last executing test programs: 19.807116002s ago: executing program 1 (id=780): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, 0x0, 0x20002100) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) getrlimit(0x7, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) 17.088594566s ago: executing program 1 (id=792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES8=r2], 0xfc}}, 0x0) 16.104474035s ago: executing program 1 (id=797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x14, 0x23, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x400) 15.406928629s ago: executing program 1 (id=798): r0 = socket(0x1e, 0x4, 0x0) unshare(0x24020400) ppoll(&(0x7f0000000040)=[{r0, 0x1380}], 0x1, 0x0, 0x0, 0x0) 14.257999606s ago: executing program 1 (id=805): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r4}) 11.798359358s ago: executing program 4 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 10.586066887s ago: executing program 4 (id=819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES8, @ANYRES8=r2], 0xfc}}, 0x0) 10.272698593s ago: executing program 4 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @mcast2, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x43, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000380), 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)) 7.982193236s ago: executing program 2 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES8, @ANYRES8=r2], 0xfc}}, 0x0) 7.745918288s ago: executing program 1 (id=832): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="04cca4926ee85bfa70b91762fca3a7611b4f36d0f7eeb181b16d6b68a69616777eec1103f980ff47ee3fc145d57691c1d0b8ddd3b4f6659b37e6a40b19016155e0fde46523a5de4bdb7f3559b1a664dd39f0ed81065f2112795a207902ab545d4d6b374e6746d234d444c0b064798cc55a780e3a5eeb6796f44c2d3a17333473a3ed357a10ea4042390b7c8b6730b3c363a4fdaf4063d730704810dc481b10619217deac1bf8276c0712298ce70f4aa07a75d67dc455d4ffc066e2a832f71f1043642bc714b3641dc67f0cf1f6fe0b8c9f1ea9b92ba6c08aec0000f4ce06ef14b8c9c6f9370179bc1f27bbe425c5d70da46a47a3667aab85571b603bc63066ea9c89caae0f69e85e546b9e88de4762d143", 0x111}], 0x4, 0x0, 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) 7.68235097s ago: executing program 2 (id=833): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, 0x0, 0x20002100) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) getrlimit(0x7, &(0x7f0000000000)) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, 0x0) 6.436252022s ago: executing program 0 (id=836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/81, 0x51}], 0x1}, 0x0) close(0x4) 5.906255628s ago: executing program 0 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000790000000000000000e593ed340000000000000095"], &(0x7f0000000040)='GPL\x00', 0x30000000}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000001c0)=""/4068, 0xfe4) 4.959461675s ago: executing program 0 (id=840): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x3e, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffff1b, 0x10007b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x2, 0x0, 0x107fffffff}, 0x0, 0x0) 3.531419755s ago: executing program 0 (id=842): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r4}) 2.726124895s ago: executing program 2 (id=845): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8044) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r2}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a1c001280110001006272696401010000626f6e645f736c6176655f311400000000000000000000000000000000000000879e6ce45aa31b28ec64a357ef5dff0904c93b3222a9fd2c970c7f1db68f6e1433b1121257ad4b7b69e3258057e52d32ddde322d9f754910ea5b7517a0d67284d5cb1a04455c2b4064c70c16c7b5"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x2, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x0) 1.948089824s ago: executing program 3 (id=847): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000180)) 1.684001367s ago: executing program 3 (id=848): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) 1.671971147s ago: executing program 2 (id=849): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8801, 0x100, 0x0, 0x7}) 1.535687654s ago: executing program 3 (id=850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000790000000000000000e593ed340000000000000095"], &(0x7f0000000040)='GPL\x00', 0x30000000}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000001c0)=""/4068, 0xfe4) 1.534556103s ago: executing program 4 (id=851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 537.904573ms ago: executing program 2 (id=852): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x1003, 0x4) 537.369053ms ago: executing program 3 (id=853): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x8800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @loopback}}}}, 0x3e) 476.413346ms ago: executing program 0 (id=854): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x894) 459.049877ms ago: executing program 4 (id=855): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x4, r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 327.656773ms ago: executing program 2 (id=856): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x5) ioctl$TCSETA(r4, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd}) 146.369152ms ago: executing program 3 (id=857): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 66.217626ms ago: executing program 3 (id=858): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000180)) 44.746077ms ago: executing program 4 (id=859): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 0 (id=860): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x188, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @remote, 0xffffff00, 0xff000000, 'vlan1\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x3, 0x8d}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@broadcast, @rand_addr=0x8, 0x0, 0xff000000, 'veth1_to_hsr\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x50}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0xff, 0xe, [0x1d, 0x36, 0x39, 0x14, 0x36, 0x24, 0xa, 0x7, 0x11, 0x2a, 0x2b, 0xb, 0x19, 0x27, 0x1d, 0x33], 0x2, 0x4, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 64.946845][ T4173] cgroup: Unknown subsys name 'net' [ 65.084535][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.689819][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.833974][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.887540][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.913078][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.997983][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.044948][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 69.057619][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.064873][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.073599][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.104850][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.112160][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.121197][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.151890][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.159098][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.167982][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.183743][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.191083][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.199515][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.241940][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.249495][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.257696][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.278370][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.291020][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.320518][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.327817][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.336085][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.356691][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.368995][ T4194] team0: Port device team_slave_0 added [ 69.383192][ T4194] team0: Port device team_slave_1 added [ 69.389325][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.396518][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.405277][ T4197] device bridge_slave_0 entered promiscuous mode [ 69.419281][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.442146][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.450295][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.459293][ T4197] device bridge_slave_1 entered promiscuous mode [ 69.482998][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.501355][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.509105][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.536754][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.571291][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.587321][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.594691][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.622194][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.644661][ T4185] team0: Port device team_slave_0 added [ 69.651800][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659548][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.668373][ T4199] device bridge_slave_0 entered promiscuous mode [ 69.688810][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.701608][ T4185] team0: Port device team_slave_1 added [ 69.708868][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.715998][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.724944][ T4199] device bridge_slave_1 entered promiscuous mode [ 69.742017][ T4186] team0: Port device team_slave_0 added [ 69.758952][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.790072][ T4186] team0: Port device team_slave_1 added [ 69.818531][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.831486][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.850841][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.858493][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.868875][ T4197] team0: Port device team_slave_0 added [ 69.875484][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.882561][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.910456][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.952242][ T4197] team0: Port device team_slave_1 added [ 69.959439][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.966886][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.002357][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.016182][ T4199] team0: Port device team_slave_0 added [ 70.025229][ T4199] team0: Port device team_slave_1 added [ 70.039893][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.047195][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.074719][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.110600][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.118251][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.145674][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.186980][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.194293][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.220794][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.245348][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.252518][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.280192][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.296552][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.304050][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.330836][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.356556][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.364448][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.391456][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.415737][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.423462][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.430677][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.438906][ T4185] Cannot create hsr debugfs directory [ 70.448614][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.455604][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.460765][ T3939] Bluetooth: hci0: command 0x0409 tx timeout [ 70.470294][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.476029][ T3939] Bluetooth: hci1: command 0x0409 tx timeout [ 70.484974][ T4186] Cannot create hsr debugfs directory [ 70.537897][ T3939] Bluetooth: hci4: command 0x0409 tx timeout [ 70.544210][ T3939] Bluetooth: hci3: command 0x0409 tx timeout [ 70.557602][ T3939] Bluetooth: hci2: command 0x0409 tx timeout [ 70.598365][ T4199] device hsr_slave_0 entered promiscuous mode [ 70.605697][ T4199] device hsr_slave_1 entered promiscuous mode [ 70.613074][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.622600][ T4199] Cannot create hsr debugfs directory [ 70.651042][ T4197] device hsr_slave_0 entered promiscuous mode [ 70.659275][ T4197] device hsr_slave_1 entered promiscuous mode [ 70.666341][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.674501][ T4197] Cannot create hsr debugfs directory [ 70.978076][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.993324][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.010218][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.024603][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.066713][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.077300][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.099509][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.120947][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.153658][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.186092][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.196655][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.208157][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.273777][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.284312][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.304726][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.316719][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.404840][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.432184][ T4199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.442928][ T4199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.456325][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.481617][ T4199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.505252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.515767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.530800][ T4199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.549711][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.558527][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.568749][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.581999][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.589506][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.610628][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.631610][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.641638][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.652443][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.660434][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.671306][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.681833][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.691558][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.699240][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.710592][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.744198][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.752732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.765615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.775152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.784804][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.793439][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.802987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.812488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.823343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.833372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.841227][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.850363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.860111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.869158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.878371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.899431][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.910307][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.924345][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.934899][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.964266][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.974691][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.985068][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.994304][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.003322][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.012708][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.028578][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.040746][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.056132][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.070092][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.084777][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.093853][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.103347][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.123910][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.133297][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.159700][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.170660][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.180678][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.188092][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.204638][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.213811][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.229933][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.243875][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.257286][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.285407][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.299657][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.315740][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.325862][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.335842][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.345119][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.352538][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.387130][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.406791][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.423638][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.434300][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.455590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.465978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.509734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.525764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.536436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.552591][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 72.559844][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 72.561009][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.573092][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.588631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.597977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.606989][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.614437][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.618521][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 72.634670][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 72.641090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.644402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.650509][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 72.665731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.674987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.684416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.694125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.703142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.715029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.725481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.734865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.748818][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.761690][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.796993][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.812634][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.825549][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.839955][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.847845][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.861366][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.872960][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.885306][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.909637][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.917229][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.931151][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.965706][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.983481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.996030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.011889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.025159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.036002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.051042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.064285][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.072160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.087081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.096950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.142190][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.153895][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.166141][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.175943][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.186205][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.195247][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.205075][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.214433][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.223125][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.247463][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.258708][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.282414][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.294182][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.308189][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.328775][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.350971][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.367094][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.393486][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.406506][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.425926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.440487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.455934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.470739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.480292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.490614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.501586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.511616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.521597][ T4197] device veth0_vlan entered promiscuous mode [ 73.539687][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.561862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.579296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.613353][ T4197] device veth1_vlan entered promiscuous mode [ 73.663557][ T4194] device veth0_vlan entered promiscuous mode [ 73.672309][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.681294][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.691100][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.700093][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.709729][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.722031][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.734889][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.750492][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.778680][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.789594][ T4194] device veth1_vlan entered promiscuous mode [ 73.804123][ T4197] device veth0_macvtap entered promiscuous mode [ 73.818302][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.831807][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.841757][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.869616][ T4197] device veth1_macvtap entered promiscuous mode [ 73.894650][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.919972][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.928814][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.949677][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.964150][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.992232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.003044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.024151][ T4199] device veth0_vlan entered promiscuous mode [ 74.034031][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.044790][ T4194] device veth0_macvtap entered promiscuous mode [ 74.059595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.080883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.090008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.099643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.108901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.149381][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.159944][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.180069][ T4199] device veth1_vlan entered promiscuous mode [ 74.188414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.202320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.211129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.220630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.229459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.237184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.247674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.260263][ T4194] device veth1_macvtap entered promiscuous mode [ 74.308628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.317087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.330580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.349036][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.358695][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.368858][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.378538][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.394622][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.407502][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.428232][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.456419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.466874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.477090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.486364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.503398][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.514892][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.527832][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.545972][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.557143][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.566687][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.576651][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.594918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.604467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.613126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.619859][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 