last executing test programs: 1m49.963849663s ago: executing program 0 (id=102): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1014}, 0x1, 0x0, 0x0, 0x4801}, 0x8410) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) 1m44.419184257s ago: executing program 0 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 1m44.292994124s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) 1m43.207374667s ago: executing program 0 (id=120): openat$kvm(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x2, 0x1, 0x0, {0x2, 0x9, 0x9, 0x3}}) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1m42.159541229s ago: executing program 0 (id=124): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m39.937828169s ago: executing program 0 (id=134): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 1m24.089588862s ago: executing program 32 (id=134): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 53.453880677s ago: executing program 5 (id=250): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040bd2809094000010203010902240001010050090904000dff0301030409210200c10122b1b509058103ff"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 50.375612869s ago: executing program 5 (id=258): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x200, 0x3, [0x6, 0x0, 0x7]}, &(0x7f00000003c0)=0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x70d, 0x70bd2a, 0x25dfdbde, {0x7, 0x0, 0x0, 0x0, 0x40020, 0x5d000}}, 0x20}}, 0x20008080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 49.031211486s ago: executing program 5 (id=260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) 48.568788049s ago: executing program 5 (id=263): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) 47.759770069s ago: executing program 5 (id=265): r0 = getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, 0x0) 47.441009274s ago: executing program 5 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) 31.95548853s ago: executing program 33 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) 11.73240627s ago: executing program 4 (id=356): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x200, 0x3, [0x6, 0x0, 0x7]}, &(0x7f00000003c0)=0xe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 10.660036113s ago: executing program 4 (id=358): ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f00000005c0)={&(0x7f0000000140)=[{0x0}], 0x1, 0x101, 0x0, 0x6, 0x1, 0xfffffffffffffccc, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 8.340447347s ago: executing program 2 (id=365): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$midi(&(0x7f0000000240), 0xff, 0x200881) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) 6.505981248s ago: executing program 3 (id=367): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)={@private, @local}, &(0x7f00000000c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x21, 0x1, 0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1405, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0xf000000, 0x0, 0x40001}, 0x20000004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x22004881) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000100ffffffffffffffff000000000000000000000000fa130080400002000000000000080000000000000000000100000000e3005ba7195934b957099613433d0f42d5fa4b357c68c9b7f68e44737c07b31fa1f09153fe7952f39c4d1623fa2f87581f787d6d0a6915ebeed4537a14671bec16f016e57aadaa5024fce95b7c5961eefc08ce46066435ea798fa4ad6bfcf80becdc6bbd7a09d09750e6c9635dec9d987b4b6912f1f5001dfa0749eacbaa52384a9a3691b9cf8b081be881d10f0c53bb11ec5c0fae5800"/250], 0xb8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x0, 0x32, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @mcast2}}}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) ppoll(&(0x7f0000000040)=[{r5, 0xe620}, {r5, 0x4102}, {r5, 0xec7cf396d8ef6c3b}, {r5, 0x8000}, {r5, 0x8102}], 0x2000024b, 0x0, 0x0, 0x0) 5.06042967s ago: executing program 2 (id=369): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x3, 0x10000, 0x2, 0x10000421, 0x5, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x1, 0x1, 0x9, 0x800, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0x40000d, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe]}) 4.998513272s ago: executing program 3 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0d0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0x7, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1, 0xfffffffd}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x10, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0xff}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 4.934422206s ago: executing program 2 (id=371): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001f00)={'binder1\x00'}) 4.933741946s ago: executing program 4 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.925647606s ago: executing program 1 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0xf, 0x2}]}}}}, 0x26) 4.552599325s ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 4.45887141s ago: executing program 3 (id=375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20044080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00e204050001000793f4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 4.44303162s ago: executing program 1 (id=376): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 4.43981998s ago: executing program 4 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, 0x0}, 0x0) 3.657697479s ago: executing program 1 (id=378): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78445af63bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4", 0xc7}], 0x1}}], 0x2, 0x46090) r1 = eventfd2(0x0, 0x80000) read(r1, &(0x7f0000002500)=""/126, 0x7e) sendto$inet(r0, &(0x7f0000000180)="17", 0xfffffffffffffdfd, 0x10008095, 0x0, 0x240) 3.599749272s ago: executing program 2 (id=379): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$midi(&(0x7f0000000240), 0xff, 0x200881) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) 3.468683428s ago: executing program 4 (id=380): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.382942452s ago: executing program 1 (id=381): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x400000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50) 2.21614059s ago: executing program 1 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40000032, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r3, 0x0, 0x7ffff000, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 1.978416542s ago: executing program 4 (id=383): ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f00000005c0)={&(0x7f0000000140)=[{0x0}], 0x1, 0x101, 0x0, 0x6, 0x1, 0xfffffffffffffccc, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 1.244998818s ago: executing program 1 (id=384): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.156370393s ago: executing program 3 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0d0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0x7, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1, 0xfffffffd}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x10, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0xff}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 706.410205ms ago: executing program 3 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240), 0x800) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004500001c0000"], 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 431.747978ms ago: executing program 2 (id=387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x22, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) 0s ago: executing program 3 (id=388): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0xe, 0x5, "8e7b327076"}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 54.742048][ T4172] cgroup: Unknown subsys name 'net' [ 54.882191][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.260737][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.097554][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.148616][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.201151][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 58.218788][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.308058][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.316307][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.325706][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.339596][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347157][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.356076][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.400271][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.407828][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.416578][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.427460][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.435168][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.443321][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.464124][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.471541][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.479919][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.493938][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 58.510626][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.523510][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.533132][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.541157][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.549122][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.571339][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.578987][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.589665][ T4192] device bridge_slave_0 entered promiscuous mode [ 58.617985][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.634308][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.646307][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.653704][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.661996][ T4192] device bridge_slave_1 entered promiscuous mode [ 58.672343][ T4186] team0: Port device team_slave_0 added [ 58.712548][ T4186] team0: Port device team_slave_1 added [ 58.720765][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.742197][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.754435][ T4187] team0: Port device team_slave_0 added [ 58.762288][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.772575][ T4187] team0: Port device team_slave_1 added [ 58.791712][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.843140][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.850854][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.877387][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.905694][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.912858][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.940885][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.955661][ T4192] team0: Port device team_slave_0 added [ 58.964034][ T4185] team0: Port device team_slave_0 added [ 58.970610][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.978106][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.005193][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.028541][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.035970][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.062992][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.076042][ T4192] team0: Port device team_slave_1 added [ 59.087859][ T4185] team0: Port device team_slave_1 added [ 59.118006][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.125709][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.133520][ T4198] device bridge_slave_0 entered promiscuous mode [ 59.143700][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.151860][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.159821][ T4198] device bridge_slave_1 entered promiscuous mode [ 59.189365][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.196676][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.223778][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.259384][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.269608][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.277324][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.305158][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.338059][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.347182][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.355157][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.362727][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.389647][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.402638][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.431803][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.440005][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.447494][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.456878][ T4186] Cannot create hsr debugfs directory [ 59.471719][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.478770][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.506043][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.520020][ T4198] team0: Port device team_slave_0 added [ 