last executing test programs: 14.374803414s ago: executing program 3 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 14.316592551s ago: executing program 4 (id=63): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) 13.976560915s ago: executing program 4 (id=64): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x608502) openat(0xffffffffffffff9c, &(0x7f0000000380)='./my_configfs/target/dbroot\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x800000000007, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x301, 0x70bd2b, 0x25dfdbfe, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000a80)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000019ac0)="5766dff3eacc03e400007a00", 0x10) listen(r7, 0xfffd) shutdown(r7, 0x0) 12.338185655s ago: executing program 4 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[0x0]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9.510113497s ago: executing program 1 (id=70): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x2401, r4, 0x0, 0xa002a0}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x8001}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x1, 0x7, 0x0, 0x0, 0xcc, 0x4, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r6 = userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x77) gettimeofday(0x0, 0x0) 9.509902147s ago: executing program 2 (id=71): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_dump={0x47, 0x1ff, 0x7}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000680)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r5, &(0x7f0000000800), 0x3b, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)=ANY=[@ANYBLOB="a4000000240200012abd7000fddbdf2505000000060003000000000006000400000000002de5eadc3ef2ffcf66d18d5e0db5217cd79126569ac5e05f852a3edb428fdfd3b4d912988fd75765d49dbc3030a64df3442ff7be3133243868ce0de4a66a7116a484bceeacf199c1c596"], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x20000010) 7.796115264s ago: executing program 2 (id=72): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='usbip-vudc.0', 0xc) write(r1, &(0x7f0000000940)='\n', 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) sendfile(0xffffffffffffffff, r4, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x3fffffffffffce3, 0x700000000000000, 0x0) socketpair(0x1, 0x5, 0x739b, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) 7.676536597s ago: executing program 1 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 7.15886392s ago: executing program 0 (id=74): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)='2\n', 0x2) 6.829038924s ago: executing program 3 (id=75): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 6.77042419s ago: executing program 1 (id=76): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 6.593589358s ago: executing program 3 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r5, &(0x7f0000000d40)=""/10, 0x5b) io_setup(0x4, &(0x7f0000000d80)) 6.38811155s ago: executing program 1 (id=78): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x4c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x315}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000001700000008040300", @ANYRES32=r4, @ANYBLOB="0a001a0008021100000100000a0006000802110000010000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000580)=@v={0x93, 0x0, 0x80, 0x18, @MIDI_NOTEON=@special, 0x5, 0x110}) syz_open_dev$media(&(0x7f0000000000), 0x103, 0x108002) r8 = syz_open_dev$hiddev(&(0x7f0000000640), 0x5, 0x400100) ioctl$HIDIOCGREPORT(r8, 0x400c4807, &(0x7f0000000680)={0x1, 0x136c22d9ef7b62fd, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 5.243555028s ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x400000000000354, 0x42, 0x0) 5.235435899s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, 0x0, 0x0) io_setup(0x4, &(0x7f0000000d80)) 5.22862903s ago: executing program 0 (id=80): prlimit64(0x0, 0xe, &(0x7f0000002140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002240)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000022c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002300), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x6) msgget(0x2, 0x321) msgget(0x1, 0x240) rename(0x0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) read$FUSE(r3, 0x0, 0x0) 4.294382596s ago: executing program 3 (id=81): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000340)="01550005") 4.184270918s ago: executing program 2 (id=82): pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x1bd, @loopback}, 0x10) listen(0xffffffffffffffff, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x0) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000380)='vers=1.0,user=root,pass=root\x00') syz_open_dev$vim2m(&(0x7f00000003c0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f01d, 0x5}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r2, &(0x7f0000000480)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x0, 0x10, &(0x7f0000001000), 0xfffffffffffffd00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) write(0xffffffffffffffff, &(0x7f0000001040)="18000000", 0x4) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff009440f00a116700000102000109022a00010100c0000904000003ff0000000324030705810200020007050202"], 0x0) 4.129973353s ago: executing program 0 (id=83): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_dump={0x47, 0x1ff, 0x7}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r5, &(0x7f0000000800), 0x3b, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)=ANY=[@ANYBLOB="a4000000240200012abd7000fddbdf2505000000060003000000000006000400000000002de5eadc3ef2ffcf66d18d5e0db5217cd79126569ac5e05f852a3edb428fdfd3b4d912988fd75765d49dbc3030a64df3442ff7be3133243868ce0de4a66a7116a484bceeacf199c1c596"], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x20000010) 3.87000083s ago: executing program 4 (id=84): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000006c0)={'dummy0\x00'}) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.109447678s ago: executing program 0 (id=85): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) r1 = syz_io_uring_setup(0x109f, 0x0, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000440)="2b1c52ac82e71e", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c5d, &(0x7f0000000580)={0x0, 0xd4d0, 0x27, 0x5, 0x1, 0x0, r1}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) lstat(&(0x7f0000000780)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$user(&(0x7f0000000340), &(0x7f0000000540), &(0x7f0000000740)="15", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r5, r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 2.793993311s ago: executing program 2 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 2.732405477s ago: executing program 4 (id=87): r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000005300000a0000010900010073797a31000000002400048020000180070001006373ffea140002800800014000000016080002400000000d0900020073797a32000000001400dd001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x11b) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000840)='./file0\x00') chdir(&(0x7f0000000880)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000900)=""/4119, 0x1017) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1.294345806s ago: executing program 0 (id=88): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x8080000, 0x45, &(0x7f0000000280)=""/69}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000300)=0x2) socket$nl_route(0x10, 0x3, 0x0) getpgid(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000400)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f73"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, 0x0, &(0x7f0000000700)}, 0x20) 1.289111737s ago: executing program 2 (id=90): syz_clone3(&(0x7f0000000380)={0x180801400, &(0x7f0000000400)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) process_mrelease(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x44}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='0 0 0 0\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='0\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r6, &(0x7f0000000880)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r6) socket$rxrpc(0x21, 0x2, 0x2) 1.033014183s ago: executing program 3 (id=91): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)='2\n', 0x2) 1.028131894s ago: executing program 1 (id=92): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec736000) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x80, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 87.011471ms ago: executing program 0 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, 0x0, 0x0) io_setup(0x4, &(0x7f0000000d80)) 60.219744ms ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000002140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002240)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000022c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002300), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x6) msgget(0x2, 0x321) msgget(0x1, 0x240) rename(0x0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) read$FUSE(r3, 0x0, 0x0) 0s ago: executing program 4 (id=95): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0xfffffffe}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) fadvise64(r2, 0x2, 0x8, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r7 = accept4(r1, &(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000005c0)=0xfffffd9f, 0x0) sendto$inet_nvme_of_msg(r7, &(0x7f0000000600)={@r2t={{0x9, 0x0, 0x18, 0xa, 0x80000000}, 0x9, 0xb877, 0x1, 0x2}, @void}, 0x80, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) fspick(r8, &(0x7f0000000700)='.