74.628256][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 74.635700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.645751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.655241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.665574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.675543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.687037][ T4199] device veth0_macvtap entered promiscuous mode [ 74.698241][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 74.704556][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 74.711302][ T4186] device veth0_vlan entered promiscuous mode [ 74.724712][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 74.758668][ T4199] device veth1_macvtap entered promiscuous mode [ 74.808046][ T4186] device veth1_vlan entered promiscuous mode [ 74.865075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.878004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.886242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.895443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.904825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.915452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.923988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.939623][ T4185] device veth0_vlan entered promiscuous mode [ 74.943230][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.958421][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.990983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.000060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.015150][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.027538][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.037930][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.048928][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.060846][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.073718][ T4185] device veth1_vlan entered promiscuous mode [ 75.099915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.111541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.124404][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.137452][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.148210][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.159071][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.171993][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.193843][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.204895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.213949][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.225062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.236573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.258340][ T4199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.268348][ T4199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.279868][ T4199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288995][ T4199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.304709][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.324169][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.333133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.352342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.363023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.382592][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.394953][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.396108][ T4186] device veth0_macvtap entered promiscuous mode [ 75.415214][ T4186] device veth1_macvtap entered promiscuous mode [ 75.441388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.453883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.471916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.492556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.504822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.588848][ T4185] device veth0_macvtap entered promiscuous mode [ 75.623122][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.634350][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.676083][ T4270] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.690049][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.708652][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723794][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.735286][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.745880][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.757279][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.770390][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.780107][ T4185] device veth1_macvtap entered promiscuous mode [ 75.795287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.829955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.858728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.869875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.885786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.062808][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.090389][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.100755][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.111738][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.122133][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.134003][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.162666][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.499433][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.635397][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.715005][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.734483][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872975][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 76.884102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.907842][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 76.914355][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 76.922121][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 76.928605][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 76.950106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.005825][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.021859][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.036617][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.053787][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.064151][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.082019][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.095182][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.111160][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.126036][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.213065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.231061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.332924][ T4294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.487340][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.986214][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.998905][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.013007][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.025564][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.042768][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.055146][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.070322][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.092001][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.119805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.134994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.154127][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.187502][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.220944][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.236443][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.245837][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.257620][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.282413][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.426667][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.486355][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.524264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.578944][ T4302] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.688185][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.696414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.719731][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.728663][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.762317][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.791473][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.865729][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.894954][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.917197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.493922][ T4315] mmap: syz.1.2 (4315) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 79.657758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.667051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.676054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 79.685239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.694346][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.703649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.713278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.722387][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.731848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.741140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.185687][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.464333][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 80.598091][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.683121][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.817503][ T13] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 80.827658][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.874555][ T4229] hid-generic 0005:00A3:5508.0001: item fetching failed at offset 0/1 [ 80.887017][ T4229] hid-generic: probe of 0005:00A3:5508.0001 failed with error -22 [ 80.952055][ T13] usb 5-1: config 0 descriptor?? [ 81.161639][ T4325] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 81.329711][ T4330] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.537002][ T4341] netlink: 'syz.3.22': attribute type 6 has an invalid length. [ 81.719601][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.726993][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.734198][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.749222][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.757115][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.764842][ T13] belkin 0003:1020:0006.0002: unknown main item tag 0x0 [ 81.780535][ T13] belkin 0003:1020:0006.0002: unexpected long global item [ 81.791295][ T13] belkin 0003:1020:0006.0002: parse failed [ 81.811056][ T13] belkin: probe of 0003:1020:0006.0002 failed with error -22 [ 82.267981][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.727085][ T4268] usb 5-1: USB disconnect, device number 2 [ 82.892898][ T13] usb 1-1: device descriptor read/64, error -71 [ 83.539095][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.784276][ T13] usb 1-1: device descriptor read/64, error -71 [ 84.687672][ T13] usb usb1-port1: attempt power cycle [ 86.421788][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 87.663057][ T1111] cfg80211: failed to load regulatory.db [ 88.087703][ T4418] mkiss: ax0: crc mode is auto. [ 89.347746][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.848299][ T1111] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.906097][ T1111] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 90.093877][ T1111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.205912][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 90.397704][ T1111] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.427625][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.453768][ T1111] usb 5-1: Product: syz [ 90.464044][ T1111] usb 5-1: Manufacturer: syz [ 90.514193][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 90.523400][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 90.532008][ T1111] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 90.633293][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.730592][ T3939] usb 5-1: USB disconnect, device number 3 [ 91.022803][ T4454] vivid-008: disconnect [ 91.047912][ T13] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.073080][ T13] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.172989][ T13] usb 4-1: config 220 has no interface number 2 [ 91.295908][ T13] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.541451][ T13] usb 4-1: config 220 interface 0 has no altsetting 0 [ 91.662003][ T13] usb 4-1: config 220 interface 76 has no altsetting 0 [ 91.806693][ T4449] vivid-008: reconnect [ 91.856928][ T13] usb 4-1: config 220 interface 1 has no altsetting 0 [ 92.073817][ T13] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.103066][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.114173][ T13] usb 4-1: Product: syz [ 92.119995][ T13] usb 4-1: Manufacturer: syz [ 92.125357][ T13] usb 4-1: SerialNumber: syz [ 92.425242][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 92.468208][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 92.665067][ T3939] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.673792][ T13] usb 4-1: can't set config #220, error -71 [ 92.681281][ T13] usb 4-1: USB disconnect, device number 2 [ 92.917549][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.137502][ T3939] usb 5-1: device descriptor read/64, error -71 [ 93.197728][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 93.337806][ T1111] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 93.356680][ T1111] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.405009][ T1111] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.440802][ T1111] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.457516][ T3939] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.482561][ T1111] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.770929][ T1111] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.797423][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.998247][ T3939] usb 5-1: Using ep0 maxpacket: 32 [ 94.402411][ T4491] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 95.837369][ C0] sched: RT throttling activated [ 95.843217][ T1111] usb 2-1: usb_control_msg returned -32 [ 95.854302][ T1111] usbtmc 2-1:16.0: can't read capabilities [ 96.033345][ T3939] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 96.041921][ T3939] usb 5-1: can't read configurations, error -71 [ 96.050166][ T3939] usb usb5-port1: attempt power cycle [ 98.850480][ T4227] usb 2-1: USB disconnect, device number 2 [ 99.552680][ T4526] netlink: 'syz.4.82': attribute type 6 has an invalid length. [ 99.813812][ T4534] tmpfs: Unknown parameter 'grpquota' [ 101.047579][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.575186][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 101.827522][ T13] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 101.835892][ T13] usb 3-1: config 0 has no interface number 0 [ 102.081673][ T13] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.207502][ T13] usb 3-1: config 0 interface 85 has no altsetting 0 [ 103.297660][ T13] usb 3-1: string descriptor 0 read error: -71 [ 103.330742][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 103.386789][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.484397][ T13] usb 3-1: config 0 descriptor?? [ 104.077693][ T13] usb 3-1: can't set config #0, error -71 [ 104.092744][ T13] usb 3-1: USB disconnect, device number 2 [ 104.178591][ T4557] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.187332][ T4557] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.616660][ T4228] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.899395][ T4584] tmpfs: Unknown parameter 'grpquota' [ 106.207756][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.228587][ T4228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.577572][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.968068][ T21] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.016024][ T21] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 107.115458][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.196216][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 107.448294][ T21] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.491751][ T21] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.593387][ T21] usb 3-1: Product: syz [ 107.634143][ T21] usb 3-1: Manufacturer: syz [ 107.639636][ T4228] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.673831][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.707554][ T4228] usb 1-1: can't set config #1, error -71 [ 107.715859][ T4228] usb 1-1: USB disconnect, device number 5 [ 107.885394][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 107.891466][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 107.896937][ T21] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 108.084891][ T4228] usb 3-1: USB disconnect, device number 3 [ 108.767540][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.137755][ T4228] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.193494][ T4228] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 109.244134][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.284449][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 109.500545][ T4228] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.550581][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.645438][ T4228] usb 3-1: Product: syz [ 109.662593][ T4228] usb 3-1: Manufacturer: syz [ 109.727647][ T4228] usb 3-1: can't set config #1, error -71 [ 109.757874][ T4228] usb 3-1: USB disconnect, device number 4 [ 110.212048][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.127486][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 113.067689][ T13] usb 1-1: device descriptor read/all, error -71 [ 113.076509][ T23] Bluetooth: hci4: command 0x0407 tx timeout [ 113.154986][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 113.216493][ T4647] process 'syz.0.116' launched './file0' with NULL argv: empty string added [ 113.397479][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.457579][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 114.716911][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.730235][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.567582][ T4228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.585970][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.623676][ T4228] usb 3-1: Product: syz [ 115.640569][ T4228] usb 3-1: Manufacturer: syz [ 115.659966][ T4228] usb 3-1: SerialNumber: syz [ 116.007693][ T4228] usb 3-1: 0:2 : does not exist [ 116.047620][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.109516][ T4228] usb 3-1: USB disconnect, device number 5 [ 116.417645][ T13] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 116.443686][ T13] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 116.493195][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.559317][ T13] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 117.114617][ T4671] udc-core: couldn't find an available UDC or it's busy [ 117.133873][ T4671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.221208][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 119.281225][ T13] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 119.290881][ T13] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 119.301509][ T13] usb 1-1: USB disconnect, device number 8 [ 122.507700][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.877910][ T13] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 122.966463][ T13] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 123.177590][ T13] usb 1-1: config 171 has no interface number 0 [ 123.203495][ T4724] CIFS: iocharset name too long [ 123.217661][ T13] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 123.284989][ T13] usb 1-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 123.568375][ T13] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 123.613097][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.647151][ T13] usb 1-1: Product: syz [ 123.661330][ T13] usb 1-1: Manufacturer: syz [ 123.673309][ T13] usb 1-1: SerialNumber: syz [ 124.341569][ T4735] loop2: detected capacity change from 0 to 1024 [ 124.851951][ T4713] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.237541][ T13] ath6kl: Failed to submit usb control message: -71 [ 125.245757][ T13] ath6kl: unable to send the bmi data to the device: -71 [ 125.285152][ T13] ath6kl: Unable to send get target info: -71 [ 126.395548][ T13] ath6kl: Failed to init ath6kl core: -71 [ 126.460236][ T13] ath6kl_usb: probe of 1-1:171.109 failed with error -71 [ 126.494912][ T13] usb 1-1: USB disconnect, device number 9 [ 126.517882][ T4735] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.535419][ T4735] EXT4-fs (loop2): inline encryption not supported [ 126.613686][ T4735] EXT4-fs: error -4 creating inode table initialization thread [ 126.675780][ T4735] EXT4-fs (loop2): mount failed [ 128.897608][ T4766] syz.4.151 (4766) used greatest stack depth: 21104 bytes left [ 129.668876][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.807694][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.141002][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.248143][ T4232] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.285037][ T21] usb 5-1: config 0 has no interfaces? [ 130.321957][ T4232] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 130.763056][ T4788] loop1: detected capacity change from 0 to 1024 [ 130.821228][ T4788] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.856504][ T4788] EXT4-fs (loop1): inline encryption not supported [ 130.938188][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 131.034996][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.044208][ T4232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 131.068240][ T21] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 131.086681][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.095513][ T21] usb 5-1: Product: syz [ 131.100660][ T21] usb 5-1: Manufacturer: syz [ 131.105486][ T21] usb 5-1: SerialNumber: syz [ 131.114144][ T21] usb 5-1: config 0 descriptor?? [ 131.308215][ T4232] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.317616][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.325998][ T4232] usb 4-1: Product: syz [ 131.330357][ T4232] usb 4-1: Manufacturer: syz [ 131.388587][ T4232] cdc_wdm 4-1:1.0: skipping garbage [ 131.393855][ T4232] cdc_wdm 4-1:1.0: skipping garbage [ 131.411709][ T4232] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 131.652430][ T4232] usb 4-1: USB disconnect, device number 3 [ 131.667455][ T4228] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.097802][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.197853][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.214843][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.225695][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.245528][ T4228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.265657][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.291635][ T4228] usb 1-1: config 0 descriptor?? [ 132.407748][ T23] usb 5-1: USB disconnect, device number 7 [ 132.477999][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.495267][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.520374][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.542962][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.555037][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.618934][ T13] usb 3-1: config 0 descriptor?? [ 132.772403][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 132.846530][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.904084][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.025055][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032081][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.737733][ T4232] usb 4-1: unable to read config index 0 descriptor/all [ 133.784658][ T4232] usb 4-1: can't read configurations, error -71 [ 133.809635][ T13] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 133.820089][ T13] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.950093][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 134.964900][ T13] usb 3-1: USB disconnect, device number 6 [ 135.834139][ T4268] usb 1-1: USB disconnect, device number 10 [ 135.887101][ T4846] loop0: detected capacity change from 0 to 1024 [ 135.950040][ T4846] EXT4-fs (loop0): Test dummy encryption mode enabled [ 136.017484][ T4846] EXT4-fs (loop0): inline encryption not supported [ 136.072779][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 136.167564][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.437654][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 137.237711][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.317526][ T13] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.346507][ T13] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.377421][ T13] usb 3-1: config 1 interface 0 has no altsetting 0 [ 137.537851][ T13] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 137.547051][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.562611][ T13] usb 3-1: Product: syz [ 137.566853][ T13] usb 3-1: Manufacturer: syz [ 137.572973][ T13] usb 3-1: SerialNumber: syz [ 137.691266][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 137.716581][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 137.938503][ T13] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count [ 138.038861][ T13] usbhid 3-1:1.0: can't add hid device: -71 [ 138.046517][ T13] usbhid: probe of 3-1:1.0 failed with error -71 [ 138.107205][ T13] usb 3-1: USB disconnect, device number 7 [ 138.397693][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.951884][ T4232] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.987518][ T4232] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 139.053705][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.087793][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 139.326982][ T4232] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.337154][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.345801][ T4232] usb 2-1: Product: syz [ 139.350504][ T4232] usb 2-1: Manufacturer: syz [ 139.398949][ T4232] cdc_wdm 2-1:1.0: skipping garbage [ 139.404333][ T4232] cdc_wdm 2-1:1.0: skipping garbage [ 139.533365][ T4232] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 139.832578][ T4889] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 