last executing test programs: 17.941301951s ago: executing program 3 (id=352): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 16.836631709s ago: executing program 3 (id=355): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 16.451809538s ago: executing program 3 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 15.017603785s ago: executing program 3 (id=361): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x136, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) 13.474344822s ago: executing program 1 (id=363): pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0xe) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc0000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a013000040000701fcffffff"], 0x13a0}}, 0xc000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) recvmmsg(r0, 0x0, 0x0, 0x2002, 0x0) 11.99342885s ago: executing program 3 (id=364): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) eventfd2(0x5, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 11.145154195s ago: executing program 0 (id=366): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x11, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES64=0x0, @ANYRES16=r5, @ANYRES16=r3], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x40050) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xa3, 0x0, {0x5, 0x4, 0x1, 0x3, 0x10, 0x64, 0x3, 0x84, 0x1d, 0x8001, @rand_addr=0x64010100, @multicast1}}}}}}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x22}) 10.169092536s ago: executing program 0 (id=368): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 10.000585885s ago: executing program 0 (id=369): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f0000000200)="f0", 0x1}], 0x2}, 0x4000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) read(r4, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0xfe}, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 7.934107776s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 7.857152702s ago: executing program 1 (id=374): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) syz_open_dev$loop(0x0, 0x6, 0x20200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.826676052s ago: executing program 1 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.781693505s ago: executing program 0 (id=376): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x2b) open(0x0, 0xedc3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) process_vm_writev(r2, &(0x7f0000004f40)=[{&(0x7f0000003c00)=""/240, 0xf0}], 0x1, &(0x7f0000006000)=[{&(0x7f0000003400)=""/43, 0x2b}], 0x1, 0x0) 5.845513973s ago: executing program 2 (id=378): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030008ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.453331231s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) 5.452973951s ago: executing program 1 (id=380): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 4.445836786s ago: executing program 2 (id=381): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x851, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0xfffffffd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000940)=""/222, 0x3b, 0xde, 0x1}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0xffff8000, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x5, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x8, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) 4.384441815s ago: executing program 1 (id=382): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 4.034349781s ago: executing program 4 (id=383): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 2.61486746s ago: executing program 1 (id=384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0xfffffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x8008b705, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setgid(0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 2.543329077s ago: executing program 2 (id=385): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) syz_open_dev$loop(0x0, 0x6, 0x20200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.425322495s ago: executing program 3 (id=386): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f0000000200)="f0", 0x1}], 0x2}, 0x4000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) read(r4, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0xfe}, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2.420197364s ago: executing program 0 (id=387): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) sendmsg$kcm(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0xa, &(0x7f0000000180)=[{0x1f, '\x00', @buffer={"908bee7786f215a8ad316ec9e4f1e7cd5bf8065a86833a597dfbe57fbd120282", 0x20}, 0xbce}, {0x20, '\x00', @buffer={"731c25d2d4f2fe3d1f0dfbcd76ecc979700ee98f1576fb00ac001d4d9e18dcea", 0x20}, 0x1000}, {0x35, '\x00', @st={0x4, [{0x2, @svalue=0x8000}, {0x2, @uvalue=0x7}, {0x3, @uvalue=0x7}, {0x3, @svalue=0x6}]}, 0xad}]}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.380227187s ago: executing program 4 (id=388): socket(0x27, 0xa, 0x4) statx(0xffffffffffffff9c, 0x0, 0x400, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114"], 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x1, 0x6) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) fsopen(&(0x7f0000000300)='sysfs\x00', 0x1) 2.133421152s ago: executing program 2 (id=389): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x2b) open(0x0, 0xedc3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000003400)=""/43, 0x2b}], 0x1, 0x0) 1.341207836s ago: executing program 4 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 979.6697ms ago: executing program 2 (id=391): socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000003940)=0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x683a, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) recvfrom$ax25(r3, 0x0, 0x0, 0x12100, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000003980)={0x9, 0x4, 0x0, 0xfffffffd, 0x4, "9fe074c27de56e638031e88f19fa52087cfdcf"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 372.950419ms ago: executing program 4 (id=392): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 266.455969ms ago: executing program 4 (id=393): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r8, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 65.700809][ T4172] cgroup: Unknown subsys name 'net' [ 65.839628][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.340382][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.845323][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 68.860400][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.922637][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.990610][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 69.035094][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.042175][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.050887][ T4196] device bridge_slave_0 entered promiscuous mode [ 69.067934][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.075356][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.083924][ T4196] device bridge_slave_1 entered promiscuous mode [ 69.107873][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.123981][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.131077][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.139347][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.166402][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.173799][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.182220][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.191886][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.210483][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.261845][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.276889][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.286708][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.294591][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.302544][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.325542][ T4196] team0: Port device team_slave_0 added [ 69.345526][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.352592][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.361162][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.374067][ T4196] team0: Port device team_slave_1 added [ 69.404236][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.411510][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.420131][ T4198] device bridge_slave_0 entered promiscuous mode [ 69.451266][ T4185] team0: Port device team_slave_0 added [ 69.459374][ T4185] team0: Port device team_slave_1 added [ 69.472836][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.480127][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.488372][ T4198] device bridge_slave_1 entered promiscuous mode [ 69.509890][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.517017][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.543730][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.565895][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.583174][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.590260][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.598597][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.607270][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.614376][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.640751][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.665422][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.677845][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.687221][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.694431][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.702578][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.710548][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.717823][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.744008][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.761744][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.768977][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.795700][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.823779][ T4196] device hsr_slave_0 entered promiscuous mode [ 69.831346][ T4196] device hsr_slave_1 entered promiscuous mode [ 69.839938][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.889174][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.901286][ T4186] team0: Port device team_slave_0 added [ 69.909320][ T4186] team0: Port device team_slave_1 added [ 69.951322][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.968133][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.975281][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.001820][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.016439][ T4198] team0: Port device team_slave_0 added [ 70.022724][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.030060][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.056167][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.085137][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.092016][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.099162][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.107222][ T4185] Cannot create hsr debugfs directory [ 70.118991][ T4198] team0: Port device team_slave_1 added [ 70.144791][ T4194] team0: Port device team_slave_0 added [ 70.159395][ T4194] team0: Port device team_slave_1 added [ 70.221359][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.228416][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.254546][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.266421][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.274782][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.301299][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.320772][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.328410][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.355371][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.371859][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.380775][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.387770][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.395749][ T4186] Cannot create hsr debugfs directory [ 70.405934][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.412905][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.439868][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.483970][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 70.490622][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 70.542257][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.550470][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.557483][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.566097][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 70.572182][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 70.572732][ T4194] Cannot create hsr debugfs directory [ 70.618239][ T4198] device hsr_slave_0 entered promiscuous mode [ 70.625595][ T4198] device hsr_slave_1 entered promiscuous mode [ 70.632848][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.640643][ T4198] Cannot create hsr debugfs directory [ 70.646328][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 70.861681][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.895238][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.919283][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.928829][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.964745][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.984422][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.000023][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.019959][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.042358][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.061055][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.070643][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.080949][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.146116][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.175543][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.185353][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.249484][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.264960][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.284401][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.296165][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.316858][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.337504][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.351179][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.387512][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.397024][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.417018][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.440299][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.464340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.474358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.483535][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.490826][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.501776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.537657][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.547829][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.556912][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.564137][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.572523][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.583877][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.592549][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.600808][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.611799][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.621886][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.637966][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.655384][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.664407][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.676010][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.698772][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.709206][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.725207][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.741021][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.750438][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.759591][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.766719][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.777696][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.788387][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.798723][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.814855][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.824492][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.834222][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.842768][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.849907][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.868909][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.891894][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.900246][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.910183][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.919968][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.929417][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.939729][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.957985][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.978184][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.992178][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.007289][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.016983][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.025252][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.039526][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.065386][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.081006][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.090265][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.099431][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.110100][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.117250][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.126641][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.136449][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.146580][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.156395][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.166058][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.173195][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.181387][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.190526][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.199288][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.206422][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.214327][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.223536][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.232040][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.239168][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.248956][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.257687][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.303971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.312991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.334186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.342771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.358677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.367936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.377768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.387387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.402894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.412555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.421357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.428570][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.437312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.446463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.455487][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.462559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.470608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.492123][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.504595][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.527137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.537616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.545832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.554896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.563274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.565481][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 72.577289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.587574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.590086][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 72.599020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.610943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.621272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.629924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.638853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.645373][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 72.648454][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 72.660309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.669599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.678276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.687301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.696704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.705428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.728582][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 