last executing test programs: 20.096366154s ago: executing program 2 (id=449): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 15.144394162s ago: executing program 2 (id=459): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x2, 0x400) semctl$SEM_STAT_ANY(r4, 0x4, 0x14, &(0x7f0000000040)=""/233) 14.293773291s ago: executing program 1 (id=460): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x2108}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x3, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.265545861s ago: executing program 2 (id=461): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x100404c, &(0x7f00000003c0)=ANY=[], 0x3, 0x1cc, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350604000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c0acd5db6538824c600d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cf6e3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) 12.089945319s ago: executing program 4 (id=464): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071112f00000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r3], 0x0, 0x56}, 0x28) 9.781800912s ago: executing program 4 (id=466): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad0", 0x21}, {&(0x7f0000000300)="864d7f54c4fd623f8f7da15688b99be9a0026b27248b61562abac23fd47e95799277c683b78afa173c7e40073a27da2d4b6096868f173e469f029ad1a5fe0f57f7a25026bcf8ad0aef2bcb20738a7632d8afea65cda79daf5d6f", 0x5a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="76cd3737249e92cdbad7b6e704e8cae7f405a85f7d8e20b8d0bb939237bc52d18c99e0a611809bd4669407806d66cda69d59ed38ec6858a4cdacb848a5361397f7b242c223b0b522ada187c93dd27de49a68ccfaaabd0d43c93068f7de9619227f9d6f92ba57e70eab0767d64a76396f0d84380f3cf7d53968105101474bf9d8b3599b0e30aeae778963534b920e853f2bbbb68fed30c6395bdfc18f0484da05decdb889af633d216d3cb43ffefe6da687d69fc53f946a78b41c0c8b4685f4aa19caa8d8e24de898f7", 0xc9}, {&(0x7f0000000180)="e6b533355df96cf11386c82eddb922d918cc7dcb06d2bc76aa2fa0ac0c49a89beb25118cd309894183b5bbd2210a36", 0x2f}, {&(0x7f0000000500)="1f9a2da343bd64eb324c2599923ba656bf6dfd65ffea98851d45bb9192b600f72b1f2802cfb066ce7d5a75d802cc8c5a116313e88ea8cf11ad276d47b4542c993afd", 0x42}, {&(0x7f0000000680)="3d232fac2533383b925780ae295b", 0xe}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="07e52a4b97e622f07ea82f4dd40086d5c93d422e43e62cce8225c43bb642867c6f520ab3a61f5b503f801ca6ed80ab50055d0dae240192a4d7f833481e642fad0c0903b6d56093996f2ec935115cc4e4373c0a4e4d46ea04305651067e43e638f54dfb95f65afb591924849d8e", 0x6d}], 0x1}}], 0x4, 0xa0d0) 9.592040854s ago: executing program 3 (id=468): socket$inet_mptcp(0x2, 0x1, 0x106) eventfd(0x3) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xffffffef, @value=0x9}) 9.421430444s ago: executing program 3 (id=469): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2696817bb959eb91028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"db0bbced01f8fbffff070000230600f2bdcbc81000000000dd00000000000008", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000340)={""/32, 0x0, 0x0, 0xfffffffffffffef2, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 9.049889655s ago: executing program 0 (id=471): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 8.474056769s ago: executing program 0 (id=472): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.473330499s ago: executing program 1 (id=473): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xfffffdda, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000740)=""/244, 0xf4, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000d00)={0x2, 0x0, {&(0x7f0000000c40)=""/162, 0xa2, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 7.07121224s ago: executing program 0 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) r3 = io_uring_setup(0x6f04, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') lseek(r4, 0x9, 0x0) connect$unix(r4, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) chroot(0x0) 7.06999244s ago: executing program 2 (id=475): fsopen(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.024117793s ago: executing program 1 (id=476): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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") syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_setup(0x6e1e, &(0x7f0000001280)={0x0, 0xb2d2, 0x800, 0xfffffffc, 0x87}) 5.443990614s ago: executing program 1 (id=477): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)='\t', 0x1, 0x24040801, &(0x7f0000000600)={0x11, 0x8100, r3, 0x1, 0x8, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x10022, 0x0) 4.387502816s ago: executing program 0 (id=478): unshare(0x2c020400) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 4.076821014s ago: executing program 4 (id=479): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x480, 0x0, 0x1}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.672682717s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") truncate(0x0, 0x400000f000) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x5000) 3.508153886s ago: executing program 4 (id=481): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f521cff", 0x52}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311413357ad61a7e8da14475e1e7a86374f76d9151f848173b87ccb231e108bd09079193372037fa41094f6083b3a465efb", 0x61}, {&(0x7f00000007c0)}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.294436289s ago: executing program 4 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.137080048s ago: executing program 3 (id=483): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@cruft}, {@utf8}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x55a, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) r2 = socket(0x1, 0x5, 0x0) close(r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 2.863625894s ago: executing program 4 (id=484): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x2, 0x400) 2.616125198s ago: executing program 1 (id=485): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 2.505865105s ago: executing program 2 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x41000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x1}, {0xfe, 0x2, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x2, 0xa3, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 2.375477942s ago: executing program 0 (id=487): unshare(0x2040400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000000)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 1.288134455s ago: executing program 0 (id=488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c40)=""/102376, 0x18fe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffff000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x101) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1.284554876s ago: executing program 3 (id=489): mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0xffff3f94) 1.057720889s ago: executing program 2 (id=490): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2696817bb959eb91028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"db0bbced01f8fbffff070000230600f2bdcbc81000000000dd00000000000008", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000340)={""/32, 0x0, 0x0, 0xfffffffffffffef2, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 1.056974849s ago: executing program 3 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) 0s ago: executing program 1 (id=492): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f521cff", 0x52}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311413357ad61a7e8da14475e1e7a86374f76d9151f848173b87ccb231e108bd09079193372037fa41094f6083b3a465efb", 0x61}, {&(0x7f00000007c0)}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 75.165626][ T4256] cgroup: Unknown subsys name 'net' [ 75.302882][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.802737][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.777204][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.788750][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.796725][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.804462][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.812542][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.821179][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.828938][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.836155][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.843838][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.852608][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.860038][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.867281][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.875481][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.883237][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.891315][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.898581][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.906638][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.913941][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.921583][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.929001][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.936833][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.966581][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.974801][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.982833][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.992791][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.011915][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.024354][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.031909][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.036561][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.058419][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.387994][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 79.570233][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 79.587080][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.594706][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.616901][ T4276] device bridge_slave_0 entered promiscuous mode [ 79.627052][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 79.650007][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 79.663370][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.671476][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.682178][ T4276] device bridge_slave_1 entered promiscuous mode [ 79.761268][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.777925][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 