139.895684][ T4889] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.192'. [ 140.023532][ T4232] usb 2-1: USB disconnect, device number 3 [ 140.761748][ T4900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.467925][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.570929][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.717437][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 141.852879][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 141.945865][ T23] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 142.043833][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.233509][ T23] usb 4-1: config 0 descriptor?? [ 142.570237][ T4268] usb 4-1: USB disconnect, device number 6 [ 143.121234][ T4928] netlink: 220 bytes leftover after parsing attributes in process `syz.0.207'. [ 143.172085][ T4928] netlink: 220 bytes leftover after parsing attributes in process `syz.0.207'. [ 143.216057][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 145.539600][ T4977] netlink: 14 bytes leftover after parsing attributes in process `syz.3.224'. [ 146.349511][ T4977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.422915][ T4977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.466902][ T4977] bond0 (unregistering): Released all slaves [ 146.549460][ T4987] sp0: Synchronizing with TNC [ 150.289022][ T5035] netlink: 'syz.3.243': attribute type 13 has an invalid length. [ 150.469199][ T5039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 150.613218][ T5047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.246'. [ 152.647336][ C1] hrtimer: interrupt took 57739 ns [ 152.959248][ T5067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.255'. [ 153.142887][ T5047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.432389][ T5047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.464312][ T5047] bond0 (unregistering): Released all slaves [ 155.574417][ T23] kernel write not supported for file /bluetooth/6lowpan_control (pid: 23 comm: kworker/1:1) [ 156.297247][ T1326] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.330352][ T5108] overlayfs: failed to resolve './file0': -2 [ 156.626678][ T5115] netlink: 14 bytes leftover after parsing attributes in process `syz.0.271'. [ 156.667504][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 156.798039][ T1326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.000504][ T1326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.121335][ T1326] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 157.248559][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.711566][ T1326] usb 2-1: config 0 descriptor?? [ 158.767628][ T1326] usb 2-1: can't set config #0, error -71 [ 158.962521][ T1326] usb 2-1: USB disconnect, device number 5 [ 159.025004][ T5115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.106249][ T5115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.187869][ T5115] bond0 (unregistering): Released all slaves [ 160.797875][ T4268] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.165081][ T4268] usb 4-1: Using ep0 maxpacket: 16 [ 161.417609][ T4268] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 161.426725][ T4268] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.438778][ T4268] usb 4-1: config 1 has no interface number 0 [ 161.445366][ T4268] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.476100][ T4268] usb 4-1: config 1 interface 105 has no altsetting 0 [ 161.647983][ T4268] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 161.667661][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 161.676359][ T4268] usb 4-1: Product: syz [ 161.688369][ T4268] usb 4-1: Manufacturer: syz [ 161.693445][ T4268] usb 4-1: SerialNumber: syz [ 162.911556][ T4268] aqc111: probe of 4-1:1.105 failed with error -22 [ 163.187591][ T4268] usb 4-1: USB disconnect, device number 7 [ 165.648031][ T5191] netlink: 14 bytes leftover after parsing attributes in process `syz.3.296'. [ 168.155390][ T5202] netlink: 14 bytes leftover after parsing attributes in process `syz.1.308'. [ 168.717041][ T1111] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 168.872055][ T1111] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.314505][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.197537][ T1326] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.349702][ T154] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 170.798073][ T1326] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 170.829035][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.948254][ T1326] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 170.973580][ T1326] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 171.249522][ T1326] usb 5-1: Manufacturer: syz [ 171.442626][ T1326] usb 5-1: config 0 descriptor?? [ 171.638596][ T1326] rc_core: IR keymap rc-hauppauge not found [ 171.661629][ T1326] Registered IR keymap rc-empty [ 171.701984][ T1326] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 171.716239][ T1326] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 171.937612][ T5263] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 172.138612][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 172.215255][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 172.557459][ C1] igorplugusb 5-1:0.0: receive overflow, at least 11 lost [ 172.566475][ T5260] rc rc0: timing event after reset should be pulse [ 172.620254][ T4264] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.718636][ T13] usb 3-1: device descriptor read/64, error -71 [ 172.784825][ T3939] usb 5-1: USB disconnect, device number 8 [ 173.007772][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.874465][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.320'. [ 173.892395][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 173.905025][ T5279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'. [ 173.924554][ T5279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'. [ 174.177506][ T13] usb 3-1: unable to read config index 0 descriptor/all [ 174.184645][ T13] usb 3-1: can't read configurations, error -71 [ 174.197773][ T13] usb usb3-port1: attempt power cycle [ 174.644224][ T4268] Bluetooth: hci5: command 0x1001 tx timeout [ 174.651100][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 174.697491][ T4268] Bluetooth: hci6: command 0x1003 tx timeout [ 174.706889][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 176.790632][ T1326] Bluetooth: hci5: command 0x1009 tx timeout [ 176.797770][ T1326] Bluetooth: hci6: command 0x1001 tx timeout [ 176.804100][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 178.354267][ T5343] binder: 5342:5343 ioctl c0306201 0 returned -14 [ 179.509757][ T23] Bluetooth: hci6: command 0x1009 tx timeout [ 179.597507][ T1326] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 180.492287][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 180.646742][ T5375] syz.4.353 uses obsolete (PF_INET,SOCK_PACKET) [ 180.738595][ T1326] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 180.789475][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.944063][ T1326] usb 3-1: config 0 descriptor?? [ 181.026844][ T1326] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 181.387795][ T1326] usb 3-1: Detected FT232BM [ 181.637996][ T1326] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 181.758227][ T1326] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.133927][ T1326] usb 3-1: USB disconnect, device number 11 [ 182.189131][ T1326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.253046][ T1326] ftdi_sio 3-1:0.0: device disconnected [ 182.811276][ T23] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 182.974651][ T5404] kvm: pic: level sensitive irq not supported [ 182.979106][ T5404] kvm: pic: level sensitive irq not supported [ 182.990172][ T5404] kvm: pic: non byte write [ 183.003123][ T5404] kvm: pic: non byte write [ 183.848373][ T23] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 183.867648][ T23] usb 1-1: config 0 has no interface number 0 [ 183.896794][ T23] usb 1-1: config 0 interface 172 altsetting 0 has an invalid endpoint with address 0xC5, skipping [ 184.219464][ T23] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 184.235299][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.243953][ T23] usb 1-1: Product: syz [ 184.248703][ T23] usb 1-1: Manufacturer: syz [ 184.253801][ T23] usb 1-1: SerialNumber: syz [ 184.319766][ T23] usb 1-1: config 0 descriptor?? [ 184.479670][ T23] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 185.412083][ T23] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 185.687631][ T4228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.720405][ T13] usb 1-1: USB disconnect, device number 11 [ 186.729612][ T5472] vivid-008: disconnect [ 187.470592][ T5466] vivid-008: reconnect [ 187.637615][ T4228] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.658858][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.743950][ T4228] usb 4-1: config 0 has no interface number 0 [ 188.287645][ T4228] usb 4-1: string descriptor 0 read error: -71 [ 188.294147][ T4228] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 188.365653][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.751372][ T4228] usb 4-1: config 0 descriptor?? [ 189.775365][ T4228] usb 4-1: can't set config #0, error -71 [ 189.798862][ T4228] usb 4-1: USB disconnect, device number 8 [ 191.872452][ T5506] tipc: Started in network mode [ 191.906837][ T5506] tipc: Node identity 3adf63ad390c, cluster identity 4711 [ 191.992256][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.999211][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 192.006141][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 192.027720][ T5506] tipc: Enabled bearer , priority 0 [ 192.057441][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 192.101718][ T5506] tipc: Resetting bearer [ 192.136666][ T5500] tipc: Disabling bearer [ 192.757437][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.567943][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.625202][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.657579][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.993633][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.007600][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.019872][ T13] usb 2-1: config 0 descriptor?? [ 194.488645][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.495567][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617542][ T5542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.403'. [ 195.055934][ T13] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 195.182428][ T13] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 195.747693][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.766765][ T5553] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 195.775446][ T5553] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 196.003672][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 196.567474][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 196.597682][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.026594][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.043717][ T13] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 197.076346][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.093135][ T13] usb 5-1: config 0 descriptor?? [ 197.143771][ T5572] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 197.397662][ T3939] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 197.681542][ T13] hid (null): bogus close delimiter [ 197.893795][ T4228] usb 2-1: USB disconnect, device number 6 [ 197.908144][ T3939] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.492755][ T13] hid-generic 0003:057E:200E.0007: bogus close delimiter [ 198.521623][ T3939] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 198.546652][ T13] hid-generic 0003:057E:200E.0007: item 0 2 2 10 parsing failed [ 198.606056][ T3939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.693383][ T13] hid-generic: probe of 0003:057E:200E.0007 failed with error -22 [ 198.738012][ T3939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 198.761174][ T13] usb 5-1: USB disconnect, device number 9 [ 198.770366][ T5572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.792801][ T5577] device bond1 entered promiscuous mode [ 199.208925][ T3939] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.700284][ T3939] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.709413][ T3939] usb 1-1: Product: syz [ 199.714859][ T3939] usb 1-1: Manufacturer: syz [ 199.761454][ T3939] cdc_wdm 1-1:1.0: skipping garbage [ 199.782214][ T3939] cdc_wdm 1-1:1.0: skipping garbage [ 199.791185][ T3939] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 200.017502][ T3939] usb 1-1: USB disconnect, device number 12 [ 200.517912][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 200.998663][ T21] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.009540][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.103278][ T21] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.137615][ T21] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.155856][ T21] usb 3-1: Manufacturer: syz [ 201.181274][ T21] usb 3-1: config 0 descriptor?? [ 201.187681][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.320998][ T21] rc_core: IR keymap rc-hauppauge not found [ 201.341572][ T21] Registered IR keymap rc-empty [ 201.351179][ T21] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.390156][ T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 201.557598][ T3939] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.727476][ C1] igorplugusb 3-1:0.0: receive