59.535569][ T4198] team0: Port device team_slave_1 added [ 59.608313][ T4192] device hsr_slave_0 entered promiscuous mode [ 59.616676][ T4192] device hsr_slave_1 entered promiscuous mode [ 59.623400][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.631693][ T4192] Cannot create hsr debugfs directory [ 59.641629][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.648809][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.656369][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.664220][ T4185] Cannot create hsr debugfs directory [ 59.676424][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.683496][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.710855][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.752034][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.760828][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.788036][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.806172][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 59.813567][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 59.815199][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 59.831966][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 59.885621][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 59.923699][ T4198] device hsr_slave_0 entered promiscuous mode [ 59.931256][ T4198] device hsr_slave_1 entered promiscuous mode [ 59.938141][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.946165][ T4198] Cannot create hsr debugfs directory [ 60.176833][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.199739][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.215393][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.232869][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.242329][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.252569][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.267803][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.293843][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.380515][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.393937][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.415993][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.432000][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.485573][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.503612][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.520637][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.531726][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.556470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.568249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.577459][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.597321][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.625922][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.634518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.647404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.657090][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.664609][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.673498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.702425][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.720652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.731182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.741328][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.749121][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.765375][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.781230][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.791683][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.806906][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.815540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.824225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.833895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.861174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.890956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.900893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.914068][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.921865][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.931893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.941508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.950085][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.957211][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.965389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.974157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.995278][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.006191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.016165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.024525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.037817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.047296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.066614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.099601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.109201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.120694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.130148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.139282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.147375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.155576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.164517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.174549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.189081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.197884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.207782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.217998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.229497][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.242062][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.263290][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.276046][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.287280][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.300841][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.348150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.372731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.411189][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.420733][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.439091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.451922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.462971][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.473150][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.486173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.512681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.525928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.553173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.563343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.594270][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.613984][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.623067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.636014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.646074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.659609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.668344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.677811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.691138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.714193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.727496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.738152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.749174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.759056][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.766590][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.775807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.787409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.797374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.808800][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.817046][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.826976][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.846283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.854738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.880859][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.895925][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 61.897279][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.902195][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 61.920521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.923421][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 61.935815][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 61.944623][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.953911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.963144][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.971403][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 61.986237][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.000135][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.016144][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.024183][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.034250][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.043717][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.053795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.063641][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.073573][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.106663][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.115361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.123944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.134387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.144190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.153319][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.160514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.171294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.201508][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.213134][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.225775][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.232969][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.242855][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.253687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.263145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.308501][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.319587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.329143][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.338565][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.348310][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.358381][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.366909][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.383442][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.395376][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.414423][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.429750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.441868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.456928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.471145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.481037][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.491551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.500545][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.509883][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.528617][ T4186] device veth0_vlan entered promiscuous mode [ 62.582895][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.592546][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.603365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.612150][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.623531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.632774][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.641788][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.651022][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.660663][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.669378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.679190][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.688378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.701066][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.712294][ T4187] device veth0_vlan entered promiscuous mode [ 62.728012][ T4186] device veth1_vlan entered promiscuous mode [ 62.761879][ T4192] device veth0_vlan entered promiscuous mode [ 62.775344][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.784438][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.800161][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.821884][ T4187] device veth1_vlan entered promiscuous mode [ 62.848569][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.862918][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.874930][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.883498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.899293][ T4192] device veth1_vlan entered promiscuous mode [ 62.933505][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.943121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.953403][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.965454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.975938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.985195][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.992785][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.007939][ T4186] device veth0_macvtap entered promiscuous mode [ 63.038874][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.063010][ T4186] device veth1_macvtap entered promiscuous mode [ 63.077436][ T4192] device veth0_macvtap entered promiscuous mode [ 63.086688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.095730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.104458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.113835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.123968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.133662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.142847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.156197][ T4187] device veth0_macvtap entered promiscuous mode [ 63.179800][ T4187] device veth1_macvtap entered promiscuous mode [ 63.190336][ T4192] device veth1_macvtap entered promiscuous mode [ 63.210549][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.219707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.229451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.238514][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.249955][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.276173][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.294308][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.304273][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.316903][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.329429][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.338512][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.348299][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.357707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.367508][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.376407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.385591][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.396068][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.414514][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.425396][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.436926][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.449988][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.464184][ T4185] device veth0_vlan entered promiscuous mode [ 63.482216][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.493532][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506899][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.515707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.526564][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.536096][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.545235][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.553842][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.563298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.576780][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.585245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.594906][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.603951][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.613309][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.622361][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.635247][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.646673][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.659369][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.670844][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.683250][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.702340][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.711809][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.726953][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.736825][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.749308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.760677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.770483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.782042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.797124][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.806741][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.816379][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.825669][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.845803][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.854518][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.880496][ T4185] device veth1_vlan entered promiscuous mode [ 63.895482][ T4198] device veth0_vlan entered promiscuous mode [ 63.902797][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.912049][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.921418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.960241][ T4198] device veth1_vlan entered promiscuous mode [ 63.967921][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 63.974061][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 63.980842][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 63.987610][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 64.065044][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 64.073571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.087903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.096821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.106306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.115734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.129640][ T4185] device veth0_macvtap entered promiscuous mode [ 64.165571][ T4198] device veth0_macvtap entered promiscuous mode [ 64.173339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.182259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.195848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.205172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.217284][ T4185] device veth1_macvtap entered promiscuous mode [ 64.246301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.275893][ T4198] device veth1_macvtap entered promiscuous mode [ 64.276249][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.308747][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.322271][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.324531][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.342620][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.353741][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.365747][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.376736][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.390346][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.401015][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.412476][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.423348][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.434371][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.444656][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.456655][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.468529][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.492672][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.502286][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.511330][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.521361][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532282][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.540961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.550995][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.561424][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.570674][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.597148][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.611283][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.629084][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.643473][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.654058][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.665119][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.676615][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.688005][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.705841][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.717174][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.729239][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.740313][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.752491][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.762963][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.774249][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.785295][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.796638][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.807703][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.818748][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.834085][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.851236][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.861231][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.871063][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.880988][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.891498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.916319][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.926151][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.936655][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.936714][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954915][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.963854][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.996238][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.005714][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.013450][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.030844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.102042][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.113435][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.136761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.197118][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.199198][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.221849][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.222012][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.291452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.299088][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.309377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.355936][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.364306][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.393309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.511415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.907584][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.929529][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.087287][ T4286] ======================================================= [ 66.087287][ T4286] WARNING: The mand mount option has been deprecated and [ 66.087287][ T4286] and is ignored by this kernel. Remove the mand [ 66.087287][ T4286] option from the mount to silence this warning. [ 66.087287][ T4286] ======================================================= [ 66.124890][ T4286] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 66.152076][ T4286] CIFS mount error: No usable UNC path provided in device string! [ 66.152076][ T4286] [ 66.162667][ T4286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.284822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.295045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.305134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.314232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.324341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.333855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.343643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.353065][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 66.652178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 66.742330][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 66.756372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.832645][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.932373][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013727][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 67.020398][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 67.026535][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 67.032627][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 67.055620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.097619][ T4292] netlink: 'syz.1.6': attribute type 2 has an invalid length. [ 67.160055][ T4292] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6'. [ 68.378348][ T26] audit: type=1804 audit(1774340890.925:2): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10" name="bus" dev="ramfs" ino=32554 