\x00', 0x0) ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000740)=0x4) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 74.818317][ T4178] cgroup: Unknown subsys name 'net' [ 74.988911][ T4178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.596834][ T4178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.701014][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 78.703069][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 78.716230][ T4208] rdma_rxe: rxe_register_device failed with error -23 [ 78.717578][ T4208] rdma_rxe: failed to add rxe_eth0 [ 78.729930][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.742945][ T4191] rdma_rxe: failed to add rxe_eth0 [ 78.743714][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.757014][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 78.769577][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.777744][ T4194] rdma_rxe: failed to add rxe_eth0 [ 78.784469][ T4193] rdma_rxe: failed to add rxe_eth0 [ 78.969890][ T1109] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.969105][ T4190] infiniband rxe0: set active [ 78.992892][ T4190] infiniband rxe0: added rxe_eth0 [ 79.075697][ T4190] RDS/IB: rxe0: added [ 79.093780][ T4190] smc: adding ib device rxe0 with port count 1 [ 79.103256][ T4190] smc: ib device rxe0 port 1 has pnetid [ 79.112558][ T1109] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.138951][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.284797][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.426068][ T4208] chnl_net:caif_netlink_parms(): no params data found [ 79.459489][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 79.497442][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 79.524320][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 79.612182][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.777234][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.787109][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.797204][ T4193] device bridge_slave_0 entered promiscuous mode [ 79.808782][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.817127][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.826339][ T4208] device bridge_slave_0 entered promiscuous mode [ 79.838399][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.847513][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.858111][ T4208] device bridge_slave_1 entered promiscuous mode [ 79.874890][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.878175][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.892684][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.901138][ T4194] device bridge_slave_0 entered promiscuous mode [ 79.922630][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.929992][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.938999][ T4193] device bridge_slave_1 entered promiscuous mode [ 79.958222][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.977884][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.988372][ T4194] device bridge_slave_1 entered promiscuous mode [ 80.005547][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.018250][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.030852][ T4191] device bridge_slave_0 entered promiscuous mode [ 80.043630][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.059116][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.068806][ T4191] device bridge_slave_1 entered promiscuous mode [ 80.148681][ T4208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.161352][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.178491][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.195346][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.215482][ T4208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.227268][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.243173][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.289586][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.319412][ T4193] team0: Port device team_slave_0 added [ 80.328712][ T4208] team0: Port device team_slave_0 added [ 80.336578][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.359382][ T4193] team0: Port device team_slave_1 added [ 80.379917][ T4194] team0: Port device team_slave_0 added [ 80.390092][ T4208] team0: Port device team_slave_1 added [ 80.401012][ T4191] team0: Port device team_slave_0 added [ 80.418508][ T4194] team0: Port device team_slave_1 added [ 80.441884][ T4191] team0: Port device team_slave_1 added [ 80.497458][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.517642][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.558113][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.595820][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.604364][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.638563][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 80.647617][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.656065][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 80.669404][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.678243][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.691936][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 80.710146][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 80.741732][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.754168][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 80.771092][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.779314][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.808939][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.828564][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.838739][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.874632][ T4208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.893072][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.900347][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.937385][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.954996][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.964807][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.998318][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.019686][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.034563][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.077119][ T4208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.199069][ T4194] device hsr_slave_0 entered promiscuous mode [ 81.208988][ T4194] device hsr_slave_1 entered promiscuous mode [ 81.231044][ T4193] device hsr_slave_0 entered promiscuous mode [ 81.242237][ T4193] device hsr_slave_1 entered promiscuous mode [ 81.250528][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.262249][ T4193] Cannot create hsr debugfs directory [ 81.317884][ T4191] device hsr_slave_0 entered promiscuous mode [ 81.330957][ T4191] device hsr_slave_1 entered promiscuous mode [ 81.338960][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.348841][ T4191] Cannot create hsr debugfs directory [ 81.361835][ T4208] device hsr_slave_0 entered promiscuous mode [ 81.373100][ T4208] device hsr_slave_1 entered promiscuous mode [ 81.379865][ T4208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.388445][ T4208] Cannot create hsr debugfs directory [ 81.749985][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 81.823132][ T3853] infiniband rxe0: set active [ 81.833640][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.929328][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937862][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.947173][ T4190] device bridge_slave_0 entered promiscuous mode [ 81.957007][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.965814][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.975569][ T4190] device bridge_slave_1 entered promiscuous mode [ 82.006525][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.025740][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.077834][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.108077][ T4190] team0: Port device team_slave_0 added [ 82.120567][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.144186][ T4190] team0: Port device team_slave_1 added [ 82.168872][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.185779][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.195265][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.228752][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.245416][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.265461][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.273567][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.313047][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.375133][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.421981][ T4190] device hsr_slave_0 entered promiscuous mode [ 82.435858][ T4190] device hsr_slave_1 entered promiscuous mode [ 82.446379][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.459196][ T4190] Cannot create hsr debugfs directory [ 82.466144][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.502068][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.536575][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.613908][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.627067][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.658175][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.695384][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.706494][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 82.714010][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 82.773679][ T1109] Bluetooth: hci2: command 0x041b tx timeout [ 82.793564][ T1109] Bluetooth: hci4: command 0x041b tx timeout [ 82.800805][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 82.839445][ T4208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.874515][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.887606][ T4208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.928549][ T4208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.939566][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.951217][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.975719][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.001270][ T4208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.022240][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.030265][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.040035][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.051581][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.060830][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.077899][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.087673][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.097424][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.108169][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.115319][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.125705][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.138170][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.150120][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.178916][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.186907][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.225928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.239096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.250858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.263171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.273116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.285728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.296623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.307092][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.320695][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.337633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.347504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.360411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.371721][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.379210][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.406339][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.420834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.431016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.447550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.458864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.469806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.482809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.492935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.502268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.512782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.522109][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.529892][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.544795][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.580564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.597320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.610565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.623533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.633822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.647190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.659208][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.668164][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.687483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.698999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.735488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.754081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.776279][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.789609][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.800697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.817387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.831605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.842931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.853030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.863606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.887676][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.914273][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.939630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.949936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.995876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.023465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.043586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.067395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.092577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.105556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.145442][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.164038][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.182939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.197433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.218078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.248851][ T4208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.323145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.333662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.344731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.353350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.371546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.392241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.416522][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.435256][ T4208] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.474780][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.506848][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.554199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.572825][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.596054][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.607567][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.628779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.646063][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.662780][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.670929][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.683689][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.702419][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.716906][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.730328][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.783153][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 84.793631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.807369][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 84.815629][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.840328][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.850868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.863307][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 84.870097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.888758][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.903051][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 84.926883][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.942075][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 84.950993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.967871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.979068][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.992638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.009134][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.020566][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.034876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.047477][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.064258][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.080464][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.098417][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.110758][ T4194] device veth0_vlan entered promiscuous mode [ 85.126225][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.136364][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.179203][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.203359][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.213682][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.226146][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.234796][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.247624][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.266663][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.285932][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.295166][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.305627][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.339515][ T4194] device veth1_vlan entered promiscuous mode [ 85.363697][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.378039][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.402496][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.426220][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.446599][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.506312][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.529520][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.549353][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.570035][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.583382][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.600136][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.618158][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.634046][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.649909][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.692044][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.714250][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.788514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.807856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.840543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.856509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.877750][ T4191] device veth0_vlan entered promiscuous mode [ 85.910430][ T4194] device veth0_macvtap entered promiscuous mode [ 85.924660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.939240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.953372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.982572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.007623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.081255][ T4191] device veth1_vlan entered promiscuous mode [ 86.118235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.137455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.153210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.164898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.176305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.189718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.200219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.219042][ T4194] device veth1_macvtap entered promiscuous mode [ 86.232724][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.247194][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.257058][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.269959][ T4193] device veth0_vlan entered promiscuous mode [ 86.288515][ T4208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.320827][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.350725][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.366574][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.378457][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.392687][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.407999][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.420381][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.440371][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.460527][ T4193] device veth1_vlan entered promiscuous mode [ 86.478895][ T4191] device veth0_macvtap entered promiscuous mode [ 86.506121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.521078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.537400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.553056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.575218][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.586127][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.601723][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.613580][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.632762][ T4191] device veth1_macvtap entered promiscuous mode [ 86.643200][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.652607][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.662743][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.674385][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.732709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.748422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.798243][ T4193] device veth0_macvtap entered promiscuous mode [ 86.870460][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 86.893437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.911816][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 86.925444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.942028][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 86.954826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.965605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.979132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.993015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.016260][ T4193] device veth1_macvtap entered promiscuous mode [ 87.026626][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 87.036236][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 87.054366][ T4190] device veth0_vlan entered promiscuous mode [ 