overflow, at least 11 lost [ 201.807490][ T13] usb 1-1: device not accepting address 13, error -71 [ 201.947178][ T21] usb 3-1: USB disconnect, device number 12 [ 202.030847][ T3939] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 202.595832][ T3939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.624564][ T3939] usb 5-1: config 0 has no interfaces? [ 202.797777][ T3939] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 202.939122][ T3939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 203.133146][ T3939] usb 5-1: Product: syz [ 203.138086][ T3939] usb 5-1: Manufacturer: syz [ 203.143709][ T3939] usb 5-1: SerialNumber: syz [ 203.162091][ T3939] usb 5-1: config 0 descriptor?? [ 203.989801][ T3939] usb 5-1: USB disconnect, device number 10 [ 206.562578][ T5669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.441'. [ 209.042895][ T1108] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 209.240731][ T5683] vivid-008: disconnect [ 209.349296][ T5674] vivid-008: reconnect [ 212.443165][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.877751][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.898478][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.915573][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.936599][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.947152][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.965300][ T13] usb 5-1: config 0 descriptor?? [ 213.541259][ T13] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 213.556674][ T13] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.786644][ T5719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.454'. [ 218.309733][ T5755] vivid-008: disconnect [ 218.487647][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.798390][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 218.922161][ T5750] vivid-008: reconnect [ 219.353987][ T5760] netlink: 68 bytes leftover after parsing attributes in process `syz.1.467'. [ 219.366211][ T5623] usb 5-1: USB disconnect, device number 12 [ 219.596355][ T13] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 219.903488][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.915423][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.925609][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 219.934903][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.998750][ T13] usb 4-1: config 0 descriptor?? [ 220.914118][ T13] logitech 0003:046D:C29C.0009: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 221.176650][ T5791] loop4: detected capacity change from 0 to 1024 [ 221.213422][ T5791] EXT4-fs (loop4): Test dummy encryption mode enabled [ 221.239931][ T5791] EXT4-fs (loop4): inline encryption not supported [ 221.255012][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 221.327790][ T13] logitech 0003:046D:C29C.0009: no inputs found [ 221.382380][ T13] usb 4-1: USB disconnect, device number 9 [ 221.535012][ T5795] fido_id[5795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 221.537680][ T4266] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 222.097653][ T4266] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 222.117424][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.136263][ T4266] usb 3-1: Product: syz [ 222.141190][ T4266] usb 3-1: Manufacturer: syz [ 222.145834][ T4266] usb 3-1: SerialNumber: syz [ 222.347429][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.537743][ T5623] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 222.732699][ T4266] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 223.594147][ T4227] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.606276][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.619206][ T4227] usb 4-1: config 0 descriptor?? [ 223.627132][ T1108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 223.638473][ T1108] Bluetooth: hci1: Injecting HCI hardware error event [ 223.648034][ T5623] usb 1-1: Using ep0 maxpacket: 8 [ 223.659159][ T4227] cp210x 4-1:0.0: cp210x converter detected [ 223.665655][ T4193] Bluetooth: hci1: hardware error 0x00 [ 223.926353][ T5817] netlink: 68 bytes leftover after parsing attributes in process `syz.1.483'. [ 224.018221][ T5623] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.128261][ T5623] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 224.167139][ T5623] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 224.232409][ T5623] usb 1-1: config 4 has no interface number 0 [ 224.278395][ T4227] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.343899][ T4227] usb 4-1: cp210x converter now attached to ttyUSB0 [ 224.448412][ T5623] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 224.488501][ T4266] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 224.504563][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.516695][ T4266] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 224.527694][ T5623] usb 1-1: Product: syz [ 224.532399][ T5623] usb 1-1: Manufacturer: syz [ 224.555301][ T5623] usb 1-1: SerialNumber: syz [ 224.571257][ T13] usb 4-1: USB disconnect, device number 10 [ 224.659062][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.662254][ T4266] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 224.677089][ T4266] lan78xx: probe of 3-1:1.0 failed with error -71 [ 224.721439][ T4266] usb 3-1: USB disconnect, device number 13 [ 224.744003][ T13] cp210x 4-1:0.0: device disconnected [ 225.240992][ T5623] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 225.249619][ T5623] usb 1-1: No valid video chain found. [ 225.291297][ T5623] usb 1-1: USB disconnect, device number 15 [ 226.376778][ T5854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.495'. [ 228.223631][ T5881] Malformed UNC in devname [ 228.223631][ T5881] [ 228.230938][ T5881] CIFS: VFS: Malformed UNC in devname [ 234.687469][ T4227] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 235.127950][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.187832][ T4227] usb 3-1: not running at top speed; connect to a high speed hub [ 235.367663][ T4227] usb 3-1: config 4 has an invalid interface number: 47 but max is 0 [ 235.386129][ T4227] usb 3-1: config 4 has no interface number 0 [ 235.403969][ T4227] usb 3-1: config 4 interface 47 has no altsetting 0 [ 235.567508][ T4227] usb 3-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=cf.e5 [ 235.577991][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.586821][ T4227] usb 3-1: Product: syz [ 235.591732][ T4227] usb 3-1: Manufacturer: syz [ 235.597129][ T4227] usb 3-1: SerialNumber: syz [ 235.973802][ T4227] snd-usb-caiaq 3-1:4.47: can't set alt interface. [ 235.986890][ T4227] usb 3-1: unable to init card! (ret=-5) [ 236.126392][ T4227] snd-usb-caiaq: probe of 3-1:4.47 failed with error -5 [ 236.159159][ T4227] usb 3-1: USB disconnect, device number 14 [ 236.448030][ T5952] netlink: 68 bytes leftover after parsing attributes in process `syz.3.523'. [ 237.999894][ T5964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.008375][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 240.784160][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.793351][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.848219][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'. [ 241.943696][ T6010] netlink: 68 bytes leftover after parsing attributes in process `syz.1.536'. [ 242.655605][ T6012] Trying to write to read-only block-device nullb0 [ 244.199207][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.369346][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.526556][ T5964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.549823][ T5964] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.597788][ T5964] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.655223][ T5964] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.071035][ T5964] device bond1 left promiscuous mode [ 246.182235][ T6022] netlink: 14 bytes leftover after parsing attributes in process `syz.3.540'. [ 246.382197][ T5964] syz.2.527 (5964) used greatest stack depth: 19792 bytes left [ 250.954168][ T6109] netlink: 14 bytes leftover after parsing attributes in process `syz.2.560'. [ 251.014331][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.006579][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.038783][ T6109] bond0 (unregistering): Released all slaves [ 254.404752][ T6014] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 254.458373][ T26] audit: type=1107 audit(1773765441.731:2): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹' [ 255.678480][ T6157] device batadv_slave_1 entered promiscuous mode [ 255.708599][ T6157] device batadv_slave_1 left promiscuous mode [ 255.767677][ T6014] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.787550][ T6162] netlink: 14 bytes leftover after parsing attributes in process `syz.0.583'. [ 255.814264][ T6014] usb 4-1: config 0 has no interface number 0 [ 255.865023][ T6014] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 255.900189][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.906879][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.971302][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.067325][ T6014] usb 4-1: config 0 descriptor?? [ 256.577522][ T6014] usb 4-1: can't set config #0, error -71 [ 256.606227][ T6014] usb 4-1: USB disconnect, device number 11 [ 257.758009][ T6184] ======================================================= [ 257.758009][ T6184] WARNING: The mand mount option has been deprecated and [ 257.758009][ T6184] and is ignored by this kernel. Remove the mand [ 257.758009][ T6184] option from the mount to silence this warning. [ 257.758009][ T6184] ======================================================= [ 257.797080][ T6184] overlayfs: conflicting lowerdir path [ 258.260930][ T5994] Bluetooth: hci5: command 0x1003 tx timeout [ 258.267766][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 260.297837][ T6014] Bluetooth: hci5: command 0x1001 tx timeout [ 260.304342][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 262.619474][ T5999] Bluetooth: hci5: command 0x1009 tx timeout [ 263.164345][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 264.337580][ T6230] delete_channel: no stack [ 265.406674][ T26] audit: type=1326 audit(1773765452.681:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 265.521955][ T6263] netlink: 14 bytes leftover after parsing attributes in process `syz.3.616'. [ 265.592360][ T26] audit: type=1326 audit(1773765452.721:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 265.875128][ T26] audit: type=1326 audit(1773765452.721:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.279035][ T26] audit: type=1326 audit(1773765452.721:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.301801][ T26] audit: type=1326 audit(1773765452.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.332254][ T26] audit: type=1326 audit(1773765452.721:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.355487][ T26] audit: type=1326 audit(1773765452.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.378631][ T26] audit: type=1326 audit(1773765452.721:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb293c34799 code=0x7ffc0000 [ 266.407492][ T26] audit: type=1326 audit(1773765452.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb293bf4fce code=0x7ffc0000 [ 266.448704][ T26] audit: type=1326 audit(1773765452.811:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb293bf4fce code=0x7ffc0000 [ 266.692261][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 266.719361][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 266.729034][ T1326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.340062][ T1326] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.369690][ T1326] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 267.390705][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.667458][ T1326] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 267.709040][ T1326] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input11 [ 267.756912][ T1326] usb 2-1: USB disconnect, device number 7 [ 267.767391][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 272.369472][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 279.958238][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 279.998960][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.040496][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.298834][ T6404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.711182][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.667'. [ 281.664579][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.667'. [ 281.714685][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.667'. [ 281.739592][ T6430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.671'. [ 281.804274][ T6430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.671'. [ 281.815643][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.667'. [ 285.637571][ T1108] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 285.703673][ T6474] __nla_validate_parse: 6 callbacks suppressed [ 285.703692][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.687'. [ 285.727394][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.687'. [ 285.753281][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.687'. [ 285.766036][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.687'. [ 286.508163][ T1108] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.554006][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 287.351930][ T6493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.693'. [ 287.383199][ T1108] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 