res=1 errno=0 [ 68.574236][ T4304] input: syz0 as /devices/virtual/input/input5 [ 70.635004][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.895007][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 70.954926][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.197934][ T4231] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 71.212407][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.224916][ T4265] usb 1-1: Using ep0 maxpacket: 32 [ 71.239005][ T4231] usb 2-1: Product: syz [ 71.243413][ T4231] usb 2-1: Manufacturer: syz [ 71.251029][ T4231] usb 2-1: SerialNumber: syz [ 71.366015][ T4265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.575089][ T4265] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 71.603300][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.631589][ T4265] usb 1-1: Product: syz [ 71.674877][ T4265] usb 1-1: Manufacturer: syz [ 71.689209][ T4265] usb 1-1: SerialNumber: syz [ 71.755062][ T4265] usb 1-1: config 0 descriptor?? [ 71.822874][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.831231][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.881372][ T4265] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 72.015087][ T4265] usb 1-1: qt2_attach - failed to power on unit: -71 [ 72.040901][ T4265] quatech2: probe of 1-1:0.0 failed with error -71 [ 72.147550][ T4265] usb 1-1: USB disconnect, device number 2 [ 72.291713][ T4295] Set syz1 is full, maxelem 65536 reached [ 72.642251][ T4334] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 75.385104][ T4231] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 76.182525][ T4231] usb 2-1: USB disconnect, device number 2 [ 76.387762][ T4350] Zero length message leads to an empty skb [ 77.042675][ T1324] cfg80211: failed to load regulatory.db [ 78.084880][ T4264] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.165880][ T4394] comedi comedi3: adq12b: I/O port conflict (0x8005,16) [ 83.974875][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.355151][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.498471][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.554674][ T4230] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.596991][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.655415][ T4230] usb 2-1: config 0 descriptor?? [ 86.759427][ T4230] usb 2-1: string descriptor 0 read error: -22 [ 87.005175][ T4230] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 87.041395][ T4412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 87.048282][ T4412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.224995][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.256284][ T4412] vhci_hcd vhci_hcd.0: Device attached [ 87.293900][ T4415] vhci_hcd: connection closed [ 87.297621][ T155] vhci_hcd: stop threads [ 87.309294][ T155] vhci_hcd: release socket [ 87.324284][ T155] vhci_hcd: disconnect device [ 87.496621][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.598276][ T4407] usb 2-1: USB disconnect, device number 3 [ 87.934553][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 87.950475][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 87.956214][ T4233] usb 1-1: unable to read config index 0 descriptor/all [ 87.963308][ T4233] usb 1-1: can't read configurations, error -71 [ 88.061414][ T4426] input: syz1 as /devices/virtual/input/input6 [ 88.779706][ T4432] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 89.525681][ T4230] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 89.854404][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.883867][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.917316][ T4230] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 89.936395][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.105294][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.301151][ T4230] usb 3-1: Product: syz [ 90.320108][ T4230] usb 3-1: Manufacturer: syz [ 90.342394][ T4230] usb 3-1: SerialNumber: syz [ 90.665244][ T4230] usb 3-1: can't set config #8, error -71 [ 90.683282][ T4230] usb 3-1: USB disconnect, device number 2 [ 90.699414][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.336850][ T4452] xt_connbytes: Forcing CT accounting to be enabled [ 93.234983][ T4233] usb 1-1: unable to read config index 0 descriptor/all [ 93.242289][ T4233] usb 1-1: can't read configurations, error -71 [ 93.390414][ T4233] usb usb1-port1: attempt power cycle [ 93.605117][ T4265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.434888][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 94.785381][ T4265] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 95.183512][ T4233] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.445347][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.063297][ T4265] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 96.108547][ T4233] usb 1-1: config 0 has no interfaces? [ 96.114494][ T4233] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.127546][ T4265] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 96.146873][ T4265] usb 5-1: Product: syz [ 96.151958][ T4265] usb 5-1: Manufacturer: syz [ 96.157284][ T4265] usb 5-1: SerialNumber: syz [ 96.162240][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.211545][ T4233] usb 1-1: config 0 descriptor?? [ 96.224985][ T4265] usb 5-1: can't set config #1, error -71 [ 96.241830][ T4265] usb 5-1: USB disconnect, device number 3 [ 96.497069][ T1108] usb 1-1: USB disconnect, device number 5 [ 97.435477][ T4265] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.518788][ T4491] process 'syz.3.57' launched './file1' with NULL argv: empty string added [ 97.677137][ T4265] usb 5-1: Using ep0 maxpacket: 16 [ 97.835532][ T4265] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 97.844397][ T4265] usb 5-1: config 0 has no interface number 0 [ 97.854025][ T4265] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.864363][ T4265] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 98.028990][ T4490] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 98.040416][ T4265] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 98.051466][ T4490] qnx6: wrong signature (magic) in superblock #1. [ 98.058027][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.084313][ T4265] usb 5-1: Product: syz [ 98.097270][ T4265] usb 5-1: Manufacturer: syz [ 98.112028][ T4265] usb 5-1: SerialNumber: syz [ 98.139676][ T4265] usb 5-1: config 0 descriptor?? [ 98.147813][ T4490] qnx6: unable to read the first superblock [ 98.148866][ T4498] Cannot find add_set index 0 as target [ 98.247043][ T4479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.395076][ T1108] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.502149][ T4479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.067370][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.080792][ T4265] asix: probe of 5-1:0.251 failed with error -71 [ 100.096293][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.160323][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.172623][ T4265] usb 5-1: USB disconnect, device number 4 [ 100.194376][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.684937][ T1108] usb 3-1: GET_CAPABILITIES returned 0 [ 100.690740][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 100.926070][ T1108] usb 3-1: USB disconnect, device number 3 [ 102.251995][ T4510] overlayfs: missing 'lowerdir' [ 102.445016][ T4265] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.824925][ T4265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.861609][ T4265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 103.135051][ T4265] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.161099][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.312719][ T4265] usb 1-1: Product: syz [ 103.319352][ T4265] usb 1-1: Manufacturer: syz [ 103.325170][ T4265] usb 1-1: SerialNumber: syz [ 103.338116][ T4265] usb 1-1: config 0 descriptor?? [ 103.380173][ T4265] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 103.812028][ T4265] usb 1-1: USB disconnect, device number 6 [ 104.084929][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.254402][ T4526] udevd[4526]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.383865][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 104.615200][ T4233] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 104.640848][ T4233] usb 5-1: config 0 has no interface number 0 [ 104.689767][ T4233] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.064381][ T4233] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.335208][ T4233] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 105.376014][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 105.451750][ T4233] usb 5-1: Product: syz [ 105.487286][ T4233] usb 5-1: SerialNumber: syz [ 105.547730][ T4233] usb 5-1: config 0 descriptor?? [ 105.616767][ T4233] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 105.629306][ T4233] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 106.624371][ T4407] usb 5-1: USB disconnect, device number 5 [ 106.631927][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.632198][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 106.714454][ T4555] device syzkaller0 entered promiscuous mode [ 106.754066][ T4407] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 106.915494][ T4560] xt_connbytes: Forcing CT accounting to be enabled [ 107.015131][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.496224][ T4563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 107.631012][ T4566] ubi31: attaching mtd0 [ 107.826846][ T4231] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.855253][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.885337][ T4566] ubi31: scanning is finished [ 107.910782][ T4566] ubi31: empty MTD device detected [ 108.615217][ T4231] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.151578][ T4231] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.180785][ T4231] usb 3-1: Manufacturer: syz [ 109.197487][ T4231] usb 3-1: config 0 descriptor?? [ 109.267177][ T4576] tipc: Enabling of bearer rejected, failed to enable media [ 109.374967][ T4231] rc_core: IR keymap rc-hauppauge not found [ 109.381058][ T4231] Registered IR keymap rc-empty [ 109.476008][ T4231] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 109.509219][ T4566] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 109.647431][ T4231] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 109.741764][ T4566] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.044985][ T4566] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.231654][ T4566] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 110.245442][ T4583] device syzkaller0 entered promiscuous mode [ 110.260310][ T4566] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.886387][ T4566] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.905051][ T4566] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 53986231 [ 110.972213][ T4500] usb 3-1: USB disconnect, device number 4 [ 111.009070][ T4566] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.071137][ T4580] ubi31: background thread "ubi_bgt31d" started, PID 4580 [ 112.659989][ T4604] device syzkaller0 entered promiscuous mode [ 113.073235][ T4565] ODEBUG: Out of memory. ODEBUG disabled [ 115.114913][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.544876][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.015809][ T7] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.034622][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.124965][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 116.155156][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.199194][ T7] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 116.255606][ T7] usb 4-1: Manufacturer: syz [ 116.271942][ T7] usb 4-1: config 0 descriptor?? [ 116.279426][ T4231] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.301921][ T4231] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.331389][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.364895][ T4231] usb 2-1: config 1 has no interface number 0 [ 116.412565][ T4231] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.984888][ T7] rc_core: IR keymap rc-hauppauge not found [ 116.991435][ T7] Registered IR keymap rc-empty [ 116.997188][ T4640] syz.4.101 uses obsolete (PF_INET,SOCK_PACKET) [ 117.014875][ T4231] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.083289][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 117.156375][ T4231] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.166200][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 117.204159][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.308317][ T4231] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 117.488945][ T4648] device syzkaller0 entered promiscuous mode [ 117.525515][ T4231] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 117.719811][ T4231] usb 4-1: USB disconnect, device number 2 [ 118.519495][ T4500] usb 2-1: USB disconnect, device number 4 [ 118.536428][ T4500] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 