87.102902][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.149068][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.176998][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.192450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.210022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.221678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.230844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.246102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.255359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.264580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.276530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.303963][ T4208] device veth0_vlan entered promiscuous mode [ 87.329038][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.353435][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.375099][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.398502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.411832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.431055][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.443162][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.451323][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.469373][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.489650][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.508668][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.524379][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.540694][ T4190] device veth1_vlan entered promiscuous mode [ 87.551211][ T4208] device veth1_vlan entered promiscuous mode [ 87.572761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.583270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.602250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.621465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.631222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.645517][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.657144][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.674878][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.691256][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.717316][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.737822][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.758692][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.771054][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.791922][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.832720][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.845030][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.862996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.879928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.913256][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.928600][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.937714][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.952295][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.991032][ T4190] device veth0_macvtap entered promiscuous mode [ 88.012388][ T4190] device veth1_macvtap entered promiscuous mode [ 88.020039][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.029072][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.038707][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.049754][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.063257][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.086093][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.110907][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.213845][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.229378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.237942][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.255519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.266730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.279937][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.290930][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.301791][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.313708][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.324821][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.336687][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.349560][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.358360][ T4208] device veth0_macvtap entered promiscuous mode [ 88.382900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.400186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.418047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.440456][ T4208] device veth1_macvtap entered promiscuous mode [ 88.480826][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.493229][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.506959][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.579810][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.626590][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652281][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.680158][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.957649][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.054594][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.084263][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.524177][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.533550][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.544761][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.563149][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.592957][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610318][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.620862][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.633433][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.677983][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.749024][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.809083][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.841114][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.869469][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.914855][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.944660][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.002915][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.115330][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.158748][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.169830][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.273079][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.305707][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.398940][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.622727][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.728220][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.818429][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.942075][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.009106][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.080183][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.146835][ T4208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.188483][ T4208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.248512][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.476135][ T4332] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.562579][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.604880][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.866115][ T4208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910706][ T1327] cfg80211: failed to load regulatory.db [ 91.933109][ T4208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991435][ T4208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044334][ T4208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.145085][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.229569][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.340120][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.586688][ T4311] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.005153][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.131924][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.259312][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.272465][ T4345] FAULT_INJECTION: forcing a failure. [ 94.272465][ T4345] name failslab, interval 1, probability 0, space 0, times 1 [ 94.296362][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.306269][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.315097][ T4345] CPU: 0 PID: 4345 Comm: syz.4.5 Not tainted syzkaller #0 [ 94.322632][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.334134][ T4345] Call Trace: [ 94.337934][ T4345] [ 94.340917][ T4345] dump_stack_lvl+0x188/0x250 [ 94.345678][ T4345] ? show_regs_print_info+0x20/0x20 [ 94.350941][ T4345] ? load_image+0x410/0x410 [ 94.356534][ T4345] ? __lock_acquire+0x7d40/0x7d40 [ 94.362073][ T4345] should_fail+0x383/0x4b0 [ 94.366545][ T4345] should_failslab+0x5/0x20 [ 94.371306][ T4345] slab_pre_alloc_hook+0x51/0xc0 [ 94.376272][ T4345] ? security_inode_alloc+0x30/0x110 [ 94.381814][ T4345] kmem_cache_alloc+0x3d/0x280 [ 94.386645][ T4345] security_inode_alloc+0x30/0x110 [ 94.391969][ T4345] inode_init_always+0x8e5/0xc90 [ 94.397085][ T4345] new_inode_pseudo+0x8e/0x210 [ 94.406082][ T4345] sock_create_lite+0x87/0x500 [ 94.410915][ T4345] __netlink_kernel_create+0xfa/0x7d0 [ 94.416491][ T4345] ? netlink_set_err+0x3c0/0x3c0 [ 94.421503][ T4345] ? fib_default_rule_add+0x1fa/0x390 [ 94.426925][ T4345] ? fib_net_init+0x1bb/0x360 [ 94.431675][ T4345] fib_net_init+0x1cd/0x360 [ 94.436243][ T4345] ? rcu_lock_release+0x20/0x20 [ 94.441140][ T4345] ? ip_fib_net_exit+0x330/0x330 [ 94.446323][ T4345] ? devinet_init_net+0x364/0x590 [ 94.451555][ T4345] ops_init+0x360/0x5f0 [ 94.456142][ T4345] setup_net+0x39e/0xa10 [ 94.460444][ T4345] ? copy_net_ns+0x5b0/0x5b0 [ 94.465184][ T4345] ? copy_net_ns+0x324/0x5b0 [ 94.469825][ T4345] ? down_read_killable+0x1ce/0x340 [ 94.475322][ T4345] copy_net_ns+0x33e/0x5b0 [ 94.479806][ T4345] create_new_namespaces+0x3ce/0x700 [ 94.485351][ T4345] unshare_nsproxy_namespaces+0x116/0x160 [ 94.491276][ T4345] ksys_unshare+0x4f6/0x8e0 [ 94.495848][ T4345] ? __lock_acquire+0x7d40/0x7d40 [ 94.502179][ T4345] ? sighand_ctor+0x40/0x40 [ 94.506765][ T4345] ? lock_chain_count+0x20/0x20 [ 94.511654][ T4345] ? syscall_enter_from_user_mode+0x21/0x70 [ 94.517580][ T4345] __x64_sys_unshare+0x34/0x40 [ 94.522460][ T4345] do_syscall_64+0x4c/0xa0 [ 94.527026][ T4345] ? clear_bhb_loop+0x30/0x80 [ 94.531748][ T4345] ? clear_bhb_loop+0x30/0x80 [ 94.536466][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.544058][ T4345] RIP: 0033:0x7f33db914559 [ 94.548668][ T4345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.570309][ T4345] RSP: 002b:00007f33d9b6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.579778][ T4345] RAX: ffffffffffffffda RBX: 00007f33dbb9afa0 RCX: 00007f33db914559 [ 94.587954][ T4345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 94.596173][ T4345] RBP: 00007f33db9abb20 R08: 0000000000000000 R09: 0000000000000000 [ 94.604180][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.612350][ T4345] R13: 00007f33dbb9b038 R14: 00007f33dbb9afa0 R15: 00007ffd5dfb9cd8 [ 94.620363][ T4345] [ 94.651806][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.210404][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.219737][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.553982][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.101394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 98.199740][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.240427][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.312523][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.491992][ T4360] Zero length message leads to an empty skb [ 98.683634][ T4367] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 98.693950][ T4367] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 99.248455][ T4376] ODEBUG: Out of memory. ODEBUG disabled [ 99.951434][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 99.962108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 99.972228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 99.982104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 99.992372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.001828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.012843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.021977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.031413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.247650][ T4376] syz.0.11 (4376): drop_caches: 2 [ 100.318187][ T4374] overlayfs: './file0' not a directory [ 106.146456][ T4399] futex_wake_op: syz.4.17 tries to shift op by 144; fix this program [ 106.218912][ T4396] gadgetfs: bound to dummy_udc driver [ 106.387416][ T4406] ======================================================= [ 106.387416][ T4406] WARNING: The mand mount option has been deprecated and [ 106.387416][ T4406] and is ignored by this kernel. Remove the mand [ 106.387416][ T4406] option from the mount to silence this warning. [ 106.387416][ T4406] ======================================================= [ 111.401793][ T1111] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.931696][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.983084][ T1111] usb 1-1: not running at top speed; connect to a high speed hub [ 112.082528][ T1111] usb 1-1: config 64 has an invalid interface number: 255 but max is 0 [ 112.091090][ T1111] usb 1-1: config 64 has no interface number 0 [ 112.132421][ T1111] usb 1-1: config 64 interface 255 has no altsetting 0 [ 112.184275][ T4497] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 112.205392][ T4497] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 112.295473][ T1111] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=4d.bf [ 112.321516][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.330080][ T1111] usb 1-1: Product: syz [ 112.341604][ T1111] usb 1-1: Manufacturer: syz [ 112.346288][ T1111] usb 1-1: SerialNumber: syz [ 112.519344][ T4507] tipc: Started in network mode [ 112.524651][ T4507] tipc: Node identity 4, cluster identity 4711 [ 112.532967][ T4507] tipc: Node number set to 4 [ 112.578239][ T4507] tmpfs: Unknown parameter 'quota' [ 113.664447][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.880831][ T1111] usb 1-1: USB disconnect, device number 2 [ 115.087112][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.171075][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.202085][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.392633][ T23] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 115.561878][ T21] usb 3-1: config 2 has an invalid interface number: 49 but max is 1 [ 115.925006][ T21] usb 3-1: config 2 has an invalid interface number: 116 but max is 1 [ 115.944095][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.991550][ T21] usb 3-1: config 2 has no interface number 0 [ 115.998050][ T23] usb 4-1: Product: syz [ 116.013756][ T23] usb 4-1: Manufacturer: syz [ 116.020171][ T21] usb 3-1: config 2 has no interface number 1 [ 116.050653][ T23] usb 4-1: SerialNumber: syz [ 116.054837][ T4527] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.061302][ T21] usb 3-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 116.106007][ T21] usb 3-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 116.122249][ T23] usb 4-1: can't set config #1, error -71 [ 116.130621][ T23] usb 4-1: USB disconnect, device number 2 [ 116.188133][ T21] usb 3-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.265579][ T21] usb 3-1: config 2 interface 49 has no altsetting 0 [ 116.291525][ T21] usb 3-1: config 2 interface 116 has no altsetting 0 [ 116.502516][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 116.528476][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.550070][ T21] usb 3-1: Product: syz [ 116.560067][ T21] usb 3-1: Manufacturer: syz [ 116.571478][ T21] usb 3-1: SerialNumber: syz [ 116.621830][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.821451][ T23] usb 4-1: device descriptor read/64, error -71 [ 117.341650][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.017395][ T21] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.49/input/input5 [ 118.211475][ T23] usb 4-1: device descriptor read/64, error -71 [ 118.331799][ T3545] bcm5974 3-1:2.49: could not read from device [ 118.338096][ T23] usb usb4-port1: attempt power cycle [ 118.380056][ T4557] FAULT_INJECTION: forcing a failure. [ 118.380056][ T4557] name failslab, interval 1, probability 0, space 0, times 0 [ 118.401964][ T3545] bcm5974 3-1:2.49: could not read from device [ 118.426088][ T21] usb 3-1: USB disconnect, device number 2 [ 118.440289][ T3545] bcm5974 3-1:2.49: could not read from device [ 118.447390][ T4557] CPU: 1 PID: 4557 Comm: syz.0.38 Not tainted syzkaller #0 [ 118.447442][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.447455][ T4557] Call Trace: [ 118.468090][ T4557] [ 118.471078][ T4557] dump_stack_lvl+0x188/0x250 [ 118.475897][ T4557] ? show_regs_print_info+0x20/0x20 [ 118.481116][ T4557] ? load_image+0x410/0x410 [ 118.486125][ T4557] ? __might_sleep+0xf0/0xf0 [ 118.490895][ T4557] ? __lock_acquire+0x7d40/0x7d40 [ 118.496250][ T4557] should_fail+0x383/0x4b0 [ 118.501144][ T4557] should_failslab+0x5/0x20 [ 118.505785][ T4557] slab_pre_alloc_hook+0x51/0xc0 [ 118.510904][ T4557] kmem_cache_alloc_trace+0x47/0x290 [ 118.516320][ T4557] ? __list_lru_init+0x535/0xac0 [ 118.521427][ T4557] __list_lru_init+0x535/0xac0 [ 118.526279][ T4557] alloc_super+0x787/0x970 [ 118.530843][ T4557] ? kill_litter_super+0xa0/0xa0 [ 118.535829][ T4557] sget_fc+0x2d4/0x6f0 [ 118.540053][ T4557] ? kill_litter_super+0xa0/0xa0 [ 118.545193][ T4557] ? mqueue_get_tree+0xe0/0xe0 [ 118.550000][ T4557] get_tree_nodev+0x26/0x160 [ 118.554665][ T4557] vfs_get_tree+0x88/0x270 [ 118.559133][ T4557] fc_mount+0x18/0xa0 [ 118.563189][ T4557] mq_init_ns+0x39d/0x510 [ 118.567738][ T4557] copy_ipcs+0x2ea/0x4b0 [ 118.572301][ T4557] create_new_namespaces+0x212/0x700 [ 118.577782][ T4557] unshare_nsproxy_namespaces+0x116/0x160 [ 118.583718][ T4557] ksys_unshare+0x4f6/0x8e0 [ 118.588557][ T4557] ? __lock_acquire+0x7d40/0x7d40 [ 118.594220][ T4557] ? sighand_ctor+0x40/0x40 [ 118.601574][ T4557] ? lock_chain_count+0x20/0x20 [ 118.606874][ T4557] ? syscall_enter_from_user_mode+0x21/0x70 [ 118.613424][ T4557] __x64_sys_unshare+0x34/0x40 [ 118.618370][ T4557] do_syscall_64+0x4c/0xa0 [ 118.623302][ T4557] ? clear_bhb_loop+0x30/0x80 [ 118.627996][ T4557] ? clear_bhb_loop+0x30/0x80 [ 118.633157][ T4557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.639074][ T4557] RIP: 0033:0x7fec11a4c559 [ 118.643763][ T4557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.664102][ T4557] RSP: 002b:00007fec0fca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.672662][ T4557] RAX: ffffffffffffffda RBX: 00007fec11cd2fa0 RCX: 00007fec11a4c559 [ 118.680662][ T4557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 118.688784][ T4557] RBP: 00007fec11ae3b20 R08: 0000000000000000 R09: 0000000000000000 [ 118.696902][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.705081][ T4557] R13: 00007fec11cd3038 R14: 00007fec11cd2fa0 R15: 00007ffe482c24d8 [ 118.713089][ T4557] [ 118.845164][ T4561] FAULT_INJECTION: forcing a failure. [ 118.845164][ T4561] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.860073][ T4561] CPU: 0 PID: 4561 Comm: syz.4.40 Not tainted syzkaller #0 [ 118.867446][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.878197][ T4561] Call Trace: [ 118.881532][ T4561] [ 118.884585][ T4561] dump_stack_lvl+0x188/0x250 [ 118.889316][ T4561] ? show_regs_print_info+0x20/0x20 [ 118.894567][ T4561] ? load_image+0x410/0x410 [ 118.899215][ T4561] ? __lock_acquire+0x7d40/0x7d40 [ 118.904308][ T4561] should_fail+0x383/0x4b0 [ 118.908784][ T4561] copy_page_to_iter+0x3d8/0x930 [ 118.913785][ T4561] filemap_read+0x1e0a/0x2560 [ 118.918544][ T4561] ? find_get_pages_range_tag+0x450/0x450 [ 118.924313][ T4561] ? aa_file_perm+0x38b/0xe80 [ 118.929060][ T4561] ? verify_lock_unused+0x140/0x140 [ 118.934333][ T4561] ? memset+0x1e/0x40 [ 118.938423][ T4561] ? generic_file_read_iter+0x94/0x480 [ 118.943915][ T4561] blkdev_read_iter+0x11d/0x150 [ 118.948845][ T4561] vfs_read+0x75e/0xd50 [ 118.953057][ T4561] ? kernel_read+0x1e0/0x1e0 [ 118.957704][ T4561] ? __fget_files+0x402/0x470 [ 118.962439][ T4561] ? __fdget_pos+0x1e2/0x370 [ 118.967078][ T4561] ? ksys_read+0x70/0x260 [ 118.971647][ T4561] ksys_read+0x153/0x260 [ 118.976059][ T4561] ? vfs_write+0xd70/0xd70 [ 118.980624][ T4561] ? lockdep_hardirqs_on+0x94/0x140 [ 118.985884][ T4561] do_syscall_64+0x4c/0xa0 [ 118.990656][ T4561] ? clear_bhb_loop+0x30/0x80 [ 118.995404][ T4561] ? clear_bhb_loop+0x30/0x80 [ 119.000389][ T4561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.006377][ T4561] RIP: 0033:0x7f33db914559 [ 119.010813][ T4561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.012115][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.030586][ T4561] RSP: 002b:00007f33d9b6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.030621][ T4561] RAX: ffffffffffffffda RBX: 00007f33dbb9afa0 RCX: 00007f33db914559 [ 119.030636][ T4561] RDX: 00000000fffffed9 RSI: 0000200000004640 RDI: 0000000000000004 [ 119.030650][ T4561] RBP: 00007f33db9abb20 R08: 0000000000000000 R09: 0000000000000000 [ 119.030662][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.030674][ T4561] R13: 00007f33dbb9b038 R14: 00007f33dbb9afa0 R15: 00007ffd5dfb9cd8 [ 119.030704][ T4561] [ 119.191599][ T23] usb 4-1: device descriptor read/8, error -71 [ 119.261532][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.491695][ T4279] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 119.641864][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.692963][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 119.772723][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.892602][ T4279] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.962735][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 120.028750][ T4279] usb 3-1: config 0 has no interface number 0 [ 120.094013][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 120.151991][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 120.207466][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 120.232993][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 120.251741][ T4279] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 120.563825][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.606740][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 120.645228][ T4279] usb 3-1: Product: syz [ 120.686757][ T4279] usb 3-1: Manufacturer: syz [ 120.712880][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.751256][ T4279] usb 3-1: SerialNumber: syz [ 120.856901][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.889520][ T4279] usb 3-1: config 0 descriptor?? [ 120.973099][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 121.361561][ T4279] usb 3-1: selecting invalid altsetting 1 [ 121.383534][ T4279] dvb_ttusb_budget: ttusb_init_controller: error [ 121.406313][ T4279] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 121.475820][ T4279] DVB: Unable to find symbol stv0299_attach() [ 121.555933][ T4279] DVB: Unable to find symbol tda8083_attach() [ 121.563124][ T21] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 121.585083][ T4279] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 121.599602][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.641890][ T4279] usb 3-1: USB disconnect, device number 3 [ 121.648634][ T21] usb 1-1: Product: syz [ 121.658650][ T21] usb 1-1: Manufacturer: syz [ 121.701575][ T21] usb 1-1: SerialNumber: syz [ 121.749527][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.761699][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.769977][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.817874][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.839060][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.851998][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.872095][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.879568][ T4563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.941681][ T21] usb 1-1: can't set config #1, error -71 [ 121.991782][ T21] usb 1-1: USB disconnect, device number 3 [ 124.518714][ T26] audit: type=1326 audit(1793364722.262:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 125.415236][ T4607] sched: RT throttling activated [ 125.853742][ T26] audit: type=1326 audit(1793364722.262:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 125.893580][ T26] audit: type=1326 audit(1793364722.272:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 125.903519][ T4613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.479388][ T26] audit: type=1326 audit(1793364722.272:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 129.119121][ T26] audit: type=1326 audit(1793364722.272:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 129.212839][ T26] audit: type=1326 audit(1793364722.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 129.290354][ T26] audit: type=1326 audit(1793364722.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 129.401548][ T26] audit: type=1326 audit(1793364722.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.043348][ T26] audit: type=1326 audit(1793364722.