pages_mpol+0x232/0x4a0 [ 299.703113][ C0] folio_alloc_mpol_noprof+0x39/0x70 [ 299.708409][ C0] shmem_alloc_and_add_folio+0x447/0xf60 [ 299.714052][ C0] ? filemap_get_entry+0xad/0x2f0 [ 299.719082][ C0] ? filemap_get_entry+0xad/0x2f0 [ 299.724132][ C0] ? filemap_get_entry+0xad/0x2f0 [ 299.729166][ C0] ? shmem_huge_global_enabled+0x174/0x3a0 [ 299.734997][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 299.741156][ C0] ? shmem_allowable_huge_orders+0x414/0x420 [ 299.747142][ C0] shmem_get_folio_gfp+0x597/0x15f0 [ 299.752361][ C0] shmem_fault+0x179/0x390 [ 299.756782][ C0] __do_fault+0x135/0x390 [ 299.761112][ C0] __handle_mm_fault+0x363e/0x5380 [ 299.766240][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 299.771805][ C0] ? follow_page_pte+0x888/0x13c0 [ 299.776841][ C0] handle_mm_fault+0x2d5/0x7f0 [ 299.781616][ C0] __get_user_pages+0x16f0/0x2a40 [ 299.786665][ C0] ? mt_find+0x15c/0x5f0 [ 299.790925][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 299.796310][ C0] populate_vma_page_range+0x26b/0x340 [ 299.801777][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 299.807758][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 299.813659][ C0] ? down_read+0x1ad/0x2e0 [ 299.818102][ C0] __mm_populate+0x24c/0x380 [ 299.822699][ C0] ? __pfx___mm_populate+0x10/0x10 [ 299.827820][ C0] ? up_write+0x1c4/0x420 [ 299.832154][ C0] vm_mmap_pgoff+0x3f0/0x4c0 [ 299.836751][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 299.841893][ C0] ? rcu_is_watching+0x15/0xb0 [ 299.846665][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 299.851522][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 299.856287][ C0] do_syscall_64+0xf6/0x210 [ 299.860797][ C0] ? clear_bhb_loop+0x45/0xa0 [ 299.865475][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.871396][ C0] RIP: 0033:0x7f2653f8e969 [ 299.875816][ C0] RSP: 002b:00007f2651df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.884238][ C0] RAX: ffffffffffffffda RBX: 00007f26541b5fa0 RCX: 00007f2653f8e969 [ 299.892207][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 299.900205][ C0] RBP: 00007f2654010ab1 R08: ffffffffffffffff R09: 0000000000000000 [ 299.908204][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 299.916196][ C0] R13: 0000000000000000 R14: 00007f26541b5fa0 R15: 00007ffe64804058 [ 299.924215][ C0] [ 299.927231][ C0] task:syz-executor state:R running task stack:21336 pid:5829 tgid:5829 ppid:5810 task_flags:0x400140 flags:0x00000000 [ 299.940717][ C0] Call Trace: [ 299.943994][ C0] [ 299.946923][ C0] __schedule+0x168f/0x4c70 [ 299.951548][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 299.956836][ C0] ? __pfx___schedule+0x10/0x10 [ 299.961684][ C0] ? irqentry_exit+0x74/0x90 [ 299.966290][ C0] preempt_schedule_irq+0xb5/0x150 [ 299.971402][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 299.977124][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 299.982937][ C0] irqentry_exit+0x6f/0x90 [ 299.987371][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.993356][ C0] RIP: 0010:lock_release+0x46/0x3e0 [ 299.998556][ C0] Code: f0 e3 d3 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 f3 e3 d3 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 1c 8e df 0d 73 16 c5 c8 08 00 84 c0 75 0d f6 05 d1 8b c9 0d 01 0f 84 ad 02 00 00 [ 300.018183][ C0] RSP: 0018:ffffc900040df830 EFLAGS: 00000293 [ 300.024285][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880533bda00 [ 300.032255][ C0] RDX: 0000000000000000 RSI: ffffffff8234599f RDI: ffffffff8df3b860 [ 300.040233][ C0] RBP: ffffc900040dfaa0 R08: ffff88806660cc7b R09: 1ffff1100ccc198f [ 300.048208][ C0] R10: dffffc0000000000 R11: ffffed100ccc1990 R12: ffffc900040dfac0 [ 300.056179][ C0] R13: ffffffff8234599f R14: ffffffff8df3b860 R15: dffffc0000000000 [ 300.064152][ C0] ? leave_rcu+0xef/0x160 [ 300.068573][ C0] ? leave_rcu+0xef/0x160 [ 300.072996][ C0] leave_rcu+0xfb/0x160 [ 300.077146][ C0] try_to_unlazy+0x2e0/0x580 [ 300.081752][ C0] link_path_walk+0x7ee/0xe50 [ 300.086463][ C0] path_lookupat+0x97/0x430 [ 300.090971][ C0] filename_lookup+0x212/0x570 [ 300.095730][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 300.101374][ C0] ? getname_flags+0xb8/0x540 [ 300.106053][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 300.111353][ C0] ? __might_fault+0xb0/0x130 [ 300.116040][ C0] vfs_statx+0xfb/0x550 [ 300.120199][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 300.124961][ C0] ? strncpy_from_user+0x150/0x290 [ 300.130089][ C0] ? getname_flags+0x1e5/0x540 [ 300.134865][ C0] vfs_fstatat+0xe4/0x160 [ 300.139202][ C0] __x64_sys_newfstatat+0x11c/0x1a0 [ 