121.867282][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.990092][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.184928][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.195209][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.365577][ T4500] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.624852][ T4500] usb 3-1: Using ep0 maxpacket: 16 [ 122.745156][ T4500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.770113][ T4500] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.909400][ T4500] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.924811][ T4500] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.949668][ T4500] usb 3-1: Manufacturer: syz [ 123.063244][ T4500] usb 3-1: config 0 descriptor?? [ 123.224943][ T4407] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 124.060331][ T4407] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 124.163957][ T4500] usb 3-1: USB disconnect, device number 5 [ 124.211304][ T4708] tipc: Enabling of bearer rejected, failed to enable media [ 124.229962][ T4407] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 124.241665][ T4407] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.264813][ T4407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.449226][ T4692] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.487484][ T4692] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.495763][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.905270][ T4265] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.918339][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.135530][ T4265] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 125.152945][ T4202] Bluetooth: hci4: link tx timeout [ 125.163211][ T4265] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 125.163405][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.186410][ T4202] Bluetooth: hci4: link tx timeout [ 125.191958][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.342402][ T4265] usb 4-1: Manufacturer: syz [ 125.357184][ T4202] Bluetooth: hci4: link tx timeout [ 125.359708][ T4265] usb 4-1: config 0 descriptor?? [ 125.362434][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.392881][ T4202] Bluetooth: hci4: link tx timeout [ 125.400159][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.424579][ T4202] Bluetooth: hci4: link tx timeout [ 125.451753][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.455393][ T1108] usb 2-1: USB disconnect, device number 5 [ 125.824843][ T4265] rc_core: IR keymap rc-hauppauge not found [ 125.832475][ T4265] Registered IR keymap rc-empty [ 125.875939][ T4265] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 125.904422][ T4733] autofs4:pid:4733:autofs_fill_super: called with bogus options [ 125.908696][ T4265] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 125.956821][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.073119][ T4407] usb 4-1: USB disconnect, device number 3 [ 127.099203][ T4753] trusted_key: encrypted_key: insufficient parameters specified [ 127.121526][ T4755] netlink: 'syz.4.133': attribute type 10 has an invalid length. [ 127.163006][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.171220][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.201634][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.209635][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.217506][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.217875][ T4233] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 127.224837][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.233718][ T4755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.259980][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 127.333077][ T4761] comedi: valid board names for 8255 driver are: [ 127.369370][ T4761] 8255 [ 127.379384][ T4761] comedi: valid board names for vmk80xx driver are: [ 127.394064][ T4763] tipc: Enabling of bearer rejected, failed to enable media [ 127.403040][ T4761] vmk80xx [ 127.413289][ T4761] comedi: valid board names for usbduxsigma driver are: [ 127.418375][ T4763] device syzkaller0 entered promiscuous mode [ 127.426331][ T4761] usbduxsigma [ 127.426363][ T4761] comedi: valid board names for usbduxfast driver are: [ 127.426372][ T4761] usbduxfast [ 127.426379][ T4761] comedi: valid board names for usbdux driver are: [ 127.426387][ T4761] usbdux [ 127.426393][ T4761] comedi: valid board names for ni6501 driver are: [ 127.426401][ T4761] ni6501 [ 127.426407][ T4761] comedi: valid board names for dt9812 driver are: [ 127.426415][ T4761] dt9812 [ 127.426421][ T4761] comedi: valid board names for ni_labpc_cs driver are: [ 127.426436][ T4761] ni_labpc_cs [ 127.426442][ T4761] comedi: valid board names for ni_daq_700 driver are: [ 127.426450][ T4761] ni_daq_700 [ 127.505047][ T4761] comedi: valid board names for labpc_pci driver are: [ 127.518409][ T4761] labpc_pci [ 127.522100][ T4761] comedi: valid board names for adl_pci9118 driver are: [ 127.538665][ T4761] pci9118dg [ 127.542115][ T4761] pci9118hg [ 127.545623][ T4761] pci9118hr [ 127.549614][ T4761] comedi: valid board names for 8255_pci driver are: [ 127.557495][ T4761] 8255_pci [ 127.561812][ T4761] comedi: valid board names for s526 driver are: [ 127.569384][ T4761] s526 [ 127.572860][ T4761] comedi: valid board names for multiq3 driver are: [ 127.580816][ T4761] multiq3 [ 127.584241][ T4761] comedi: valid board names for pcmuio driver are: [ 127.628069][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.655123][ T4761] pcmuio48 [ 127.659539][ T4233] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.667919][ T4761] pcmuio96 [ 127.678605][ T4761] comedi: valid board names for pcmmio driver are: [ 127.687501][ T4761] pcmmio [ 127.691936][ T4761] comedi: valid board names for pcmda12 driver are: [ 127.796015][ T4233] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.812934][ T4233] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.826878][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.833529][ T4233] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 127.844601][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.864524][ T4233] usb 2-1: config 0 descriptor?? [ 128.470817][ T4761] pcmda12 [ 128.480230][ T4761] comedi: valid board names for pcmad driver are: [ 128.488458][ T4761] pcmad12 [ 128.491913][ T4761] pcmad16 [ 128.496412][ T4761] comedi: valid board names for ni_labpc driver are: [ 128.506170][ T4761] lab-pc-1200 [ 128.588256][ T4761] lab-pc-1200ai [ 128.604580][ T4761] lab-pc+ [ 128.609113][ T4761] comedi: valid board names for atmio16 driver are: [ 128.620530][ T4761] atmio16 [ 128.623616][ T4761] atmio16d [ 128.627881][ T4761] comedi: valid board names for ni_at_ao driver are: [ 128.637979][ T4761] at-ao-6 [ 128.641252][ T4761] at-ao-10 [ 128.644435][ T4761] comedi: valid board names for ni_at_a2150 driver are: [ 128.652846][ T4761] ni_at_a2150 [ 128.659650][ T4761] comedi: valid board names for adq12b driver are: [ 128.668114][ T4761] adq12b [ 128.671303][ T4761] comedi: valid board names for mpc624 driver are: [ 128.702129][ T4761] mpc624 [ 128.711104][ T4770] tipc: Started in network mode [ 128.719985][ T4761] comedi: valid board names for c6xdigio driver are: [ 128.738698][ T4761] c6xdigio [ 128.745075][ T4770] tipc: Node identity e6e67ad43912, cluster identity 4711 [ 128.747860][ T4761] comedi: valid board names for aio_iiro_16 driver are: [ 128.763823][ T4770] tipc: Enabled bearer , priority 0 [ 128.775168][ T4761] aio_iiro_16 [ 128.778678][ T4761] comedi: valid board names for aio_aio12_8 driver are: [ 128.802530][ T4773] device syzkaller0 entered promiscuous mode [ 128.809268][ T4761] aio_aio12_8 [ 128.824903][ T4761] aio_ai12_8 [ 128.845792][ T4761] aio_ao12_4 [ 128.858814][ T4233] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x4 [ 128.868084][ T4761] comedi: valid board names for fl512 driver are: [ 128.878287][ T4761] fl512 [ 128.884568][ T4761] comedi: valid board names for dmm32at driver are: [ 128.900213][ T4770] tipc: Resetting bearer [ 128.910527][ T4233] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 128.913830][ T4761] dmm32at [ 128.926593][ T4769] tipc: Resetting bearer [ 128.933888][ T4761] comedi: valid board names for dt282x driver are: [ 128.947232][ T4233] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 128.947259][ T4761] dt2821 [ 128.958130][ T4233] corsair-psu 0003:1B1C:1C09.0002: item fetching failed at offset 3/5 [ 128.960401][ T4761] dt2821-f [ 128.973578][ T4761] dt2821-g [ 128.978980][ T4761] dt2823 [ 128.983366][ T4761] dt2824-pgh [ 128.989700][ T4761] dt2824-pgl [ 128.993383][ T4761] dt2825 [ 128.999582][ T4761] dt2827 [ 129.007366][ T4761] dt2828 [ 129.019661][ T4761] dt2829 [ 129.024227][ T4233] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -22 [ 129.033783][ T4761] dt21-ez [ 129.041074][ T4761] dt23-ez [ 129.047290][ T4761] dt24-ez [ 129.050324][ T4761] dt24-ez-pgl [ 129.057477][ T4761] comedi: valid board names for dt2817 driver are: [ 129.079904][ T4761] dt2817 [ 129.083028][ T4761] comedi: valid board names for dt2815 driver are: [ 129.093189][ T4761] dt2815 [ 129.110582][ T4761] comedi: valid board names for dt2814 driver are: [ 129.110685][ T4233] usb 2-1: USB disconnect, device number 6 [ 129.144435][ T4761] dt2814 [ 129.156452][ T4769] tipc: Disabling bearer [ 129.213169][ T4761] comedi: valid board names for dt2811 driver are: [ 129.220062][ T4761] dt2811-pgh [ 129.256573][ T4761] dt2811-pgl [ 129.361212][ T4761] comedi: valid board names for dt2801 driver are: [ 129.369210][ T4761] dt2801 [ 129.372164][ T4761] comedi: valid board names for das6402 driver are: [ 129.388863][ T4761] das6402-12 [ 129.394719][ T4761] das6402-16 [ 130.135184][ T4761] comedi: valid board names for das1800 driver are: [ 130.151144][ T4761] das-1701st [ 131.235982][ T4761] das-1701st-da [ 131.252437][ T4761] das-1702st [ 131.274438][ T4761] das-1702st-da [ 131.403917][ T4761] das-1702hr [ 131.420455][ T4761] das-1702hr-da [ 131.425210][ T4761] das-1701ao [ 132.331324][ T4761] das-1702ao [ 132.755454][ T4761] das-1801st [ 132.758876][ T4761] das-1801st-da [ 132.762691][ T4761] das-1802st [ 132.825449][ T4761] das-1802st-da [ 133.485980][ T4761] das-1802hr [ 133.490962][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.497715][ T4761] das-1802hr-da [ 133.502378][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.513053][ T4761] das-1801hc [ 133.516738][ T4761] das-1802hc [ 133.520606][ T4761] das-1801ao [ 133.524078][ T4761] das-1802ao [ 133.528313][ T4761] comedi: valid board names for das800 driver are: [ 133.710473][ T4761] das-800 [ 134.094859][ T4761] cio-das800 [ 134.110194][ T4761] das-801 [ 134.115467][ T4761] cio-das801 [ 134.119965][ T4761] das-802 [ 134.127789][ T4761] cio-das802 [ 134.131212][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.143852][ T4761] cio-das802/16 [ 134.160978][ T4761] comedi: valid board names for isa-das08 driver are: [ 134.170199][ T4761] isa-das08 [ 134.173422][ T4761] das08-pgm [ 134.178986][ T4761] das08-pgh [ 134.182354][ T4761] das08-pgl [ 134.214223][ T4761] das08-aoh [ 134.222257][ T4761] das08-aol [ 134.241686][ T4761] das08-aom [ 134.250862][ T4761] das08/jr-ao [ 134.266826][ T4761] das08jr-16-ao [ 134.272258][ T4761] pc104-das08 [ 134.294056][ T4761] das08jr/16 [ 134.298138][ T4761] comedi: valid board names for das16m1 driver are: [ 134.309794][ T4761] das16m1 [ 135.806960][ T4829] bridge0: port 3(syz_tun) entered blocking state [ 135.814819][ T4829] bridge0: port 3(syz_tun) entered disabled state [ 135.825533][ T4829] device syz_tun entered promiscuous mode [ 135.832390][ T4829] bridge0: port 3(syz_tun) entered blocking state [ 135.839351][ T4829] bridge0: port 3(syz_tun) entered forwarding state [ 136.044836][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.058171][ T4761] comedi: valid board names for dac02 driver are: [ 136.083084][ T4761] dac02 [ 136.196030][ T4761] comedi: valid board names for rti802 driver are: [ 136.203404][ T4761] rti802 [ 136.207204][ T4761] comedi: valid board names for rti800 driver are: [ 136.214000][ T4761] rti800 [ 136.224240][ T4761] rti815 [ 136.234439][ T4761] comedi: valid board names for pcm3724 driver are: [ 136.993354][ T4761] pcm3724 [ 137.006708][ T4761] comedi: valid board names for pcl818 driver are: [ 137.052779][ T4761] pcl818l [ 137.060378][ T4761] pcl818h [ 137.063543][ T4761] pcl818hd [ 137.091802][ T4761] pcl818hg [ 137.095899][ T4761] pcl818 [ 137.099853][ T4761] pcl718 [ 137.102791][ T4761] pcm3718 [ 137.109143][ T4761] comedi: valid board names for pcl816 driver are: [ 137.124899][ T4761] pcl816 [ 137.229926][ T4761] pcl814b [ 137.233091][ T4761] comedi: valid board names for pcl812 driver are: [ 137.240364][ T4761] pcl812 [ 137.258123][ T4761] pcl812pg [ 137.276345][ T4761] acl8112pg [ 137.940329][ T4761] acl8112dg [ 137.943554][ T4761] acl8112hg [ 137.977624][ T4761] a821pgl [ 137.980799][ T4761] a821pglnda [ 137.984095][ T4761] a821pgh [ 137.993474][ T4761] a822pgl [ 137.996824][ T4761] a822pgh [ 138.009146][ T4761] a823pgl [ 138.034913][ T4761] a823pgh [ 138.037971][ T4761] pcl813 [ 138.040900][ T4761] pcl813b [ 138.043896][ T4761] acl8113 [ 138.152588][ T4761] iso813 [ 138.165566][ T4761] acl8216 [ 138.172869][ T4761] a826pg [ 138.176176][ T4761] comedi: valid board names for pcl730 driver are: [ 138.182778][ T4761] pcl730 [ 138.198593][ T4761] iso730 [ 138.848044][ T4761] acl7130 [ 138.851262][ T4761] pcm3730 [ 138.854359][ T4761] pcl725 [ 138.899439][ T4761] p8r8dio [ 138.902681][ T4761] acl7225b [ 138.983135][ T4761] p16r16dio [ 139.639673][ T4761] pcl733 [ 139.811273][ T4761] pcl734 [ 139.814341][ T4761] opmm-1616-xt [ 139.928294][ T4877] bridge0: port 3(syz_tun) entered blocking state [ 139.935434][ T4877] bridge0: port 3(syz_tun) entered disabled state [ 139.950752][ T4877] device syz_tun entered promiscuous mode [ 139.960251][ T4877] bridge0: port 3(syz_tun) entered blocking state [ 139.967041][ T4877] bridge0: port 3(syz_tun) entered forwarding state [ 140.319073][ T4761] pearl-mm-p [ 140.322834][ T4761] ir104-pbf [ 140.395467][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 140.405659][ T4761] comedi: valid board names for pcl726 driver are: [ 141.259829][ T4761] pcl726 [ 141.262973][ T4761] pcl727 [ 141.297470][ T4761] pcl728 [ 141.319538][ T4761] acl6126 [ 141.334517][ T4761] acl6128 [ 141.358169][ T4761] comedi: valid board names for pcl724 driver are: [ 141.375076][ T4761] pcl724 [ 142.056254][ T4761] pcl722 [ 142.059766][ T4761] pcl731 [ 142.062699][ T4761] acl7122 [ 142.812031][ T4761] acl7124 [ 142.851130][ T4761] pet48dio [ 142.854391][ T4761] pcmio48 [ 142.933862][ T4761] onyx-mm-dio [ 142.971996][ T4761] comedi: valid board names for pcl711 driver are: [ 143.112867][ T4761] pcl711 [ 143.171834][ T4761] pcl711b [ 143.463167][ T4761] acl8112hg [ 144.137635][ T4761] acl8112dg [ 144.141022][ T4761] comedi: valid board names for amplc_pc263 driver are: [ 144.222777][ T4761] pc263 [ 144.286261][ T4896] Cannot find add_set index 0 as target [ 144.344839][ T4761] comedi: valid board names for amplc_pc236 driver are: [ 144.352963][ T4761] pc36at [ 144.359582][ T4761] comedi: valid board names for amplc_dio200 driver are: [ 144.380429][ T4761] pc212e [ 144.383622][ T4761] pc214e [ 144.388118][ T4761] pc215e [ 144.391159][ T4761] pc218e [ 144.394170][ T4761] pc272e [ 144.397823][ T4761] comedi: valid board names for comedi_parport driver are: [ 144.408157][ T4761] comedi_parport [ 144.411905][ T4761] comedi: valid board names for comedi_test driver are: [ 144.431791][ T4761] comedi_test [ 144.440255][ T4761] comedi: valid board names for comedi_bond driver are: [ 144.492316][ T4761] comedi_bond [ 146.936609][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 147.152792][ T4921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.207762][ T4921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.269147][ T4921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.288719][ T4921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.388247][ T4278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.404909][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 147.561471][ T4278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.666246][ T4278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.772553][ T4926] device syzkaller0 entered promiscuous mode [ 147.786849][ T4930] tipc: Started in network mode [ 147.792682][ T4930] tipc: Node identity 0e3aa901690a, cluster identity 4711 [ 147.803146][ T4930] tipc: Enabled bearer , priority 0 [ 148.037641][ T4278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.556141][ T4926] tipc: Resetting bearer [ 149.203057][ T4925] tipc: Resetting bearer [ 149.291280][ T4925] tipc: Disabling bearer [ 149.743788][ T4903] chnl_net:caif_netlink_parms(): no params data found [ 149.752290][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 150.108536][ T4948] netlink: 112 bytes leftover after parsing attributes in process `syz.3.187'. [ 150.311081][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 150.349577][ T4948] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.359030][ T4948] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.367937][ T4948] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.377562][ T4948] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.658024][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.314063][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.377510][ T4903] device bridge_slave_0 entered promiscuous mode [ 151.390528][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 151.454483][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.463184][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.885417][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 151.919957][ T4903] device bridge_slave_1 entered promiscuous mode [ 152.742177][ T4975] xt_connbytes: Forcing CT accounting to be enabled [ 153.387004][ T4903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.945727][ T4903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.004409][ T4977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.193'. [ 154.024934][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.048923][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 154.138884][ T4903] team0: Port device team_slave_0 added [ 154.164555][ T4903] team0: Port device team_slave_1 added [ 154.229301][ T4990] 0xfffffffffffffffd-0x000000020000 : "" [ 154.254905][ T4990] mtd: partition "" is out of reach -- disabled [ 154.262971][ T4903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.293501][ T4903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.319736][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.382078][ T4903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.390645][ T4990] ftl_cs: FTL header not found. [ 154.444056][ T4903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.468774][ T4903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.541973][ T4903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.729184][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.748609][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.767318][ T7] usb 5-1: Product: syz [ 154.777709][ T7] usb 5-1: Manufacturer: syz [ 154.792779][ T7] usb 5-1: SerialNumber: syz [ 154.850065][ T4903] device hsr_slave_0 entered promiscuous mode [ 154.901901][ T4903] device hsr_slave_1 entered promiscuous mode [ 154.915483][ T4903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.929254][ T4903] Cannot create hsr debugfs directory [ 155.144990][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 155.175308][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 155.349288][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 155.365790][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 155.412645][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 155.431432][ T7] lan78xx: probe of 5-1:1.0 failed with error -71 [ 155.977577][ T7] usb 5-1: USB disconnect, device number 7 [ 156.133784][ T5015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 156.460342][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 156.798618][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.857572][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.901985][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.791365][ T4903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.256090][ T4278] device hsr_slave_0 left promiscuous mode [ 159.310975][ T4278] device hsr_slave_1 left promiscuous mode [ 159.358691][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.391131][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.465260][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.599813][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.608304][ T4278] device bridge_slave_1 left promiscuous mode [ 159.624632][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.353081][ T4278] device bridge_slave_0 left promiscuous mode [ 160.359449][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.485440][ T4278] device veth1_macvtap left promiscuous mode [ 160.502527][ T4278] device veth0_macvtap left promiscuous mode [ 160.512328][ T4278] device veth1_vlan left promiscuous mode [ 160.529385][ T4278] device veth0_vlan left promiscuous mode [ 160.968484][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 160.984046][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 161.006146][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.029382][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.420174][ T4278] bond0 (unregistering): Released all slaves [ 161.631479][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 161.643869][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 161.658740][ T4903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.674433][ T4903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.851213][ T4903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.895023][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.185461][ T4903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.225935][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.244665][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.252563][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.266148][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.281918][ T4903] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.311643][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.327144][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.334107][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.336775][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.353525][ T4231] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.370938][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.380064][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.387242][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.388982][ T4231] usb 3-1: config 0 descriptor?? [ 162.415471][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.424154][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.438212][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.452118][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.459335][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.477856][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.642710][ T4903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.653400][ T4903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.665999][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.679439][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.690988][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.700390][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.749084][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.774684][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.983905][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.032038][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.071203][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.231581][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.268508][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.327578][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.370679][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.424286][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.436916][ T4231] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 163.455107][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.473156][ T7] usb 5-1: SerialNumber: syz [ 163.486720][ T4231] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 163.538973][ T4231] usb 3-1: USB disconnect, device number 6 [ 163.653423][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.674137][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.733572][ T5128] fido_id[5128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 163.758143][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 163.764334][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 163.788416][ T7] usb 5-1: 0:2 : does not exist [ 163.807257][ T4903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.815903][ T7] usb 5-1: USB disconnect, device number 8 [ 164.127739][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.722154][ T5152] device syzkaller0 entered promiscuous mode [ 165.742494][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.763915][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.822641][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 165.931039][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.951744][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.977468][ T4903] device veth0_vlan entered promiscuous mode [ 165.991725][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.172914][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.212694][ T4903] device veth1_vlan entered promiscuous mode [ 166.760064][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.818941][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.860750][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.907491][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.971439][ T4903] device veth0_macvtap entered promiscuous mode [ 167.010068][ T4903] device veth1_macvtap entered promiscuous mode [ 167.141315][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.178266][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.188465][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.199408][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.211006][ T4903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.221240][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.243915][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.272872][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.296442][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.312584][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.343527][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.362624][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.374153][ T4903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.394440][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.413131][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.442674][ T5189] tipc: Enabled bearer , priority 0 [ 167.455401][ T4903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.479569][ T4903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.514939][ T4903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.535170][ T4903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.560162][ T5185] device syzkaller0 entered promiscuous mode [ 167.569010][ T5191] tipc: Started in network mode [ 167.574006][ T5191] tipc: Node identity 527ce967af97, cluster identity 4711 [ 167.586170][ T5191] tipc: Enabled bearer , priority 0 [ 167.636493][ T5185] tipc: Resetting bearer [ 167.648055][ T5184] tipc: Resetting bearer [ 167.688450][ T5184] tipc: Disabling bearer [ 167.719579][ T5191] tipc: Resetting bearer [ 167.757535][ T5187] tipc: Disabling bearer [ 167.782749][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.805154][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.831980][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.835925][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.850724][ T5200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.231'. [ 167.857356][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.910465][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.312675][ T5218] ./file0: Can't open blockdev [ 169.895320][ T5226] device syzkaller0 entered promiscuous mode [ 173.554742][ C0] sched: RT throttling activated [ 174.244936][ T4233] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.734959][ T5287] device syzkaller0 entered promiscuous mode [ 175.422492][ T4233] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 175.450842][ T4233] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.616384][ T4233] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 175.957168][ T4233] usb 6-1: config 1 interface 0 has no altsetting 0 [ 176.588791][ T4233] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 176.628489][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.644928][ T4233] usb 6-1: Product: syz [ 176.649318][ T4233] usb 6-1: Manufacturer: syz [ 176.654278][ T4233] usb 6-1: SerialNumber: syz [ 176.758282][ T4233] usb 6-1: can't set config #1, error -71 [ 176.785489][ T4233] usb 6-1: USB disconnect, device number 2 [ 179.339124][ T5345] binder: 5343:5345 unknown command 1074553619 [ 179.365170][ T5345] binder: 5343:5345 ioctl c0306201 200000000540 returned -22 [ 179.805948][ T5355] device syzkaller0 entered promiscuous mode [ 180.270115][ T5363] overlayfs: failed to resolve './file1': -2 [ 180.828263][ T5382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.997481][ T5385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.272'. [ 181.405018][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 181.424833][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 181.447814][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 182.558374][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 183.775183][ T5414] tipc: Enabled bearer , priority 0 [ 183.944638][ T5422] device syzkaller0 entered promiscuous mode [ 184.235546][ T5414] tipc: Resetting bearer [ 184.548842][ T5410] tipc: Resetting bearer [ 184.582897][ T5410] tipc: Disabling bearer [ 184.662896][ T5429] device syzkaller0 entered promiscuous mode [ 184.978829][ T5454] netlink: 104 bytes leftover after parsing attributes in process `syz.4.286'. [ 188.315694][ T5486] tipc: Enabled bearer , priority 0 [ 188.323281][ T5486] device syzkaller0 entered promiscuous mode [ 188.349666][ T5486] tipc: Resetting bearer [ 188.685369][ T5485] tipc: Resetting bearer [ 188.892696][ T5485] tipc: Disabling bearer [ 189.083111][ T5496] device syzkaller0 entered promiscuous mode [ 191.165026][ T5526] binder: 5519:5526 ioctl c0306201 0 returned -14 [ 192.278267][ T5553] device syzkaller0 entered promiscuous mode [ 194.743425][ T4500] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.743638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.774931][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.075027][ T4500] usb 4-1: Using ep0 maxpacket: 32 [ 195.195034][ T4500] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.203732][ T4500] usb 4-1: config 0 has no interface number 0 [ 195.940775][ T4500] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.476859][ T4500] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.514934][ T4500] usb 4-1: config 0 interface 85 has no altsetting 0 [ 196.735804][ T4500] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 196.776763][ T4500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.818151][ T4500] usb 4-1: Product: syz [ 196.828356][ T4500] usb 4-1: Manufacturer: syz [ 196.833073][ T4500] usb 4-1: SerialNumber: syz [ 196.871310][ T4500] usb 4-1: config 0 descriptor?? [ 198.005945][ T4500] appletouch 4-1:0.85: Failed to request geyser raw mode [ 198.028756][ T4500] appletouch: probe of 4-1:0.85 failed with error -5 [ 198.225302][ T4500] usb 4-1: USB disconnect, device number 4 [ 198.924907][ T4500] Bluetooth: hci5: command 0x0409 tx timeout [ 199.329068][ T5601] netlink: 224 bytes leftover after parsing attributes in process `syz.2.313'. [ 201.004879][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 201.326613][ T5618] input: syz0 as /devices/virtual/input/input18 [ 201.530669][ T4421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.873574][ T4421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.370498][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.378543][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.394500][ T5626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.733359][ T5639] ubi31: detaching mtd0 [ 203.088506][ T4421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.158572][ T4500] Bluetooth: hci5: command 0x040f tx timeout [ 204.178381][ T5639] ubi31: mtd0 is detached [ 204.403488][ T4421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.719539][ T5675] device syzkaller0 entered promiscuous mode [ 205.782272][ T5677] device syzkaller0 entered promiscuous mode [ 205.788696][ T4188] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.848956][ T5583] chnl_net:caif_netlink_parms(): no params data found [ 206.166087][ T4188] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 206.183347][ T4188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.227731][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.239762][ T4500] Bluetooth: hci5: command 0x0419 tx timeout [ 206.264890][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.283791][ T5583] device bridge_slave_0 entered promiscuous mode [ 206.315013][ T4188] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 206.327524][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.338896][ T4188] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 206.347462][ T4188] usb 5-1: Manufacturer: syz [ 206.354033][ T4188] usb 5-1: config 0 descriptor?? [ 206.359929][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.368769][ T5583] device bridge_slave_1 entered promiscuous mode [ 206.484063][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.528409][ T5700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.555013][ T4188] rc_core: IR keymap rc-hauppauge not found [ 206.563219][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.578176][ T5704] kAFS: unable to lookup cell '(,c¾Ì' [ 206.578225][ T4188] Registered IR keymap rc-empty [ 206.579017][ T4188] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 206.698170][ T4188] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 206.766192][ T5583] team0: Port device team_slave_0 added [ 206.781272][ T5583] team0: Port device team_slave_1 added [ 206.808909][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.815988][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.843996][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.860476][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.867987][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.900413][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.012029][ T5583] device hsr_slave_0 entered promiscuous mode [ 207.033850][ T5583] device hsr_slave_1 entered promiscuous mode [ 207.970346][ T4500] usb 5-1: USB disconnect, device number 9 [ 208.205290][ T5732] binder: 5730:5732 ioctl c0285840 200000000500 returned -22 [ 209.234564][ T5583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.262893][ T5583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.575561][ T5583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.595128][ T5583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.160227][ T5753] xt_policy: neither incoming nor outgoing policy selected [ 211.005641][ T5758] device syzkaller0 entered promiscuous mode [ 212.327688][ T5785] tipc: Enabled bearer , priority 0 [ 212.365662][ T4421] device hsr_slave_0 left promiscuous mode [ 212.376297][ T4421] device hsr_slave_1 left promiscuous mode [ 212.387076][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.398457][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.408420][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.419956][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.429710][ T4421] device bridge_slave_1 left promiscuous mode [ 212.439898][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.452264][ T4421] device bridge_slave_0 left promiscuous mode [ 212.462817][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.484886][ T4421] device veth1_macvtap left promiscuous mode [ 212.509633][ T4421] device veth0_macvtap left promiscuous mode [ 212.515866][ T4421] device veth1_vlan left promiscuous mode [ 212.531678][ T4421] device veth0_vlan left promiscuous mode [ 214.546749][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 214.592757][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 214.640467][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.663141][ T26] audit: type=1800 audit(1774341037.205:3): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.351" name="bus" dev="ramfs" ino=38495 res=0 errno=0 [ 214.683315][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.792860][ T4421] bond0 (unregistering): Released all slaves [ 214.841803][ T5785] device syzkaller0 entered promiscuous mode [ 214.855078][ T4230] tipc: Node number set to 1731242241 [ 214.883428][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.965943][ T5796] tipc: Resetting bearer [ 215.020914][ T5796] tipc: Disabling bearer [ 215.055765][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.076966][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.108756][ T5823] device syzkaller0 entered promiscuous mode [ 215.139849][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.213514][ T5829] tipc: Enabled bearer , priority 0 [ 215.224214][ T5829] device syzkaller0 entered promiscuous mode [ 215.232899][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.245919][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.256942][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.264089][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.291969][ T5829] tipc: Resetting bearer [ 215.303284][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.367491][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.537313][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.699123][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.706672][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.614967][ T5828] tipc: Resetting bearer [ 216.691300][ T5846] xt_connbytes: Forcing CT accounting to be enabled [ 216.951697][ T5828] tipc: Disabling bearer [ 217.067781][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.106502][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.195925][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.251807][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.332331][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.368349][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.402191][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.471559][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.527705][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.564536][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.585742][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.607029][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.359485][ T5887] device syzkaller0 entered promiscuous mode [ 220.417902][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.438697][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.481629][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.089767][ T5901] comedi comedi3: dac02: I/O port conflict (0x3,8) [ 222.268475][ T5909] tipc: Enabled bearer , priority 0 [ 222.289820][ T5909] device syzkaller0 entered promiscuous mode [ 222.300875][ T5913] xt_connbytes: Forcing CT accounting to be enabled [ 222.352862][ T5909] tipc: Resetting bearer [ 222.452166][ T5907] tipc: Resetting bearer [ 222.472930][ T5907] tipc: Disabling bearer [ 222.869114][ T5927] device syzkaller0 entered promiscuous mode [ 222.877694][ T5931] ufs: You didn't specify the type of your ufs filesystem [ 222.877694][ T5931] [ 222.877694][ T5931] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 222.877694][ T5931] [ 222.877694][ T5931] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 222.911258][ T5931] ufs: ufstype=old is supported read-only [ 223.184065][ T5931] ufs: ufs_fill_super(): bad magic number [ 223.584983][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.606917][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.808310][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.826945][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.578206][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.617103][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.649560][ T5583] device veth0_vlan entered promiscuous mode [ 224.670344][ T5946] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 224.762474][ T5946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.833034][ T5949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.840212][ T5949] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 224.852017][ T5949] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 224.889105][ T5583] device veth1_vlan entered promiscuous mode [ 225.458763][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.532602][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.683947][ T5583] device veth0_macvtap entered promiscuous mode [ 225.704386][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.726601][ T5583] device veth1_macvtap entered promiscuous mode [ 225.831005][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.858902][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.934432][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.238131][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.309963][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.368956][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.429280][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.441664][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.453864][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.466638][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.479745][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.513479][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.698465][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.742608][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.828366][ T5986] input: syz0 as /devices/virtual/input/input20 [ 226.859581][ T5583] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.913397][ T5583] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.993829][ T5583] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.044747][ T5583] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.138647][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0x7773 [ 227.138730][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 227.146986][ T4197] ================================================================== [ 227.162652][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 227.170558][ T4197] Read of size 1 at addr ffff8880773c8c07 by task kworker/u5:4/4197 [ 227.178805][ T4197] [ 227.181314][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 227.188844][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.199211][ T4197] Workqueue: hci2 hci_rx_work [ 227.203913][ T4197] Call Trace: [ 227.207216][ T4197] [ 227.210154][ T4197] dump_stack_lvl+0x188/0x250 [ 227.214830][ T4197] ? show_regs_print_info+0x20/0x20 [ 227.220123][ T4197] ? load_image+0x400/0x400 [ 227.224623][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 227.230076][ T4197] print_address_description+0x60/0x2d0 [ 227.235637][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 227.240825][ T4197] kasan_report+0xdf/0x130 [ 227.245654][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 227.250776][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 227.255714][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 227.262033][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 227.267940][ T4197] ? mark_lock+0x94/0x320 [ 227.272345][ T4197] ? mutex_unlock+0x10/0x10 [ 227.276850][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.282841][ T4197] ? lock_chain_count+0x20/0x20 [ 227.287716][ T4197] ? __rwlock_init+0x140/0x140 [ 227.292580][ T4197] hci_event_packet+0xe48/0x1370 [ 227.297876][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 227.303175][ T4197] ? rcu_lock_release+0x20/0x20 [ 227.308100][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 227.313296][ T4197] hci_rx_work+0x255/0xa10 [ 227.317720][ T4197] process_one_work+0x85f/0x1010 [ 227.322865][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 227.328495][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 227.333892][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 227.339095][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 227.344835][ T4197] ? wq_worker_running+0x97/0x170 [ 227.350038][ T4197] worker_thread+0xaa6/0x1290 [ 227.354736][ T4197] kthread+0x436/0x520 [ 227.358906][ T4197] ? rcu_lock_release+0x20/0x20 [ 227.363763][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 227.368482][ T4197] ret_from_fork+0x1f/0x30 [ 227.372940][ T4197] [ 227.375978][ T4197] [ 227.378385][ T4197] Allocated by task 5972: [ 227.382734][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 227.387330][ T4197] __alloc_skb+0x22c/0x750 [ 227.391748][ T4197] vhci_write+0xbc/0x450 [ 227.395989][ T4197] vfs_write+0x745/0xd60 [ 227.400228][ T4197] ksys_write+0x152/0x260 [ 227.404879][ T4197] do_syscall_64+0x4c/0xa0 [ 227.409304][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.415187][ T4197] [ 227.417496][ T4197] Last potentially related work creation: [ 227.423463][ T4197] kasan_save_stack+0x35/0x60 [ 227.428143][ T4197] kasan_record_aux_stack+0xb8/0x100 [ 227.433447][ T4197] kvfree_call_rcu+0x105/0x7d0 [ 227.438500][ T4197] cgroup_free+0x143/0x1d0 [ 227.442990][ T4197] __put_task_struct+0xe3/0x480 [ 227.447831][ T4197] rcu_core+0x9d2/0x1670 [ 227.452169][ T4197] handle_softirqs+0x339/0x830 [ 227.457092][ T4197] __irq_exit_rcu+0x13b/0x230 [ 227.461870][ T4197] irq_exit_rcu+0x5/0x20 [ 227.466101][ T4197] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 227.471820][ T4197] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 227.477933][ T4197] [ 227.480272][ T4197] The buggy address belongs to the object at ffff8880773c8800 [ 227.480272][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 227.494841][ T4197] The buggy address is located 7 bytes to the right of [ 227.494841][ T4197] 1024-byte region [ffff8880773c8800, ffff8880773c8c00) [ 227.509052][ T4197] The buggy address belongs to the page: [ 227.514776][ T4197] page:ffffea0001dcf200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x773c8 [ 227.525274][ T4197] head:ffffea0001dcf200 order:3 compound_mapcount:0 compound_pincount:0 [ 227.533595][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 227.541596][ T4197] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016c41dc0 [ 227.550164][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 227.558997][ T4197] page dumped because: kasan: bad access detected [ 227.565570][ T4197] page_owner tracks the page as allocated [ 227.571401][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xf2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC), pid 3087, ts 64528822914, free_ts 64455351534 [ 227.591542][ T4197] get_page_from_freelist+0x1bbd/0x1ca0 [ 227.597207][ T4197] __alloc_pages+0x1ee/0x480 [ 227.601880][ T4197] new_slab+0xc0/0x4b0 [ 227.606127][ T4197] ___slab_alloc+0x80a/0xdd0 [ 227.610707][ T4197] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 227.616492][ T4197] __alloc_skb+0x22c/0x750 [ 227.620977][ T4197] __netdev_alloc_skb+0x110/0x4c0 [ 227.626262][ T4197] batadv_iv_ogm_queue_add+0x73e/0xcf0 [ 227.631813][ T4197] batadv_iv_ogm_schedule+0x81c/0xec0 [ 227.637433][ T4197] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 227.644540][ T4197] process_one_work+0x85f/0x1010 [ 227.649666][ T4197] worker_thread+0xaa6/0x1290 [ 227.654606][ T4197] kthread+0x436/0x520 [ 227.659039][ T4197] ret_from_fork+0x1f/0x30 [ 227.663532][ T4197] page last free stack trace: [ 227.668185][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 227.673626][ T4197] free_unref_page+0x8f/0x2a0 [ 227.678286][ T4197] __unfreeze_partials+0x1a5/0x200 [ 227.683420][ T4197] put_cpu_partial+0x12d/0x190 [ 227.688336][ T4197] qlist_free_all+0x35/0x90 [ 227.693389][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 227.698848][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 227.703688][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 227.708785][ T4197] kmem_cache_alloc_trace+0x103/0x2a0 [ 227.714138][ T4197] nsim_fib_event_work+0x88d/0x33e0 [ 227.719324][ T4197] process_one_work+0x85f/0x1010 [ 227.724251][ T4197] worker_thread+0xd60/0x1290 [ 227.729088][ T4197] kthread+0x436/0x520 [ 227.733163][ T4197] ret_from_fork+0x1f/0x30 [ 227.737707][ T4197] [ 227.740114][ T4197] Memory state around the buggy address: [ 227.745765][ T4197] ffff8880773c8b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.753920][ T4197] ffff8880773c8b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.761972][ T4197] >ffff8880773c8c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.770165][ T4197] ^ [ 227.774230][ T4197] ffff8880773c8c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.782290][ T4197] ffff8880773c8d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.790329][ T4197] ================================================================== [ 227.798864][ T4197] Disabling lock debugging due to kernel taint [ 227.811801][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 227.819517][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 227.828844][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.838908][ T4197] Workqueue: hci2 hci_rx_work [ 227.843700][ T4197] Call Trace: [ 227.846999][ T4197] [ 227.849935][ T4197] dump_stack_lvl+0x188/0x250 [ 227.854627][ T4197] ? show_regs_print_info+0x20/0x20 [ 227.860005][ T4197] ? load_image+0x400/0x400 [ 227.864520][ T4197] panic+0x2e5/0x810 [ 227.868529][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 227.873045][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 227.879234][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 227.884184][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 227.889489][ T4197] check_panic_on_warn+0x80/0xa0 [ 227.894442][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 227.899656][ T4197] end_report+0x6d/0xf0 [ 227.903848][ T4197] kasan_report+0x102/0x130 [ 227.908487][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 227.913604][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 227.918554][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 227.924803][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 227.930440][ T4197] ? mark_lock+0x94/0x320 [ 227.934857][ T4197] ? mutex_unlock+0x10/0x10 [ 227.939572][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.945961][ T4197] ? lock_chain_count+0x20/0x20 [ 227.950823][ T4197] ? __rwlock_init+0x140/0x140 [ 227.955613][ T4197] hci_event_packet+0xe48/0x1370 [ 227.960550][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 227.965845][ T4197] ? rcu_lock_release+0x20/0x20 [ 227.970999][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 227.976209][ T4197] hci_rx_work+0x255/0xa10 [ 227.980728][ T4197] process_one_work+0x85f/0x1010 [ 227.985770][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 227.991416][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 227.996838][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 228.001868][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 228.007614][ T4197] ? wq_worker_running+0x97/0x170 [ 228.012645][ T4197] worker_thread+0xaa6/0x1290 [ 228.017387][ T4197] kthread+0x436/0x520 [ 228.021501][ T4197] ? rcu_lock_release+0x20/0x20 [ 228.026937][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 228.031578][ T4197] ret_from_fork+0x1f/0x30 [ 228.036022][ T4197] [ 228.039664][ T4197] Kernel Offset: disabled [ 228.043992][ T4197] Rebooting in 86400 seconds..