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.173317][ T26] audit: type=1326 audit(1793364722.382:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.264795][ T26] audit: type=1326 audit(1793364722.382:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.378651][ T26] audit: type=1326 audit(1793364722.662:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.472608][ T26] audit: type=1326 audit(1793364722.672:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.577572][ T26] audit: type=1326 audit(1793364722.672:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 131.707042][ T26] audit: type=1326 audit(1793364722.672:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 132.039949][ T26] audit: type=1326 audit(1793364722.672:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 132.181709][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.451732][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 132.580460][ T26] audit: type=1326 audit(1793364722.672:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.2.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae8976559 code=0x7ffc0000 [ 132.661738][ T21] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.672416][ T21] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.737280][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.767132][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.788810][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.819480][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.862319][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869246][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941428][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.083175][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.147114][ T21] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 133.198797][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.302471][ T21] usb 1-1: config 0 descriptor?? [ 133.919757][ T4638] udc-core: couldn't find an available UDC or it's busy [ 133.951160][ T4638] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.959783][ T21] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 134.170380][ T4657] netlink: 56 bytes leftover after parsing attributes in process `syz.3.62'. [ 134.215894][ T21] usb 1-1: USB disconnect, device number 4 [ 134.927849][ T21] usblp0: removed [ 135.036281][ T26] audit: type=1326 audit(1793364733.122:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.1.70" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ea5de559 code=0x7ffc0000 [ 136.066066][ T4670] Need at least one configuration in g1. [ 136.074551][ T4670] udc usbip-vudc.0: failed to start g1: -22 [ 136.101223][ T4668] device syzkaller1 entered promiscuous mode [ 136.119138][ T4670] udc-core: couldn't find an available UDC or it's busy [ 138.769104][ T4697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.404541][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.424952][ T4688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'. [ 140.361528][ T13] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 140.507208][ T4713] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 140.791551][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.029566][ T13] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 142.079161][ T4722] futex_wake_op: syz.4.87 tries to shift op by 144; fix this program [ 142.381030][ T13] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 143.103604][ T4727] syz.2.90 uses obsolete (PF_INET,SOCK_PACKET) [ 143.239995][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.258408][ T13] usb 4-1: Product: syz [ 143.262792][ T13] usb 4-1: Manufacturer: syz [ 143.332396][ T4727] ioremap: invalid physical address 8000000000000000 [ 143.339818][ T4727] ------------[ cut here ]------------ [ 143.392526][ T4727] WARNING: CPU: 1 PID: 4727 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 143.421743][ T13] usb 4-1: can't set config #1, error -71 [ 143.440190][ T13] usb 4-1: USB disconnect, device number 7 [ 143.447866][ T4727] Modules linked in: [ 143.467556][ T4727] CPU: 0 PID: 4727 Comm: syz.2.90 Not tainted syzkaller #0 [ 143.476106][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.953576][ T4727] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 143.959663][ T4727] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 58 88 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 143.997995][ T4727] RSP: 0018:ffffc9000347f900 EFLAGS: 00010246 [ 144.011175][ T4727] RAX: 0000000000000032 RBX: 1ffff9200068ff00 RCX: c35dbd24d0682800 [ 144.020305][ T4727] RDX: ffffc90005861000 RSI: 000000000000453b RDI: 000000000000453c [ 144.028676][ T4727] RBP: ffffc9000347fa10 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 144.040362][ T4727] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 000000000000002e [ 144.050692][ T4727] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 144.063888][ T4727] FS: 00007f8ae6bcd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 144.078596][ T4727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.091247][ T4727] CR2: 0000000000000000 CR3: 000000001f777000 CR4: 00000000003506e0 [ 144.101461][ T4727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.111854][ T4727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.119993][ T4727] Call Trace: [ 144.123665][ T4727] [ 144.126718][ T4727] ? phram_setup+0x87c/0xdf0 [ 144.133109][ T4727] ? ioremap+0x30/0x30 [ 144.139843][ T4727] phram_setup+0x87c/0xdf0 [ 144.148257][ T4727] ? __mutex_lock_common+0x435/0x2400 [ 144.157397][ T4727] ? phram_param_call+0x70/0x70 [ 144.166441][ T4727] ? mutex_lock_io_nested+0x60/0x60 [ 144.177687][ T4727] ? read_lock_is_recursive+0x10/0x10 [ 144.187551][ T4727] param_attr_store+0x20a/0x300 [ 144.195442][ T4727] ? param_attr_show+0x170/0x170 [ 144.200536][ T4727] ? sysfs_kf_read+0x350/0x350 [ 144.209663][ T4727] module_attr_store+0x5b/0x80 [ 144.223513][ T4727] kernfs_fop_write_iter+0x3a8/0x500 [ 144.229059][ T4727] vfs_write+0x748/0xd70 [ 144.237472][ T4727] ? file_end_write+0x250/0x250 [ 144.245590][ T4727] ? mutex_lock_nested+0x17/0x20 [ 144.250859][ T4727] ? __fdget_pos+0x2bf/0x370 [ 144.251744][ T1109] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.264724][ T4727] ? ksys_write+0x70/0x260 [ 144.269338][ T4727] ksys_write+0x153/0x260 [ 144.280019][ T4727] ? __ia32_sys_read+0x80/0x80 [ 144.290454][ T4727] ? lockdep_hardirqs_on+0x94/0x140 [ 144.303841][ T4727] do_syscall_64+0x4c/0xa0 [ 144.310291][ T4727] ? clear_bhb_loop+0x30/0x80 [ 144.326791][ T4727] ? clear_bhb_loop+0x30/0x80 [ 144.336731][ T4727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.346898][ T4727] RIP: 0033:0x7f8ae8976559 [ 144.354848][ T4727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.389777][ T4727] RSP: 002b:00007f8ae6bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.404866][ T4727] RAX: ffffffffffffffda RBX: 00007f8ae8bfcfa0 RCX: 00007f8ae8976559 [ 144.419047][ T4727] RDX: 000000000000001e RSI: 0000200000000880 RDI: 000000000000000c [ 144.428948][ T4727] RBP: 00007f8ae8a0db20 R08: 0000000000000000 R09: 0000000000000000 [ 144.442257][ T4727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.450527][ T4727] R13: 00007f8ae8bfd038 R14: 00007f8ae8bfcfa0 R15: 00007ffebfb9e948 [ 144.466750][ T4727] [ 144.470252][ T4727] irq event stamp: 5597 [ 144.476211][ T4727] hardirqs last enabled at (5619): [] finish_lock_switch+0x12d/0x290 [ 144.487085][ T4727] hardirqs last disabled at (5722): [] __schedule+0x2fc/0x4350 [ 144.498608][ T4727] softirqs last enabled at (5754): [] __irq_exit_rcu+0x13b/0x230 [ 144.511392][ T4727] softirqs last disabled at (5769): [] __irq_exit_rcu+0x13b/0x230 [ 144.529136][ T4727] ---[ end trace cf3b1ea24757d383 ]--- [ 144.536893][ T4727] phram: ioremap failed [ 144.661712][ T1109] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 144.670119][ T1109] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.687900][ T1109] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.851758][ T1109] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.862457][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.870764][ T1109] usb 5-1: Product: syz [ 144.876002][ T1109] usb 5-1: Manufacturer: syz [ 144.880968][ T1109] usb 5-1: SerialNumber: syz [ 144.890413][ T1109] usb 5-1: config 0 descriptor?? [ 144.932580][ T1109] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.938603][ T1109] hub: probe of 5-1:0.0 failed with error -5 [ 144.953049][ T1109] usb 5-1: selecting invalid altsetting 0 [ 145.261800][ T13] usb 5-1: USB disconnect, device number 2