79.795692][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.883924][ T4276] team0: Port device team_slave_0 added [ 79.898643][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.909384][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.917420][ T4270] device bridge_slave_0 entered promiscuous mode [ 79.942287][ T4276] team0: Port device team_slave_1 added [ 79.968494][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.975767][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.983652][ T4270] device bridge_slave_1 entered promiscuous mode [ 79.994707][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.001998][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.010477][ T4286] device bridge_slave_0 entered promiscuous mode [ 80.024596][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.035393][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.043469][ T4269] device bridge_slave_0 entered promiscuous mode [ 80.058363][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065605][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.074351][ T4269] device bridge_slave_1 entered promiscuous mode [ 80.085537][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.093042][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.101640][ T4286] device bridge_slave_1 entered promiscuous mode [ 80.109860][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.116917][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.143068][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.162789][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.171837][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.202291][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.234173][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.247843][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.278917][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.311940][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.320019][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.328632][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.343799][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.356399][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.368879][ T4270] team0: Port device team_slave_0 added [ 80.383129][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.390408][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.398864][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.413651][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.424425][ T4270] team0: Port device team_slave_1 added [ 80.484172][ T4276] device hsr_slave_0 entered promiscuous mode [ 80.491370][ T4276] device hsr_slave_1 entered promiscuous mode [ 80.500658][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.512590][ T4269] team0: Port device team_slave_0 added [ 80.543509][ T4286] team0: Port device team_slave_0 added [ 80.553726][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.561039][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.587538][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.600482][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.611396][ T4269] team0: Port device team_slave_1 added [ 80.620721][ T4286] team0: Port device team_slave_1 added [ 80.627285][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.634243][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.660411][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.730842][ T4275] team0: Port device team_slave_0 added [ 80.749230][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.756718][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.782938][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.794988][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.802813][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.829248][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.849196][ T4275] team0: Port device team_slave_1 added [ 80.867420][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.874432][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.900923][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.912934][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.920603][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.946826][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.962420][ T4270] device hsr_slave_0 entered promiscuous mode [ 80.969658][ T4270] device hsr_slave_1 entered promiscuous mode [ 80.976590][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.984454][ T4270] Cannot create hsr debugfs directory [ 81.006924][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 81.006939][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 81.007253][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 81.035127][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.043357][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.069803][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.085454][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 81.085826][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 81.114764][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.122020][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.150338][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.250931][ T4286] device hsr_slave_0 entered promiscuous mode [ 81.261708][ T4286] device hsr_slave_1 entered promiscuous mode [ 81.269527][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.277590][ T4286] Cannot create hsr debugfs directory [ 81.307325][ T4269] device hsr_slave_0 entered promiscuous mode [ 81.315857][ T4269] device hsr_slave_1 entered promiscuous mode [ 81.324630][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.332768][ T4269] Cannot create hsr debugfs directory [ 81.354338][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.361870][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.368986][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.376736][ T4275] Cannot create hsr debugfs directory [ 81.628600][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.665891][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.675137][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.705068][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.792955][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.808541][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.831931][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.860921][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.921365][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.932785][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.949953][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.979703][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.000044][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.038830][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.060372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.071424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.089186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.099287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.112336][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.119727][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.134257][ T4286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.162267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.171229][ T4286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.186577][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.197170][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.207596][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.214795][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.239521][ T4286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.270221][ T4286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.287626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.298311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.313138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.326489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.335531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.344488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.364012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.377634][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.411905][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.426919][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.447453][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.457461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.467133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.476503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.485171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.494421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.515616][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.565331][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.589296][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.672221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.680458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.705753][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.716322][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.746836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.758929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.768346][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.775531][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.785774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.811647][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.826988][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.842570][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.862236][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.869463][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.884368][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.893161][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.910996][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.932460][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.959510][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.968732][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.991240][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.004214][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.014861][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.036393][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.043659][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.066192][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.075606][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.084295][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.091494][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.097033][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 