300.144423][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 300.150178][ C0] ? do_syscall_64+0xba/0x210 [ 300.154858][ C0] do_syscall_64+0xf6/0x210 [ 300.159366][ C0] ? clear_bhb_loop+0x45/0xa0 [ 300.164064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.169967][ C0] RIP: 0033:0x7fa2d798d17a [ 300.174383][ C0] RSP: 002b:00007ffc9ee54a48 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 300.182797][ C0] RAX: ffffffffffffffda RBX: 00007fa2d7a1089d RCX: 00007fa2d798d17a [ 300.190940][ C0] RDX: 00007ffc9ee54a70 RSI: 00007ffc9ee54b00 RDI: 00000000ffffff9c [ 300.199171][ C0] RBP: 00007ffc9ee54b00 R08: 0000000000000000 R09: 0000000000000000 [ 300.207139][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc9ee55b90 [ 300.215108][ C0] R13: 00007fa2d7a1089d R14: 000000000002f6d1 R15: 00007ffc9ee55bd0 [ 300.223107][ C0] [ 300.226125][ C0] rcu: rcu_preempt kthread starved for 10031 jiffies! g18917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 300.237328][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 300.247290][ C0] rcu: RCU grace-period kthread stack dump: [ 300.253173][ C0] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 300.266691][ C0] Call Trace: [ 300.269987][ C0] [ 300.272922][ C0] __schedule+0x168f/0x4c70 [ 300.277474][ C0] ? schedule+0x165/0x360 [ 300.281804][ C0] ? __pfx___schedule+0x10/0x10 [ 300.286665][ C0] ? schedule+0x91/0x360 [ 300.290951][ C0] schedule+0x165/0x360 [ 300.295121][ C0] schedule_timeout+0x12b/0x270 [ 300.299986][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 300.305369][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 300.311276][ C0] ? __pfx_process_timeout+0x10/0x10 [ 300.316577][ C0] ? prepare_to_swait_event+0x341/0x380 [ 300.322129][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 300.326981][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.332207][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 300.337233][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 300.343396][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 300.348683][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 300.353896][ C0] ? finish_swait+0xcd/0x1f0 [ 300.358509][ C0] rcu_gp_kthread+0x99/0x390 [ 300.363105][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 300.368306][ C0] ? __kthread_parkme+0x7b/0x200 [ 300.373266][ C0] ? __kthread_parkme+0x1a1/0x200 [ 300.378324][ C0] kthread+0x70e/0x8a0 [ 300.382418][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 300.387639][ C0] ? __pfx_kthread+0x10/0x10 [ 300.392229][ C0] ? __pfx_kthread+0x10/0x10 [ 300.396816][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.402023][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.407219][ C0] ? __pfx_kthread+0x10/0x10 [ 300.411832][ C0] ret_from_fork+0x4b/0x80 [ 300.416245][ C0] ? __pfx_kthread+0x10/0x10 [ 300.420837][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.425646][ C0] [ 300.428686][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 300.435035][ C0] Sending NMI from CPU 0 to CPUs 1: [ 300.440257][ C1] NMI backtrace for cpu 1 [ 300.440285][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 300.440305][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 300.440315][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 300.440336][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 4b 19 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 300.440350][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 300.440366][ C1] RAX: 5b072bff4f0f3100 RBX: ffffffff81973cc8 RCX: 5b072bff4f0f3100 [ 300.440378][ C1] RDX: 0000000000000001 RSI: ffffffff8d73674f RDI: ffffffff8bc0fa60 [ 300.440390][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 300.440402][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7daa70 [ 300.440415][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dab40 [ 300.440425][ C1] FS: 0000000000000000(0000) GS:ffff888126200000(0000) knlGS:0000000000000000 [ 300.440439][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.440450][ C1] CR2: 00007fe617758bd0 CR3: 000000007eeda000 CR4: 00000000003526f0 [ 300.440465][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.440474][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.440484][ C1] Call Trace: [ 300.440492][ C1] [ 300.440498][ C1] default_idle+0x13/0x20 [ 300.440517][ C1] default_idle_call+0x74/0xb0 [ 300.440538][ C1] do_idle+0x1e8/0x510 [ 300.440576][ C1] ? __pfx_do_idle+0x10/0x10 [ 300.440598][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.440624][ C1] cpu_startup_entry+0x44/0x60 [ 300.440648][ C1] start_secondary+0x101/0x110 [ 300.440672][ C1] common_startup_64+0x13e/0x147 [ 300.440702][ C1]