72.742577][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.769756][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.780845][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.790609][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.799700][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.809544][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.818548][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.828739][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.848142][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.866763][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.885017][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.925109][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.938579][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.949111][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.958936][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.967921][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.976303][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.986205][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.995561][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.042108][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.064284][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.132911][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.155253][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.189537][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.210539][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.222471][ T4194] device veth0_vlan entered promiscuous mode [ 73.246429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.274058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.282857][ T4194] device veth1_vlan entered promiscuous mode [ 73.310879][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.329638][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.340367][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.348764][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.360156][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.403618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.412310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.422563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.451543][ T4194] device veth0_macvtap entered promiscuous mode [ 73.461049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.470721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.482482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.491546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.512485][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.526967][ T4194] device veth1_macvtap entered promiscuous mode [ 73.551615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.563991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.571947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.581564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.591276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.599920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.608727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.619356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.631099][ T4196] device veth0_vlan entered promiscuous mode [ 73.661298][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.670826][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.685813][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.711376][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.728983][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.746542][ T4196] device veth1_vlan entered promiscuous mode [ 73.756398][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.770578][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.779845][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.788958][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.798597][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.814833][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.825594][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.835256][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845538][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.868412][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.876798][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.885939][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.904273][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.912220][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.927888][ T4186] device veth0_vlan entered promiscuous mode [ 73.979344][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.988414][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.002339][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.011706][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.026863][ T4186] device veth1_vlan entered promiscuous mode [ 74.048921][ T4196] device veth0_macvtap entered promiscuous mode [ 74.081666][ T4196] device veth1_macvtap entered promiscuous mode [ 74.113349][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.121528][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.134987][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.182554][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.191889][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.204825][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.214469][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.229502][ T4186] device veth0_macvtap entered promiscuous mode [ 74.242575][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.254368][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.268840][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.279005][ T4198] device veth0_vlan entered promiscuous mode [ 74.293109][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.302579][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.311377][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.321251][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.330802][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.339588][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.348541][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.356908][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.364825][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.380668][ T4186] device veth1_macvtap entered promiscuous mode [ 74.393169][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.401213][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.409914][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.427756][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.440370][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.458676][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.468050][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.476531][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.486196][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.496605][ T4185] device veth0_vlan entered promiscuous mode [ 74.506476][ T4198] device veth1_vlan entered promiscuous mode [ 74.536632][ T4185] device veth1_vlan entered promiscuous mode [ 74.548338][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.557428][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.567647][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.578159][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591807][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.604845][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.615632][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.626372][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.638738][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.653606][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 74.668170][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.679275][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 74.686595][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.696982][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.707955][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.719928][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.727847][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 74.735277][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 74.742445][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.751557][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.761678][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.771009][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.779697][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.789074][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.798058][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.807503][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.815608][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 74.823694][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.831547][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.839592][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.860812][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871339][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.882250][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.893088][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945986][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.956722][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.980326][ T4198] device veth0_macvtap entered promiscuous mode [ 75.027236][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.036733][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.047075][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.059471][ T4198] device veth1_macvtap entered promiscuous mode [ 75.084411][ T4185] device veth0_macvtap entered promiscuous mode [ 75.107306][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.125802][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.144526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.152713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.184800][ T4185] device veth1_macvtap entered promiscuous mode [ 75.217066][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.236426][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.247221][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.258352][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275332][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.303078][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.324064][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.351362][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.370554][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.399120][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.399876][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.413124][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.437361][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.451623][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.472815][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.510244][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.535079][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.552258][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.563120][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.572201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.577943][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.593773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 