83.104802][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 83.108258][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.112484][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 83.123158][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.139220][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.148349][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.155547][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.165453][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 83.171646][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.179187][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 83.190197][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.207344][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.220766][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.230749][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.242876][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.272291][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.280631][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.290557][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.299320][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.306628][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.314720][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.324160][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.333833][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.343912][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.353109][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.362028][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.418870][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.432463][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.442509][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.451805][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.460791][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.471147][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.479874][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.489060][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.498823][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.508852][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.518264][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.527438][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.534967][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.542721][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.552976][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.574057][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.582346][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.592938][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.612265][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.637380][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.666910][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.682115][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.706067][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.724199][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.745380][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.759547][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.800118][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.832383][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.870919][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.923285][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.941306][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.973618][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.994622][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.016925][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.054714][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.076145][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.118613][ T4276] device veth0_vlan entered promiscuous mode [ 84.147630][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.166295][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.185892][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.193078][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.215651][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.235834][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.255787][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.262960][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.271585][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.281327][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.309974][ T4276] device veth1_vlan entered promiscuous mode [ 84.333955][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.360539][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.377116][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.417758][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.428766][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.447491][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.455062][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.465519][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.524847][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545816][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.554540][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.574661][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.583909][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.599960][ T4276] device veth0_macvtap entered promiscuous mode [ 84.615448][ T4276] device veth1_macvtap entered promiscuous mode [ 84.637179][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.646037][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.654364][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.665654][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.677448][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.696548][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.733254][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.745029][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.761953][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.777460][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.790165][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.799860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.808872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.817525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.825052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.833099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.842651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.852253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.863597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.872745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.882173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.902875][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.942629][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.953624][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.966645][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.980430][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.036878][ T4270] device veth0_vlan entered promiscuous mode [ 85.052274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.062601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.072244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.083047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.094477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.110548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.142029][ T4270] device veth1_vlan entered promiscuous mode [ 85.161503][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.169272][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 85.169312][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 85.175457][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 85.188895][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.199651][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.231088][ T4286] device veth0_vlan entered promiscuous mode [ 85.245373][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 85.247119][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 85.260041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.297028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.313433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.323933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.341070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.351473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.366890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.375121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.389530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.412740][ T4269] device veth0_vlan entered promiscuous mode [ 85.442839][ T4286] device veth1_vlan entered promiscuous mode [ 85.474254][ T4269] device veth1_vlan entered promiscuous mode [ 85.544595][ T4270] device veth0_macvtap entered promiscuous mode [ 85.577611][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.590060][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.598650][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.609705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.618631][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.628415][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.638622][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.646860][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.654429][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.664168][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.673523][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.687788][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.697645][ T4270] device veth1_macvtap entered promiscuous mode [ 85.706969][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.719405][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.740930][ T4286] device veth0_macvtap entered promiscuous mode [ 85.797608][ T4286] device veth1_macvtap entered promiscuous mode [ 85.816346][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.840574][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.859937][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.876505][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.902245][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.905358][ T4269] device veth0_macvtap entered promiscuous mode [ 85.920625][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.930520][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.932161][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.953199][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.963051][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.976271][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.986386][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.998843][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.013379][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.027009][ T4269] device veth1_macvtap entered promiscuous mode [ 86.040836][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.054931][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.071036][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.084269][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.100483][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.119362][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.148913][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.162655][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.180232][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.193576][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.212696][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.223167][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.235096][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.256095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.264988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.313135][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.347665][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.358833][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.382094][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.392930][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.404029][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417039][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.457391][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.474835][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.485159][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.496687][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.511879][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.653699][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.666284][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.676795][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.688267][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.699767][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.711306][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.724309][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.787196][ T26] cfg80211: failed to load regulatory.db [ 86.899951][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.992996][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.092857][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.211136][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.324812][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.335455][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 87.341604][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 87.348112][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 87.354152][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 87.360310][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 87.374008][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.403895][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.425591][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.462525][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.518878][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.576898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.596481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.624599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.654648][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673008][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.683721][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698623][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.735441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.749321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.135265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 88.136387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.143618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 88.152149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.160146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.168501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 88.176603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.184969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.193078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.267844][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.278255][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.307738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.629178][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.686321][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.687083][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.692715][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.710384][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.732099][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.732120][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.742718][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.853817][ T4275] device veth0_vlan entered promiscuous mode [ 88.917910][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.946408][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.973351][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.974726][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.033089][ T4275] device veth1_vlan entered promiscuous mode [ 89.061404][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.073829][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.085596][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.094131][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.983622][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.020768][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.064730][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.074071][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.118380][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.156721][ T4275] device veth0_macvtap entered promiscuous mode [ 91.183849][ T4275] device veth1_macvtap entered promiscuous mode [ 91.266184][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.297484][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.322264][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.381418][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.881558][ T4413] loop1: detected capacity change from 0 to 4096 [ 92.905288][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.942432][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.957070][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.967617][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.006592][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.019187][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.042471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.073469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.104952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.124672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.149512][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.189341][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.225304][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.255768][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.289146][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.315343][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.355273][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.385416][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.407447][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.424781][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 93.442160][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.460036][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.499653][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518904][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554495][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590366][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698585][ T4425] loop1: detected capacity change from 0 to 2048 [ 93.777736][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.798432][ T4425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.808146][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.841995][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.934224][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.942251][ T27] audit: type=1800 audit(1771051654.089:2): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 93.988390][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.036535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.357463][ T4427] loop2: detected capacity change from 0 to 2048 [ 95.662669][ T4427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.192023][ T4435] loop4: detected capacity change from 0 to 512 [ 96.270815][ T4435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.354415][ T4433] sched: RT throttling activated [ 99.629158][ T4435] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 99.662683][ T4441] loop0: detected capacity change from 0 to 1024 [ 99.791321][ T4443] loop3: detected capacity change from 0 to 16 [ 99.798237][ T4443] ======================================================= [ 99.798237][ T4443] WARNING: The mand mount option has been deprecated and [ 99.798237][ T4443] and is ignored by this kernel. Remove the mand [ 99.798237][ T4443] option from the mount to silence this warning. [ 99.798237][ T4443] ======================================================= [ 99.849671][ T4443] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 99.860456][ T4443] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 99.875527][ T4443] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 101.440331][ T4401] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.397927][ T9] hfsplus: b-tree write err: -5, ino 3 [ 103.572949][ T4457] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 103.940341][ T4463] loop0: detected capacity change from 0 to 2048 [ 103.991208][ T4463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.095702][ T27] audit: type=1800 audit(1771051664.249:3): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 105.581493][ T4471] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 105.726319][ T4473] loop0: detected capacity change from 0 to 1024 [ 105.823851][ T4475] loop4: detected capacity change from 0 to 512 [ 105.831531][ T4475] EXT4-fs: Ignoring removed orlov option [ 105.842467][ T4475] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.934083][ T4475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 107.358440][ T4478] process 'syz.3.19' launched './file1' with NULL argv: empty string added [ 107.466206][ T4475] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.20: corrupted in-inode xattr [ 107.510125][ T4475] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.20: couldn't read orphan inode 15 (err -117) [ 107.581052][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.323527][ T4485] loop2: detected capacity change from 0 to 8192 [ 109.438250][ T4485] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.506939][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 116.488707][ T4528] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.163301][ T4528] loop4: detected capacity change from 0 to 512 [ 117.214913][ T4528] EXT4-fs: Ignoring removed orlov option [ 117.260385][ T4528] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 117.314430][ T4534] loop3: detected capacity change from 0 to 8192 [ 117.324875][ T4528] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.35: corrupted in-inode xattr [ 117.348195][ T4528] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.35: couldn't read orphan inode 15 (err -117) [ 117.348829][ T4534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 117.368900][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.455353][ T4534] UDF-fs: Scanning with blocksize 512 failed [ 117.468424][ T4534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 117.484607][ T4534] UDF-fs: Scanning with blocksize 1024 failed [ 117.522892][ T4534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 117.555615][ T4534] UDF-fs: Scanning with blocksize 2048 failed [ 117.608816][ T4534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.735095][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 117.769585][ T27] audit: type=1800 audit(1771051677.919:4): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 117.930346][ T27] audit: type=1800 audit(1771051678.029:5): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 118.020379][ T4542] loop2: detected capacity change from 0 to 2048 [ 118.090392][ T4542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.756616][ T4271] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 122.183856][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 122.297108][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 123.850602][ T22] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 124.679249][ T22] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 124.707759][ T22] usb 2-1: config 1 has no interface number 0 [ 124.724833][ T22] usb 2-1: config 1 interface 105 has no altsetting 0 [ 124.804120][ T22] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 124.845284][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.879055][ T22] usb 2-1: Product: syz [ 124.883296][ T22] usb 2-1: Manufacturer: syz [ 124.906319][ T22] usb 2-1: SerialNumber: syz [ 125.450155][ T22] aqc111: probe of 2-1:1.105 failed with error -71 [ 125.538644][ T22] usb 2-1: USB disconnect, device number 2 [ 125.817269][ T4624] loop1: detected capacity change from 0 to 16 [ 125.829342][ T4624] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 125.840378][ T4624] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 125.853194][ T4624] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 127.858053][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 127.893814][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 128.340621][ T4336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.358207][ T4336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.439236][ T4336] usb 1-1: config 0 has no interfaces? [ 129.444818][ T4336] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 129.498012][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.997476][ T4336] usb 1-1: config 0 descriptor?? [ 130.416257][ T4643] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.464253][ T4643] kvm: pic: non byte read [ 130.495929][ T4643] kvm: pic: level sensitive irq not supported [ 130.496082][ T4643] kvm: pic: non byte read [ 130.514617][ T4643] kvm: pic: level sensitive irq not supported [ 130.514694][ T4643] kvm: pic: non byte read [ 130.670812][ T4671] loop3: detected capacity change from 0 to 2048 [ 130.716513][ T4671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.841630][ T4675] loop4: detected capacity change from 0 to 16 [ 130.851794][ T4675] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 130.863093][ T4675] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 130.885603][ T4675] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 133.761971][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.768672][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.036426][ T22] usb 1-1: USB disconnect, device number 2 [ 135.269663][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 136.767028][ T4705] Device name cannot be null; rc = [-22] [ 138.466589][ T4710] loop2: detected capacity change from 0 to 2048 [ 138.658641][ T4710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.140404][ T4722] loop3: detected capacity change from 0 to 128 [ 140.275991][ T4271] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 141.533833][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 141.685001][ T4742] loop5: detected capacity change from 0 to 7 [ 141.702853][ T4401] Dev loop5: unable to read RDB block 7 [ 141.721402][ T4401] loop5: unable to read partition table [ 141.770383][ T4401] loop5: partition table beyond EOD, truncated [ 141.796940][ T4742] Dev loop5: unable to read RDB block 7 [ 141.840424][ T4742] loop5: unable to read partition table [ 141.859938][ T4742] loop5: partition table beyond EOD, truncated [ 142.008743][ T4742] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 142.081360][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 143.152437][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 143.639946][ T7] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 143.735461][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.743556][ T7] usb 5-1: Product: syz [ 143.775396][ T7] usb 5-1: Manufacturer: syz [ 143.790388][ T7] usb 5-1: SerialNumber: syz [ 143.818034][ T7] usb 5-1: config 0 descriptor?? [ 143.841984][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 145.625865][ T4271] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 145.756297][ T4742] loop1: detected capacity change from 0 to 6 [ 145.761393][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.761538][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.761795][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.761815][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.762027][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.762046][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.762261][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.762280][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.762450][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.762492][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.762544][ T4438] ldm_validate_partition_table(): Disk read failed. [ 145.766391][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.766414][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.766616][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.766636][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.766825][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.766844][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.767035][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.767054][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.767106][ T4438] Dev loop1: unable to read RDB block 0 [ 145.767266][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.767285][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.767775][ T4438] loop1: unable to read partition table [ 145.767943][ T4438] loop1: partition table beyond EOD, truncated [ 145.893683][ T4742] ldm_validate_partition_table(): Disk read failed. [ 145.894597][ T4742] Dev loop1: unable to read RDB block 0 [ 145.895148][ T4742] loop1: unable to read partition table [ 145.898113][ T4742] loop1: partition table beyond EOD, truncated [ 145.903531][ T4742] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ) failed (rc=-5) [ 145.910939][ T7] gspca_stk1135: reg_w 0x200 err -71 [ 145.912022][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912035][ T7] gspca_stk1135: Sensor write failed [ 145.912068][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912078][ T7] gspca_stk1135: Sensor write failed [ 145.912111][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912119][ T7] gspca_stk1135: Sensor read failed [ 145.912142][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912149][ T7] gspca_stk1135: Sensor read failed [ 145.912154][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 145.912184][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912191][ T7] gspca_stk1135: Sensor read failed [ 145.912215][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912222][ T7] gspca_stk1135: Sensor read failed [ 145.912246][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912258][ T7] gspca_stk1135: Sensor write failed [ 145.912281][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 145.912288][ T7] gspca_stk1135: Sensor write failed [ 145.912365][ T7] stk1135: probe of 5-1:0.0 failed with error -71 [ 145.914968][ T7] usb 5-1: USB disconnect, device number 2 [ 146.438809][ T4767] loop3: detected capacity change from 0 to 2048 [ 146.654057][ T4767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.309531][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 147.556941][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 151.146038][ T4809] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 153.667406][ T4818] loop1: detected capacity change from 0 to 2048 [ 153.860943][ T4818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.115821][ T4838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 156.197145][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 160.704287][ T4859] loop6: detected capacity change from 0 to 7 [ 160.744340][ T4401] Dev loop6: unable to read RDB block 7 [ 160.761443][ T4401] loop6: unable to read partition table [ 160.791203][ T4401] loop6: partition table beyond EOD, truncated [ 160.818850][ T4859] Dev loop6: unable to read RDB block 7 [ 160.875411][ T4859] loop6: unable to read partition table [ 160.881469][ T4859] loop6: partition table beyond EOD, truncated [ 160.916170][ T4859] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 164.845623][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 165.740156][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 171.086729][ T4916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.115419][ T4916] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.361193][ T4916] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 171.426652][ T4916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.484017][ T4916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.445305][ T4271] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.465287][ T4916] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 172.520511][ T4916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.655552][ T4916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.704979][ T4916] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 172.893216][ T4916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.941247][ T4916] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.131129][ T4933] loop1: detected capacity change from 0 to 2048 [ 173.184341][ T4916] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 173.253075][ T4933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.266922][ T4916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.339399][ T4916] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 173.478019][ T4916] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 173.486621][ T4271] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.901601][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 174.065400][ T4323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.277268][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.296033][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.371506][ T4323] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.414008][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.463066][ T4323] usb 5-1: SerialNumber: syz [ 174.525408][ T4271] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.531616][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 174.700851][ T4323] usb 5-1: 0:2 : does not exist [ 174.816471][ T4323] usb 5-1: USB disconnect, device number 3 [ 174.935792][ T4271] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.270965][ T4271] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.278853][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 176.645359][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 177.541925][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 178.435450][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 178.876741][ T4980] input: syz0 as /devices/virtual/input/input6 [ 180.953465][ T4991] syz.1.171 (4991) used greatest stack depth: 18096 bytes left [ 188.046078][ T5043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 188.122138][ T5046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.191'. [ 190.665278][ T129] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.855392][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 190.864571][ T129] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 190.905707][ T129] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 190.949447][ T129] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 190.981395][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.014212][ T129] usb 5-1: config 0 descriptor?? [ 191.026337][ T129] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 191.106628][ T129] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 191.244771][ T4758] usb 5-1: USB disconnect, device number 4 [ 194.231036][ T5082] loop2: detected capacity change from 0 to 2048 [ 194.287438][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.293810][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369946][ T5082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.045372][ T4279] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.628062][ T4279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.664003][ T4279] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 196.692677][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.723869][ T4279] usb 1-1: config 0 descriptor?? [ 196.745763][ T4379] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 196.947300][ T4379] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 196.977781][ T4379] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 197.033147][ T4379] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 197.044084][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.054880][ T4379] usb 2-1: Product: syz [ 197.061148][ T4379] usb 2-1: Manufacturer: syz [ 197.066328][ T4379] usb 2-1: SerialNumber: syz [ 197.079016][ T4379] usb 2-1: config 0 descriptor?? [ 197.093929][ T5095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.115568][ T5095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.142023][ T4279] kone 0003:1E7D:2CED.0001: unknown main item tag 0x1 [ 197.193779][ T4279] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 197.345535][ T5095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.352869][ T5095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.375006][ T4279] usb 1-1: USB disconnect, device number 3 [ 197.626798][ T5105] fido_id[5105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 197.802716][ T4379] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 198.003591][ T4379] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 198.045048][ T4379] usb 2-1: USB disconnect, device number 3 [ 201.485601][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 201.491717][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 201.498120][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 201.498145][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 201.504154][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 201.695676][ T4758] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 201.885473][ T4758] usb 2-1: Using ep0 maxpacket: 32 [ 201.892751][ T4758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.924934][ T4758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.965439][ T4758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.009169][ T4758] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 202.035299][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.057390][ T4758] usb 2-1: config 0 descriptor?? [ 203.535311][ T4379] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.777154][ T4379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.798472][ T4379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.866297][ T4379] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.946010][ T4379] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.005259][ T4379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.677438][ T4379] usb 5-1: config 0 descriptor?? [ 204.888913][ T4758] usbhid 2-1:0.0: can't add hid device: -71 [ 204.894992][ T4758] usbhid: probe of 2-1:0.0 failed with error -71 [ 204.926254][ T4758] usb 2-1: USB disconnect, device number 4 [ 205.007761][ T5161] loop1: detected capacity change from 0 to 164 [ 205.117105][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.133016][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.357421][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.375281][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.382811][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.390901][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.398949][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 205.461153][ T5168] Device name cannot be null; rc = [-22] [ 206.077986][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 206.085565][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 206.093018][ T4379] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 206.101339][ T4379] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 206.120109][ T4379] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 206.144951][ T4379] usb 5-1: USB disconnect, device number 5 [ 208.813993][ T5173] fido_id[5173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 215.843391][ T5224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.243'. [ 215.904752][ T5224] device hsr_slave_0 left promiscuous mode [ 216.523397][ T5224] device hsr_slave_1 left promiscuous mode [ 217.095378][ T4379] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.287188][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.314729][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.393053][ T4379] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.904502][ T4379] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.934927][ T4379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.964533][ T4379] usb 1-1: config 0 descriptor?? [ 219.404268][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.415569][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.446159][ T4379] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 219.514227][ T4379] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 219.681009][ T4758] usb 1-1: USB disconnect, device number 4 [ 219.924310][ T5260] fido_id[5260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 220.857538][ T5273] loop3: detected capacity change from 0 to 2048 [ 220.871290][ T5273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.726543][ T5316] loop2: detected capacity change from 0 to 2048 [ 228.960412][ T5316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.235438][ T4323] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 231.456100][ T4323] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.505638][ T4323] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.569947][ T4323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.609542][ T4323] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 231.657563][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.727378][ T4323] usb 5-1: config 0 descriptor?? [ 231.737184][ T5330] netlink: 'syz.1.271': attribute type 4 has an invalid length. [ 231.755401][ T5330] netlink: 'syz.1.271': attribute type 5 has an invalid length. [ 231.782420][ T5330] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.271'. [ 232.171450][ T5337] loop1: detected capacity change from 0 to 164 [ 232.255645][ T4323] pyra 0003:1E7D:2C24.0004: ignoring exceeding usage max [ 232.274745][ T4323] pyra 0003:1E7D:2C24.0004: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 232.550630][ T5339] Device name cannot be null; rc = [-22] [ 235.223566][ T4323] pyra 0003:1E7D:2C24.0004: couldn't init struct pyra_device [ 235.320679][ T4323] pyra 0003:1E7D:2C24.0004: couldn't install mouse [ 235.597114][ T4323] pyra: probe of 0003:1E7D:2C24.0004 failed with error -71 [ 235.648822][ T4323] usb 5-1: USB disconnect, device number 6 [ 238.074793][ T5357] fido_id[5357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.244304][ T5367] can: request_module (can-proto-0) failed. [ 238.335478][ T4758] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 238.530637][ T4758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.556759][ T4758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.585979][ T5375] device syzkaller1 entered promiscuous mode [ 238.592150][ T4758] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 238.616105][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.637136][ T4758] usb 2-1: config 0 descriptor?? [ 239.057552][ T4758] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x4 [ 239.064455][ T4758] arvo 0003:1E7D:30D4.0005: item fetching failed at offset 5/7 [ 239.124072][ T4758] arvo 0003:1E7D:30D4.0005: parse failed [ 239.161072][ T4758] arvo: probe of 0003:1E7D:30D4.0005 failed with error -22 [ 239.261835][ T5379] loop4: detected capacity change from 0 to 2048 [ 239.283145][ T4379] usb 2-1: USB disconnect, device number 5 [ 239.294355][ T5379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.345291][ T4323] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 242.547484][ T4323] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 242.569535][ T4323] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.607467][ T4323] usb 5-1: config 220 has no interface number 2 [ 242.634252][ T4323] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 242.695265][ T4323] usb 5-1: config 220 interface 0 has no altsetting 0 [ 242.705567][ T4323] usb 5-1: config 220 interface 76 has no altsetting 0 [ 242.722719][ T4323] usb 5-1: config 220 interface 1 has no altsetting 0 [ 242.745396][ T4323] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.764786][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.799101][ T4323] usb 5-1: Product: syz [ 242.803348][ T4323] usb 5-1: Manufacturer: syz [ 242.825931][ T4323] usb 5-1: SerialNumber: syz [ 243.065979][ T4323] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 243.082736][ T4323] usb 5-1: No valid video chain found. [ 243.103407][ T4323] usb 5-1: selecting invalid altsetting 0 [ 243.155628][ T4323] usb 5-1: selecting invalid altsetting 0 [ 243.175797][ T4323] usbtest: probe of 5-1:220.1 failed with error -22 [ 243.205625][ T4323] usb 5-1: USB disconnect, device number 7 [ 255.798576][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805033][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.511511][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 259.885327][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 260.094929][ T5512] binder: 5511:5512 ioctl c0306201 2000000001c0 returned -14 [ 260.126226][ T5512] device syzkaller0 entered promiscuous mode [ 260.174678][ T5512] device syzkaller0 left promiscuous mode [ 261.425278][ T129] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 261.618546][ T129] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.647596][ T129] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.678101][ T129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.702657][ T129] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 261.730507][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.797518][ T129] usb 2-1: config 0 descriptor?? [ 263.438148][ T129] usbhid 2-1:0.0: can't add hid device: -71 [ 263.444214][ T129] usbhid: probe of 2-1:0.0 failed with error -71 [ 263.510844][ T129] usb 2-1: USB disconnect, device number 6 [ 265.205293][ T4395] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 265.423292][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.454792][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.476442][ T4395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.519957][ T4395] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.543825][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.573066][ T4395] usb 2-1: config 0 descriptor?? [ 267.411955][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.445495][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.452984][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.489507][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.343'. [ 267.492928][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.540279][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.569386][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.600514][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.622140][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.643215][ T4395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 267.663005][ T4395] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 267.677276][ T5574] loop2: detected capacity change from 0 to 16 [ 267.684939][ T5574] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 267.695571][ T5574] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 267.714469][ T5574] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 268.415204][ T4395] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 269.895451][ T4395] usb 2-1: USB disconnect, device number 7 [ 270.559097][ T5587] fido_id[5587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 270.644979][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.875239][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 270.896793][ T4323] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 270.915234][ T4323] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 270.931522][ T4323] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 270.968664][ T4323] usb 1-1: config 250 has no interface number 0 [ 270.997566][ T4323] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 271.030123][ T4323] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 271.069457][ T4323] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.082319][ T4323] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 271.103341][ T4323] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 271.163836][ T4323] usb 1-1: config 250 interface 228 has no altsetting 0 [ 271.197733][ T4323] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 271.249910][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 271.277719][ T4323] usb 1-1: Product: syz [ 271.282165][ T4323] usb 1-1: SerialNumber: syz [ 271.310732][ T4323] hub 1-1:250.228: bad descriptor, ignoring hub [ 271.317290][ T4323] hub: probe of 1-1:250.228 failed with error -5 [ 272.536790][ T4323] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 272.840480][ T129] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.055485][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 273.062906][ T129] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 273.089906][ T129] usb 2-1: config 1 has no interface number 0 [ 273.115218][ T129] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 273.148422][ T129] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 273.177674][ T129] usb 2-1: config 1 interface 105 has no altsetting 0 [ 273.207134][ T129] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 273.236855][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.244945][ T129] usb 2-1: Product: syz [ 273.267674][ T129] usb 2-1: Manufacturer: syz [ 273.277287][ T129] usb 2-1: SerialNumber: syz [ 273.307362][ T5605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 273.324947][ T5605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 273.759916][ T5605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 273.783028][ T5605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.746235][ T129] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 274.825565][ T129] aqc111: probe of 2-1:1.105 failed with error -71 [ 274.885957][ T129] usb 2-1: USB disconnect, device number 8 [ 276.747570][ T5643] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 279.142598][ T4323] usb 1-1: USB disconnect, device number 5 [ 279.178238][ T4323] usblp0: removed [ 280.917633][ T5682] loop4: detected capacity change from 0 to 2048 [ 281.118367][ T5682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.697437][ T5689] overlayfs: statfs failed on './file0' [ 282.074234][ T5701] loop4: detected capacity change from 0 to 164 [ 282.449293][ T5706] Device name cannot be null; rc = [-22] [ 284.893121][ T5716] device syzkaller0 entered promiscuous mode [ 284.983188][ T5729] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 285.863769][ T5733] loop4: detected capacity change from 0 to 2048 [ 285.977377][ T5733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.593914][ T5741] loop4: detected capacity change from 0 to 16 [ 286.605710][ T5741] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 286.616494][ T5741] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 286.628797][ T5741] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 286.711249][ T5589] blk_print_req_error: 21 callbacks suppressed [ 286.711266][ T5589] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.717481][ T5749] loop3: detected capacity