287.400045][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 287.425104][ T1108] usb 1-1: Product: syz [ 287.441405][ T1108] usb 1-1: Manufacturer: syz [ 287.446319][ T1108] usb 1-1: SerialNumber: syz [ 287.508229][ T1108] usb 1-1: config 0 descriptor?? [ 287.584762][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 287.595637][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 287.595637][ T1108] [ 287.797916][ T6499] netlink: 68 bytes leftover after parsing attributes in process `syz.1.692'. [ 287.877558][ T21] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.990855][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 287.990855][ T1108] [ 288.133298][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 288.250963][ T1108] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 288.327616][ T21] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 288.358689][ T21] usb 3-1: config 0 has no interface number 0 [ 288.370177][ T1108] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 288.396295][ T21] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.487532][ T6505] vivid-008: disconnect [ 289.197131][ T6502] vivid-008: reconnect [ 289.292153][ T1108] usb 1-1: USB disconnect, device number 16 [ 289.330418][ T6507] device syzkaller0 entered promiscuous mode [ 289.487798][ T21] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 289.511387][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.551881][ T21] usb 3-1: Product: syz [ 289.577132][ T21] usb 3-1: Manufacturer: syz [ 289.592770][ T21] usb 3-1: SerialNumber: syz [ 289.609596][ T21] usb 3-1: config 0 descriptor?? [ 289.697876][ T21] yurex 3-1:0.50: Could not find endpoints [ 289.835512][ T6514] netlink: 'syz.4.699': attribute type 33 has an invalid length. [ 289.868478][ T6514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.699'. [ 289.945278][ T21] usb 3-1: USB disconnect, device number 15 [ 290.024321][ T6516] tmpfs: Unknown parameter 'grpquota' [ 291.260773][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'. [ 291.340116][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 292.171994][ T6546] vivid-008: disconnect [ 292.885415][ T6540] vivid-008: reconnect [ 293.167237][ T6562] tmpfs: Unknown parameter 'grpquota' [ 294.632386][ T6583] vivid-008: disconnect [ 295.035712][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 295.273967][ T6578] vivid-008: reconnect [ 295.986661][ T6606] netlink: 68 bytes leftover after parsing attributes in process `syz.0.727'. [ 296.064146][ T6602] netlink: 14 bytes leftover after parsing attributes in process `syz.2.728'. [ 296.728448][ T6615] tmpfs: Unknown parameter 'grpquota' [ 296.799553][ T6620] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 296.808272][ T6620] device veth0_vlan left promiscuous mode [ 296.819306][ T6620] device veth0_vlan entered promiscuous mode [ 296.831426][ T6620] team0: Device veth0_vlan failed to register rx_handler [ 297.024688][ T6623] vivid-008: disconnect [ 297.642289][ T6616] vivid-008: reconnect [ 297.929069][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 298.030787][ T6633] netlink: 196 bytes leftover after parsing attributes in process `syz.1.737'. [ 298.063662][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.737'. [ 298.102147][ T6620] syz.2.735 (6620) used greatest stack depth: 19768 bytes left [ 298.521036][ T6651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.743'. [ 298.596948][ T6652] netlink: 14 bytes leftover after parsing attributes in process `syz.0.745'. [ 300.160429][ T6663] tmpfs: Unknown parameter 'grpquota' [ 301.491948][ T6689] device syzkaller0 entered promiscuous mode [ 301.689318][ T6698] netlink: 68 bytes leftover after parsing attributes in process `syz.1.757'. [ 301.875690][ T6696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.761'. [ 302.338435][ T6715] tmpfs: Unknown parameter 'grpquota' [ 303.511787][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 303.723938][ T6734] Zero length message leads to an empty skb [ 304.888442][ T6746] netlink: 68 bytes leftover after parsing attributes in process `syz.4.778'. [ 305.236415][ T6751] netlink: 14 bytes leftover after parsing attributes in process `syz.0.779'. [ 307.764864][ T6778] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 307.908896][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.106645][ T6778] xt_CT: No such helper "syz1" [ 308.168435][ T6791] device syzkaller0 entered promiscuous mode [ 308.190182][ T6793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.792'. [ 308.415125][ T6795] tipc: Started in network mode [ 308.468984][ T6795] tipc: Node identity ce77a0929ed, cluster identity 4711 [ 308.523383][ T6795] tipc: Enabled bearer , priority 0 [ 309.367798][ T6796] device syzkaller0 entered promiscuous mode [ 309.540930][ T6804] netlink: 14 bytes leftover after parsing attributes in process `syz.2.795'. [ 309.557679][ T5999] tipc: Node number set to 1353162898 [ 309.688636][ T6796] tipc: Resetting bearer [ 309.817826][ T6819] vivid-008: disconnect [ 309.823376][ T6815] vivid-008: reconnect [ 310.611578][ T6796] tipc: Disabling bearer [ 310.978577][ T6835] netlink: 68 bytes leftover after parsing attributes in process `syz.3.807'. [ 312.778468][ T6849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.811'. [ 312.858693][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.892018][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.952136][ T6849] bond0 (unregistering): Released all slaves [ 314.587883][ T6870] netlink: 68 bytes leftover after parsing attributes in process `syz.4.819'. [ 314.708441][ T6868] tipc: Started in network mode [ 314.709974][ T6875] xt_hashlimit: size too large, truncated to 1048576 [ 314.730228][ T6868] tipc: Node identity deaa7418485b, cluster identity 4711 [ 314.786388][ T6868] tipc: Enabled bearer , priority 0 [ 315.009380][ T6876] device syzkaller0 entered promiscuous mode [ 315.115931][ T6881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.188290][ T6881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.231145][ T6881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.274389][ T6881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.355028][ T6867] tipc: Resetting bearer [ 315.441952][ T6888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.824'. [ 315.541945][ T6867] tipc: Disabling bearer [ 315.683413][ T6891] netlink: 14 bytes leftover after parsing attributes in process `syz.0.825'. [ 317.076855][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 317.148486][ T6902] netlink: 68 bytes leftover after parsing attributes in process `syz.2.831'. [ 317.340699][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.347934][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.874981][ T6925] tmpfs: Unknown parameter 'grpquota' [ 319.902054][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 319.927985][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 320.125634][ T6936] netlink: 14 bytes leftover after parsing attributes in process `syz.3.839'. [ 321.768253][ T6945] netlink: 68 bytes leftover after parsing attributes in process `syz.3.843'. [ 321.977883][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 322.087590][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 323.343162][ T6965] tmpfs: Unknown parameter 'grpquota' [ 323.586617][ T6968] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 324.378868][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 324.466433][ T6974] device syzkaller1 entered promiscuous mode [ 324.576596][ T6978] device syzkaller0 entered promiscuous mode [ 324.599434][ T6980] bridge0: port 3(macsec0) entered blocking state [ 324.607130][ T6980] bridge0: port 3(macsec0) entered disabled state [ 324.662210][ T6980] device macsec0 entered promiscuous mode [ 324.678680][ T6980] bridge0: port 3(macsec0) entered blocking state [ 324.685814][ T6980] bridge0: port 3(macsec0) entered forwarding state [ 325.030034][ T6988] [ 325.032517][ T6988] ====================================================== [ 325.040138][ T6988] WARNING: possible circular locking dependency detected [ 325.047208][ T6988] syzkaller #0 Not tainted [ 325.051815][ T6988] ------------------------------------------------------ [ 325.058966][ T6988] syz.4.859/6988 is trying to acquire lock: [ 325.065009][ T6988] ffff88805e5b5120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 325.074471][ T6988] [ 325.074471][ T6988] but task is already holding lock: [ 325.081902][ T6988] ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 325.090236][ T6988] [ 325.090236][ T6988] which lock already depends on the new lock. [ 325.090236][ T6988] [ 325.100948][ T6988] [ 325.100948][ T6988] the existing dependency chain (in reverse order) is: [ 325.110229][ T6988] [ 325.110229][ T6988] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 325.117487][ T6988] __mutex_lock_common+0x1e3/0x2400 [ 325.123350][ T6988] mutex_lock_nested+0x17/0x20 [ 325.128823][ T6988] ax25_setsockopt+0x859/0xa60 [ 325.134772][ T6988] __sys_setsockopt+0x2bf/0x3d0 [ 325.140298][ T6988] __x64_sys_setsockopt+0xb1/0xc0 [ 325.145901][ T6988] do_syscall_64+0x4c/0xa0 [ 325.150882][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.157888][ T6988] [ 325.157888][ T6988] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 325.165673][ T6988] __lock_acquire+0x2c42/0x7d10 [ 325.171186][ T6988] lock_acquire+0x19e/0x400 [ 325.176356][ T6988] lock_sock_nested+0x44/0x100 [ 325.181774][ T6988] ax25_device_event+0x217/0x4f0 [ 325.187286][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 325.193221][ T6988] __dev_notify_flags+0x158/0x300 [ 325.199015][ T6988] dev_change_flags+0xe3/0x1a0 [ 325.204365][ T6988] dev_ifsioc+0x130/0xd50 [ 325.209375][ T6988] dev_ioctl+0x545/0xe30 [ 325.214348][ T6988] sock_do_ioctl+0x245/0x320 [ 325.219757][ T6988] sock_ioctl+0x4d2/0x710 [ 325.225030][ T6988] __se_sys_ioctl+0xfa/0x170 [ 325.230334][ T6988] do_syscall_64+0x4c/0xa0 [ 325.235567][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.242147][ T6988] [ 325.242147][ T6988] other info that might help us debug this: [ 325.242147][ T6988] [ 325.252513][ T6988] Possible unsafe locking scenario: [ 325.252513][ T6988] [ 325.260313][ T6988] CPU0 CPU1 [ 325.265720][ T6988] ---- ---- [ 325.271121][ T6988] lock(rtnl_mutex); [ 325.275229][ T6988] lock(sk_lock-AF_AX25); [ 325.282386][ T6988] lock(rtnl_mutex); [ 325.289040][ T6988] lock(sk_lock-AF_AX25); [ 325.293596][ T6988] [ 325.293596][ T6988] *** DEADLOCK *** [ 325.293596][ T6988] [ 325.302217][ T6988] 1 lock held by syz.4.859/6988: [ 325.307197][ T6988] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 325.316098][ T6988] [ 325.316098][ T6988] stack backtrace: [ 325.322370][ T6988] CPU: 1 PID: 6988 Comm: syz.4.859 Not tainted syzkaller #0 [ 325.329883][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.340416][ T6988] Call Trace: [ 325.343821][ T6988] [ 325.347065][ T6988] dump_stack_lvl+0x188/0x250 [ 325.351795][ T6988] ? load_image+0x400/0x400 [ 325.356634][ T6988] ? show_regs_print_info+0x20/0x20 [ 325.361985][ T6988] ? print_circular_bug+0x12b/0x1a0 [ 325.367418][ T6988] check_noncircular+0x296/0x330 [ 325.372507][ T6988] ? stack_trace_snprint+0xf0/0xf0 [ 325.377790][ T6988] ? add_chain_block+0x940/0x940 [ 325.382757][ T6988] ? lockdep_lock+0xf1/0x1f0 [ 325.387472][ T6988] ? mark_lock+0x94/0x320 [ 325.391949][ T6988] __lock_acquire+0x2c42/0x7d10 [ 325.396938][ T6988] ? mark_lock+0x94/0x320 [ 325.401988][ T6988] ? verify_lock_unused+0x140/0x140 [ 325.407407][ T6988] ? verify_lock_unused+0x140/0x140 [ 325.412653][ T6988] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 325.419115][ T6988] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 325.425442][ T6988] ? mark_lock+0x94/0x320 [ 325.430042][ T6988] lock_acquire+0x19e/0x400 [ 325.434677][ T6988] ? ax25_device_event+0x217/0x4f0 [ 325.440063][ T6988] ? lock_chain_count+0x20/0x20 [ 325.445073][ T6988] ? read_lock_is_recursive+0x10/0x10 [ 325.450610][ T6988] ? __local_bh_enable_ip+0x136/0x1c0 [ 325.456209][ T6988] ? lockdep_hardirqs_on+0x94/0x140 [ 325.461813][ T6988] ? __local_bh_enable_ip+0x136/0x1c0 [ 325.467593][ T6988] ? _local_bh_enable+0xa0/0xa0 [ 325.472689][ T6988] lock_sock_nested+0x44/0x100 [ 325.477627][ T6988] ? ax25_device_event+0x217/0x4f0 [ 325.483231][ T6988] ax25_device_event+0x217/0x4f0 [ 325.488286][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 325.493972][ T6988] __dev_notify_flags+0x158/0x300 [ 325.499097][ T6988] ? __dev_change_flags+0x6a0/0x6a0 [ 325.504437][ T6988] ? __dev_change_flags+0x4d0/0x6a0 [ 325.509860][ T6988] ? dev_get_flags+0x1c0/0x1c0 [ 325.514855][ T6988] ? __mutex_lock_common+0x465/0x2400 [ 325.520412][ T6988] dev_change_flags+0xe3/0x1a0 [ 325.525317][ T6988] dev_ifsioc+0x130/0xd50 [ 325.529700][ T6988] ? dev_ioctl+0xe30/0xe30 [ 325.534431][ T6988] ? apparmor_capable+0x12c/0x190 [ 325.539832][ T6988] ? full_name_hash+0x8e/0xe0 [ 325.544936][ T6988] dev_ioctl+0x545/0xe30 [ 325.549327][ T6988] ? _copy_from_user+0x111/0x170 [ 325.554654][ T6988] sock_do_ioctl+0x245/0x320 [ 325.559525][ T6988] ? sock_show_fdinfo+0xb0/0xb0 [ 325.564427][ T6988] sock_ioctl+0x4d2/0x710 [ 325.568877][ T6988] ? sock_poll+0x410/0x410 [ 325.573434][ T6988] ? bpf_lsm_file_ioctl+0x5/0x10 [ 325.578408][ T6988] ? security_file_ioctl+0x7c/0xa0 [ 325.583554][ T6988] ? sock_poll+0x410/0x410 [ 325.588373][ T6988] __se_sys_ioctl+0xfa/0x170 [ 325.593002][ T6988] do_syscall_64+0x4c/0xa0 [ 325.597454][ T6988] ? clear_bhb_loop+0x30/0x80 [ 325.602169][ T6988] ? clear_bhb_loop+0x30/0x80 [ 325.606977][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.613528][ T6988] RIP: 0033:0x7fb293c34799 [ 325.618246][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.638216][ T6988] RSP: 002b:00007fb291e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.647011][ T6988] RAX: ffffffffffffffda RBX: 00007fb293eadfa0 RCX: 00007fb293c34799 [ 325.655554][ T6988] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 325.663734][ T6988] RBP: 00007fb293ccac99 R08: 0000000000000000 R09: 0000000000000000 [ 325.671857][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.679873][ T6988] R13: 00007fb293eae038 R14: 00007fb293eadfa0 R15: 00007fff234f8058 [ 325.687982][ T6988] [ 325.779775][ T6988] ================================================================== [ 325.787987][ T6988] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 325.796025][ T6988] Write of size 4 at addr ffff88805f539eb8 by task syz.4.859/6988 [ 325.804026][ T6988] [ 325.806381][ T6988] CPU: 1 PID: 6988 Comm: syz.4.859 Not tainted syzkaller #0 [ 325.813923][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.824302][ T6988] Call Trace: [ 325.827735][ T6988] [ 325.830723][ T6988] dump_stack_lvl+0x188/0x250 [ 325.835545][ T6988] ? show_regs_print_info+0x20/0x20 [ 325.840851][ T6988] ? _printk+0xda/0x130 [ 325.845132][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 325.850585][ T6988] ? load_image+0x400/0x400 [ 325.855126][ T6988] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 325.860684][ T6988] print_address_description+0x60/0x2d0 [ 325.866355][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 325.871857][ T6988] kasan_report+0xdf/0x130 [ 325.876412][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 325.881841][ T6988] kasan_check_range+0x235/0x290 [ 325.886924][ T6988] ax25_dev_device_down+0x35e/0x520 [ 325.892258][ T6988] ax25_device_event+0x4b4/0x4f0 [ 325.897388][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 325.902813][ T6988] __dev_notify_flags+0x158/0x300 [ 325.908088][ T6988] ? __dev_change_flags+0x6a0/0x6a0 [ 325.913544][ T6988] ? __dev_change_flags+0x4d0/0x6a0 [ 325.919288][ T6988] ? dev_get_flags+0x1c0/0x1c0 [ 325.924114][ T6988] ? __mutex_lock_common+0x465/0x2400 [ 325.929804][ T6988] dev_change_flags+0xe3/0x1a0 [ 325.934715][ T6988] dev_ifsioc+0x130/0xd50 [ 325.939374][ T6988] ? dev_ioctl+0xe30/0xe30 [ 325.943832][ T6988] ? apparmor_capable+0x12c/0x190 [ 325.949010][ T6988] ? full_name_hash+0x8e/0xe0 [ 325.953893][ T6988] dev_ioctl+0x545/0xe30 [ 325.958290][ T6988] ? _copy_from_user+0x111/0x170 [ 325.963580][ T6988] sock_do_ioctl+0x245/0x320 [ 325.968304][ T6988] ? sock_show_fdinfo+0xb0/0xb0 [ 325.973300][ T6988] sock_ioctl+0x4d2/0x710 [ 325.977671][ T6988] ? sock_poll+0x410/0x410 [ 325.982220][ T6988] ? bpf_lsm_file_ioctl+0x5/0x10 [ 325.987554][ T6988] ? security_file_ioctl+0x7c/0xa0 [ 325.992929][ T6988] ? sock_poll+0x410/0x410 [ 325.997521][ T6988] __se_sys_ioctl+0xfa/0x170 [ 326.002616][ T6988] do_syscall_64+0x4c/0xa0 [ 326.007171][ T6988] ? clear_bhb_loop+0x30/0x80 [ 326.012303][ T6988] ? clear_bhb_loop+0x30/0x80 [ 326.017026][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.023059][ T6988] RIP: 0033:0x7fb293c34799 [ 326.027775][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.048003][ T6988] RSP: 002b:00007fb291e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.056903][ T6988] RAX: ffffffffffffffda RBX: 00007fb293eadfa0 RCX: 00007fb293c34799 [ 326.065012][ T6988] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 326.073028][ T6988] RBP: 00007fb293ccac99 R08: 0000000000000000 R09: 0000000000000000 [ 326.081212][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.089625][ T6988] R13: 00007fb293eae038 R14: 00007fb293eadfa0 R15: 00007fff234f8058 [ 326.097837][ T6988] [ 326.100984][ T6988] [ 326.103330][ T6988] Allocated by task 6988: [ 326.107790][ T6988] __kasan_kmalloc+0xb5/0xf0 [ 326.112503][ T6988] ax25_dev_device_up+0x50/0x580 [ 326.117654][ T6988] ax25_device_event+0x483/0x4f0 [ 326.122817][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 326.128309][ T6988] __dev_notify_flags+0x194/0x300 [ 326.133466][ T6988] dev_change_flags+0xe3/0x1a0 [ 326.138470][ T6988] dev_ifsioc+0x130/0xd50 [ 326.142835][ T6988] dev_ioctl+0x545/0xe30 [ 326.147110][ T6988] sock_do_ioctl+0x245/0x320 [ 326.151735][ T6988] sock_ioctl+0x4d2/0x710 [ 326.156097][ T6988] __se_sys_ioctl+0xfa/0x170 [ 326.160718][ T6988] do_syscall_64+0x4c/0xa0 [ 326.165256][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.171278][ T6988] [ 326.173625][ T6988] Freed by task 6988: [ 326.177631][ T6988] kasan_set_track+0x4b/0x70 [ 326.182357][ T6988] kasan_set_free_info+0x1f/0x40 [ 326.187555][ T6988] ____kasan_slab_free+0xd5/0x110 [ 326.192617][ T6988] slab_free_freelist_hook+0xea/0x170 [ 326.198036][ T6988] kfree+0xef/0x2a0 [ 326.201876][ T6988] ax25_dev_device_down+0x1c0/0x520 [ 326.207204][ T6988] ax25_device_event+0x4b4/0x4f0 [ 326.212222][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 326.218061][ T6988] __dev_notify_flags+0x158/0x300 [ 326.223240][ T6988] dev_change_flags+0xe3/0x1a0 [ 326.228230][ T6988] dev_ifsioc+0x130/0xd50 [ 326.232815][ T6988] dev_ioctl+0x545/0xe30 [ 326.237376][ T6988] sock_do_ioctl+0x245/0x320 [ 326.242025][ T6988] sock_ioctl+0x4d2/0x710 [ 326.246491][ T6988] __se_sys_ioctl+0xfa/0x170 [ 326.251738][ T6988] do_syscall_64+0x4c/0xa0 [ 326.256201][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.262246][ T6988] [ 326.264602][ T6988] Last potentially related work creation: [ 326.270515][ T6988] kasan_save_stack+0x35/0x60 [ 326.275326][ T6988] kasan_record_aux_stack+0xb8/0x100 [ 326.281082][ T6988] insert_work+0x54/0x3d0 [ 326.285476][ T6988] __queue_work+0x9c5/0xd50 [ 326.290235][ T6988] queue_work_on+0x124/0x1f0 [ 326.295099][ T6988] loop_queue_rq+0x9d8/0xac0 [ 326.299814][ T6988] __blk_mq_try_issue_directly+0x497/0x820 [ 326.305675][ T6988] blk_mq_try_issue_directly+0xaf/0x270 [ 326.311267][ T6988] blk_mq_submit_bio+0xfa1/0x1820 [ 326.316423][ T6988] __submit_bio+0x7d1/0x820 [ 326.321048][ T6988] submit_bio_noacct+0x6b0/0x800 [ 326.326204][ T6988] submit_bio+0x2c1/0x560 [ 326.330596][ T6988] __sync_dirty_buffer+0x237/0x370 [ 326.335842][ T6988] ext4_commit_super+0x2fa/0x3f0 [ 326.341096][ T6988] ext4_setup_super+0x825/0xb90 [ 326.345992][ T6988] ext4_fill_super+0x752e/0x95a0 [ 326.350962][ T6988] mount_bdev+0x287/0x3c0 [ 326.355334][ T6988] legacy_get_tree+0xe6/0x180 [ 326.360045][ T6988] vfs_get_tree+0x88/0x270 [ 326.364513][ T6988] do_new_mount+0x24a/0xa40 [ 326.369274][ T6988] __se_sys_mount+0x2e3/0x3d0 [ 326.374089][ T6988] do_syscall_64+0x4c/0xa0 [ 326.378630][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.384555][ T6988] [ 326.386904][ T6988] Second to last potentially related work creation: [ 326.393509][ T6988] kasan_save_stack+0x35/0x60 [ 326.398423][ T6988] kasan_record_aux_stack+0xb8/0x100 [ 326.403801][ T6988] insert_work+0x54/0x3d0 [ 326.408214][ T6988] __queue_work+0x9c5/0xd50 [ 326.412764][ T6988] queue_work_on+0x124/0x1f0 [ 326.417824][ T6988] loop_queue_rq+0x9d8/0xac0 [ 326.422615][ T6988] __blk_mq_try_issue_directly+0x497/0x820 [ 326.428647][ T6988] blk_mq_try_issue_directly+0xaf/0x270 [ 326.434470][ T6988] blk_mq_submit_bio+0xfa1/0x1820 [ 326.439625][ T6988] __submit_bio+0x7d1/0x820 [ 326.444274][ T6988] submit_bio_noacct+0x6b0/0x800 [ 326.449349][ T6988] submit_bio+0x2c1/0x560 [ 326.453692][ T6988] submit_bh+0x23/0x30 [ 326.457805][ T6988] ext4_read_bh+0x180/0x240 [ 326.462368][ T6988] __ext4_sb_bread_gfp+0x1d1/0x220 [ 326.467518][ T6988] ext4_fill_super+0x6f2/0x95a0 [ 326.472410][ T6988] mount_bdev+0x287/0x3c0 [ 326.476760][ T6988] legacy_get_tree+0xe6/0x180 [ 326.481458][ T6988] vfs_get_tree+0x88/0x270 [ 326.485963][ T6988] do_new_mount+0x24a/0xa40 [ 326.490569][ T6988] __se_sys_mount+0x2e3/0x3d0 [ 326.495362][ T6988] do_syscall_64+0x4c/0xa0 [ 326.500249][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.506308][ T6988] [ 326.508671][ T6988] The buggy address belongs to the object at ffff88805f539e00 [ 326.508671][ T6988] which belongs to the cache kmalloc-192 of size 192 [ 326.523048][ T6988] The buggy address is located 184 bytes inside of [ 326.523048][ T6988] 192-byte region [ffff88805f539e00, ffff88805f539ec0) [ 326.536400][ T6988] The buggy address belongs to the page: [ 326.542328][ T6988] page:ffffea00017d4e40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f539 [ 326.552843][ T6988] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 326.560452][ T6988] raw: 00fff00000000200 0000000000000000 0000000200000001 ffff888016c41a00 [ 326.569561][ T6988] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 326.578480][ T6988] page dumped because: kasan: bad access detected [ 326.585272][ T6988] page_owner tracks the page as allocated [ 326.591192][ T6988] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1108, ts 75253038806, free_ts 24907091543 [ 326.607543][ T6988] get_page_from_freelist+0x1bbd/0x1ca0 [ 326.613217][ T6988] __alloc_pages+0x1ee/0x480 [ 326.618128][ T6988] new_slab+0xb6/0x4b0 [ 326.622499][ T6988] ___slab_alloc+0x80a/0xdd0 [ 326.627617][ T6988] kmem_cache_alloc_node_trace+0x1dd/0x300 [ 326.633584][ T6988] create_worker+0x117/0x640 [ 326.638513][ T6988] worker_thread+0x4cb/0x1290 [ 326.643230][ T6988] kthread+0x436/0x520 [ 326.647334][ T6988] ret_from_fork+0x1f/0x30 [ 326.651791][ T6988] page last free stack trace: [ 326.656691][ T6988] free_unref_page_prepare+0x637/0x6c0 [ 326.662300][ T6988] free_unref_page+0x8f/0x2a0 [ 326.667292][ T6988] free_contig_range+0x96/0xf0 [ 326.672094][ T6988] destroy_args+0xf0/0xa00 [ 326.676648][ T6988] debug_vm_pgtable+0x321/0x380 [ 326.681526][ T6988] do_one_initcall+0x272/0x730 [ 326.686331][ T6988] do_initcall_level+0x137/0x1f0 [ 326.691378][ T6988] do_initcalls+0x4b/0x90 [ 326.695830][ T6988] kernel_init_freeable+0x3e9/0x570 [ 326.701337][ T6988] kernel_init+0x19/0x1b0 [ 326.705982][ T6988] ret_from_fork+0x1f/0x30 [ 326.710526][ T6988] [ 326.712960][ T6988] Memory state around the buggy address: [ 326.718864][ T6988] ffff88805f539d80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 326.727397][ T6988] ffff88805f539e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.735891][ T6988] >ffff88805f539e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 326.744009][ T6988] ^ [ 326.750143][ T6988] ffff88805f539f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.758360][ T6988] ffff88805f539f80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 326.766445][ T6988] ================================================================== [ 326.778563][ T6988] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 326.785991][ T6988] CPU: 0 PID: 6988 Comm: syz.4.859 Tainted: G B syzkaller #0 [ 326.794876][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.805183][ T6988] Call Trace: [ 326.808738][ T6988] [ 326.811713][ T6988] dump_stack_lvl+0x188/0x250 [ 326.816430][ T6988] ? show_regs_print_info+0x20/0x20 [ 326.822053][ T6988] ? load_image+0x400/0x400 [ 326.826643][ T6988] panic+0x2e5/0x810 [ 326.830725][ T6988] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 326.837043][ T6988] ? bpf_jit_dump+0xd0/0xd0 [ 326.841905][ T6988] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 326.848228][ T6988] ? _raw_spin_unlock+0x40/0x40 [ 326.853376][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 326.859125][ T6988] check_panic_on_warn+0x80/0xa0 [ 326.864613][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 326.870400][ T6988] end_report+0x6d/0xf0 [ 326.874914][ T6988] kasan_report+0x102/0x130 [ 326.879572][ T6988] ? ax25_dev_device_down+0x35e/0x520 [ 326.885219][ T6988] kasan_check_range+0x235/0x290 [ 326.890291][ T6988] ax25_dev_device_down+0x35e/0x520 [ 326.895562][ T6988] ax25_device_event+0x4b4/0x4f0 [ 326.901100][ T6988] raw_notifier_call_chain+0xcb/0x160 [ 326.906912][ T6988] __dev_notify_flags+0x158/0x300 [ 326.911954][ T6988] ? __dev_change_flags+0x6a0/0x6a0 [ 326.917358][ T6988] ? __dev_change_flags+0x4d0/0x6a0 [ 326.922727][ T6988] ? dev_get_flags+0x1c0/0x1c0 [ 326.927503][ T6988] ? __mutex_lock_common+0x465/0x2400 [ 326.932984][ T6988] dev_change_flags+0xe3/0x1a0 [ 326.937944][ T6988] dev_ifsioc+0x130/0xd50 [ 326.942687][ T6988] ? dev_ioctl+0xe30/0xe30 [ 326.947428][ T6988] ? apparmor_capable+0x12c/0x190 [ 326.952614][ T6988] ? full_name_hash+0x8e/0xe0 [ 326.957336][ T6988] dev_ioctl+0x545/0xe30 [ 326.961696][ T6988] ? _copy_from_user+0x111/0x170 [ 326.966745][ T6988] sock_do_ioctl+0x245/0x320 [ 326.971518][ T6988] ? sock_show_fdinfo+0xb0/0xb0 [ 326.976387][ T6988] sock_ioctl+0x4d2/0x710 [ 326.980823][ T6988] ? sock_poll+0x410/0x410 [ 326.985279][ T6988] ? bpf_lsm_file_ioctl+0x5/0x10 [ 326.990228][ T6988] ? security_file_ioctl+0x7c/0xa0 [ 326.995455][ T6988] ? sock_poll+0x410/0x410 [ 327.000098][ T6988] __se_sys_ioctl+0xfa/0x170 [ 327.005066][ T6988] do_syscall_64+0x4c/0xa0 [ 327.009777][ T6988] ? clear_bhb_loop+0x30/0x80 [ 327.014523][ T6988] ? clear_bhb_loop+0x30/0x80 [ 327.019334][ T6988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.025749][ T6988] RIP: 0033:0x7fb293c34799 [ 327.030609][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.051225][ T6988] RSP: 002b:00007fb291e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.060097][ T6988] RAX: ffffffffffffffda RBX: 00007fb293eadfa0 RCX: 00007fb293c34799 [ 327.068347][ T6988] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 327.076594][ T6988] RBP: 00007fb293ccac99 R08: 0000000000000000 R09: 0000000000000000 [ 327.084805][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.093229][ T6988] R13: 00007fb293eae038 R14: 00007fb293eadfa0 R15: 00007fff234f8058 [ 327.101460][ T6988] [ 327.105077][ T6988] Kernel Offset: disabled [ 327.117665][ T6988] Rebooting in 86400 seconds..