change from 0 to 164 [ 288.021412][ T5754] Device name cannot be null; rc = [-22] [ 290.623893][ T5767] input: syz0 as /devices/virtual/input/input9 [ 293.612666][ T5791] loop3: detected capacity change from 0 to 4096 [ 293.643162][ T5791] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 294.208788][ T5795] loop3: detected capacity change from 0 to 164 [ 294.466858][ T5798] Device name cannot be null; rc = [-22] [ 295.067231][ T5802] loop1: detected capacity change from 0 to 1764 [ 300.311375][ T5848] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 300.318388][ T5848] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.402616][ T5848] vhci_hcd vhci_hcd.0: Device attached [ 300.484357][ T5849] vhci_hcd: connection closed [ 300.490655][ T4366] vhci_hcd: stop threads [ 300.522486][ T4366] vhci_hcd: release socket [ 300.571738][ T4366] vhci_hcd: disconnect device [ 300.601273][ T4356] vhci_hcd: vhci_device speed not set [ 301.015628][ T953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 302.237026][ T953] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.265273][ T953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.285496][ T953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.294506][ T953] usb 1-1: config 1 has no interface number 0 [ 302.300820][ T953] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 302.311686][ T953] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 302.350882][ T953] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.370299][ T953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.390545][ T953] usb 1-1: Product: syz [ 302.394773][ T953] usb 1-1: Manufacturer: syz [ 302.420929][ T953] usb 1-1: SerialNumber: syz [ 303.537551][ T129] usb 1-1: USB disconnect, device number 6 [ 306.956049][ T5886] loop0: detected capacity change from 0 to 4096 [ 307.883649][ T5901] loop3: detected capacity change from 0 to 1024 [ 307.984578][ T5901] EXT4-fs: Ignoring removed orlov option [ 308.195376][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.901271][ T5901] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 310.035070][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 310.201281][ T5917] loop1: detected capacity change from 0 to 256 [ 310.687244][ T4356] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.919510][ T4356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.001645][ T4356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.404179][ T4356] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 311.413698][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.474307][ T4356] usb 5-1: config 0 descriptor?? [ 311.930528][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 311.965479][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 311.999438][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 312.919160][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 312.927173][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 312.934229][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 312.941723][ T4356] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 312.985586][ T4356] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 314.065776][ T4356] cp2112 0003:10C4:EA90.0007: error requesting version [ 314.077922][ T4356] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 314.123640][ T4356] usb 5-1: USB disconnect, device number 8 [ 314.428994][ T5949] fido_id[5949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 315.425230][ T129] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 315.703886][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 315.882479][ T129] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 317.425206][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431595][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440527][ T129] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 317.450196][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.461090][ T129] usb 1-1: config 0 descriptor?? [ 317.555350][ T129] usb 1-1: can't set config #0, error -71 [ 317.579872][ T129] usb 1-1: USB disconnect, device number 7 [ 318.796742][ T5977] loop2: detected capacity change from 0 to 16 [ 318.804010][ T5977] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 318.814589][ T5977] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 318.826794][ T5977] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 321.321135][ T5992] loop1: detected capacity change from 0 to 2048 [ 321.713734][ T5992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.973088][ T6004] loop3: detected capacity change from 0 to 2048 [ 323.988475][ T6004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.161875][ T6008] binder: 6007:6008 ioctl c0306201 2000000003c0 returned -14 [ 324.504487][ T6014] Device name cannot be null; rc = [-22] [ 327.203062][ T4756] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 327.286236][ T4536] ------------[ cut here ]------------ [ 327.292164][ T4536] WARNING: CPU: 1 PID: 4536 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 327.302320][ T4536] Modules linked in: [ 327.306540][ T4536] CPU: 1 PID: 4536 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 327.314252][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 327.324439][ T4536] Workqueue: cfg80211 cfg80211_event_work [ 327.330250][ T4536] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 327.336490][ T4536] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 b2 ee f7 0f 0b eb bb e8 a8 b2 ee f7 <0f> 0b eb b2 e8 9f b2 ee f7 0f 0b e9 77 fd ff ff e8 93 b2 ee f7 0f [ 327.356195][ T4536] RSP: 0018:ffffc90004c37aa0 EFLAGS: 00010293 [ 327.362648][ T4536] RAX: ffffffff8993c108 RBX: dffffc0000000000 RCX: ffff88807d69d940 [ 327.371024][ T4536] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 327.379048][ T4536] RBP: ffffc90004c37b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 327.387165][ T4536] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff888029ea35d8 [ 327.395237][ T4536] R13: 1ffff92000986f5c R14: 0000000000000006 R15: ffff88807a2e0c90 [ 327.403235][ T4536] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 327.412240][ T4536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.418980][ T4536] CR2: 000055558c879a28 CR3: 000000005beb1000 CR4: 00000000003506e0 [ 327.427042][ T4536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.435027][ T4536] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.443044][ T4536] Call Trace: [ 327.446364][ T4536] [ 327.449310][ T4536] ? mutex_lock_nested+0x10/0x10 [ 327.454278][ T4536] ? trace_rdev_return_void+0x240/0x240 [ 327.459875][ T4536] cfg80211_process_wdev_events+0x3ad/0x550 [ 327.465825][ T4536] cfg80211_process_rdev_events+0x9d/0x110 [ 327.471653][ T4536] ? process_one_work+0x7b0/0x1160 [ 327.476801][ T4536] cfg80211_event_work+0x2b/0x40 [ 327.481760][ T4536] process_one_work+0x8a2/0x1160 [ 327.486752][ T4536] ? worker_detach_from_pool+0x240/0x240 [ 327.492416][ T4536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 327.497518][ T4536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 327.503092][ T4536] ? kthread_data+0x4b/0xc0 [ 327.507664][ T4536] worker_thread+0xaa2/0x1270 [ 327.512379][ T4536] ? __kthread_parkme+0x162/0x1c0 [ 327.517451][ T4536] kthread+0x29d/0x330 [ 327.521564][ T4536] ? worker_clr_flags+0x1a0/0x1a0 [ 327.526625][ T4536] ? kthread_blkcg+0xd0/0xd0 [ 327.531225][ T4536] ret_from_fork+0x1f/0x30 [ 327.535688][ T4536] [ 327.538721][ T4536] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.546005][ T4536] CPU: 1 PID: 4536 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 327.553641][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 327.563706][ T4536] Workqueue: cfg80211 cfg80211_event_work [ 327.569465][ T4536] Call Trace: [ 327.572751][ T4536] [ 327.575708][ T4536] dump_stack_lvl+0x188/0x24e [ 327.580415][ T4536] ? memcpy+0x3c/0x60 [ 327.584408][ T4536] ? show_regs_print_info+0x12/0x12 [ 327.589618][ T4536] ? load_image+0x400/0x400 [ 327.594171][ T4536] panic+0x2e5/0x730 [ 327.598103][ T4536] ? bpf_jit_dump+0xd0/0xd0 [ 327.602628][ T4536] ? ret_from_fork+0x1f/0x30 [ 327.607235][ T4536] __warn+0x2f8/0x4f0 [ 327.611225][ T4536] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 327.616785][ T4536] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 327.622367][ T4536] report_bug+0x2ba/0x4f0 [ 327.626709][ T4536] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 327.632290][ T4536] handle_bug+0x3a/0x70 [ 327.636511][ T4536] exc_invalid_op+0x16/0x40 [ 327.641115][ T4536] asm_exc_invalid_op+0x16/0x20 [ 327.646077][ T4536] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 327.652268][ T4536] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 b2 ee f7 0f 0b eb bb e8 a8 b2 ee f7 <0f> 0b eb b2 e8 9f b2 ee f7 0f 0b e9 77 fd ff ff e8 93 b2 ee f7 0f [ 327.671893][ T4536] RSP: 0018:ffffc90004c37aa0 EFLAGS: 00010293 [ 327.677970][ T4536] RAX: ffffffff8993c108 RBX: dffffc0000000000 RCX: ffff88807d69d940 [ 327.685976][ T4536] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 327.693950][ T4536] RBP: ffffc90004c37b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 327.701988][ T4536] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff888029ea35d8 [ 327.709985][ T4536] R13: 1ffff92000986f5c R14: 0000000000000006 R15: ffff88807a2e0c90 [ 327.717979][ T4536] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 327.723586][ T4536] ? mutex_lock_nested+0x10/0x10 [ 327.728547][ T4536] ? trace_rdev_return_void+0x240/0x240 [ 327.734152][ T4536] cfg80211_process_wdev_events+0x3ad/0x550 [ 327.740084][ T4536] cfg80211_process_rdev_events+0x9d/0x110 [ 327.745909][ T4536] ? process_one_work+0x7b0/0x1160 [ 327.751118][ T4536] cfg80211_event_work+0x2b/0x40 [ 327.756066][ T4536] process_one_work+0x8a2/0x1160 [ 327.761024][ T4536] ? worker_detach_from_pool+0x240/0x240 [ 327.766686][ T4536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 327.771764][ T4536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 327.777346][ T4536] ? kthread_data+0x4b/0xc0 [ 327.781870][ T4536] worker_thread+0xaa2/0x1270 [ 327.786573][ T4536] ? __kthread_parkme+0x162/0x1c0 [ 327.791613][ T4536] kthread+0x29d/0x330 [ 327.795692][ T4536] ? worker_clr_flags+0x1a0/0x1a0 [ 327.800725][ T4536] ? kthread_blkcg+0xd0/0xd0 [ 327.805414][ T4536] ret_from_fork+0x1f/0x30 [ 327.809882][ T4536] [ 327.813501][ T4536] Kernel Offset: disabled [ 327.817923][ T4536] Rebooting in 86400 seconds..