75.619221][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641631][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.664675][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.679975][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.692804][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.709361][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.720183][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.752686][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.791593][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.808903][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.831334][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.857389][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.882214][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.906155][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.917627][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.950262][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.968411][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.978652][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.988476][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.013396][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.032247][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.053299][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.070377][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.082293][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.110718][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.121642][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.138659][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.151600][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.253576][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.359726][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.399751][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.419795][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.466058][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.515670][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.552047][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.579552][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.596144][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.608926][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.724306][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 76.732784][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 76.816342][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 76.837957][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 76.885153][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.893014][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.894522][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 76.980093][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.998493][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.111718][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.138525][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.880419][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.939284][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.014288][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.057159][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.087950][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.138182][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.806869][ T4353] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.816045][ T4353] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.824900][ T4353] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.833729][ T4353] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.952703][ T4353] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.961884][ T4353] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.972255][ T4353] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.981659][ T4353] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.363615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.372615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.381565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 79.390636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 79.399723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 79.408879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 79.417865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 80.132645][ T4354] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.141496][ T4354] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.150292][ T4354] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.159036][ T4354] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.544857][ T4363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.583676][ T4354] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.592614][ T4354] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.601582][ T4354] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.610720][ T4354] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.709470][ T4359] lo speed is unknown, defaulting to 1000 [ 80.710310][ T4353] syz.4.11 (4353) used greatest stack depth: 20624 bytes left [ 80.715667][ T4359] lo speed is unknown, defaulting to 1000 [ 80.731470][ T4359] lo speed is unknown, defaulting to 1000 [ 80.742063][ T4359] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.755139][ T4359] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.780825][ T4359] lo speed is unknown, defaulting to 1000 [ 80.788038][ T4359] lo speed is unknown, defaulting to 1000 [ 80.794004][ T4354] Zero length message leads to an empty skb [ 80.796955][ T4359] lo speed is unknown, defaulting to 1000 [ 80.807615][ T4359] lo speed is unknown, defaulting to 1000 [ 80.814565][ T4359] lo speed is unknown, defaulting to 1000 [ 81.413361][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.863267][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 82.644273][ T21] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 84.403538][ T21] usb 3-1: string descriptor 0 read error: -71 [ 84.409879][ T21] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 84.472049][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.558715][ T21] usb 3-1: config 0 descriptor?? [ 84.603429][ T21] usb 3-1: can't set config #0, error -71 [ 84.667107][ T21] usb 3-1: USB disconnect, device number 2 [ 85.953210][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.193193][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.213366][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 86.333212][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.350822][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.378559][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.421482][ T21] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 86.459242][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.525093][ T21] usb 3-1: config 0 descriptor?? [ 86.563504][ T4232] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 86.583002][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.611486][ T4232] usb 5-1: config 0 descriptor?? [ 86.656259][ T1325] cfg80211: failed to load regulatory.db [ 86.705662][ T4232] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 87.027882][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.035734][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.042745][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.050119][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.059392][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.067097][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.074827][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.082218][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.090638][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.098494][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.105893][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.112878][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.120681][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.127983][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.135434][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.159181][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.209914][ T4413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.211097][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.294168][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 87.403134][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.418468][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.437783][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.461607][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.485648][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.506734][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.526240][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.546133][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.563894][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.583547][ T4230] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 87.603236][ T4232] gspca_stv06xx: I2C: Read error writing address: -71 [ 87.613322][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.623277][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.636225][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.645639][ T4230] usb 4-1: Product: syz [ 87.651043][ T4230] usb 4-1: Manufacturer: syz [ 87.655770][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.665556][ T4232] usb 5-1: USB disconnect, device number 2 [ 87.676533][ T4230] usb 4-1: SerialNumber: syz [ 87.686976][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.700278][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.711492][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.718497][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.747044][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.759593][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.767060][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.795313][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.802412][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.816893][ T21] ortek 0003:05A4:2000.0001: unknown main item tag 0x0 [ 87.985401][ T4230] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 87.997590][ T21] ortek 0003:05A4:2000.0001: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0 [ 88.226727][ T4405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.234369][ T4405] IPv6: NLM_F_CREATE should be set when creating new route [ 88.241644][ T4405] IPv6: NLM_F_CREATE should be set when creating new route [ 88.248958][ T4405] IPv6: NLM_F_CREATE should be set when creating new route [ 88.776116][ T4230] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.801041][ T21] usb 3-1: USB disconnect, device number 3 [ 88.808342][ T4230] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 88.816417][ T4230] usb 4-1: media controller created [ 88.830798][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.910640][ T4230] usb 4-1: selecting invalid altsetting 2 [ 88.943605][ T4230] set interface failed [ 88.944098][ T4230] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 88.944195][ T4230] error writing reg: 0xff, val: 0x00 [ 88.958466][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.958491][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.958574][ T4425] netlink: 'syz.1.31': attribute type 11 has an invalid length. [ 88.958589][ T4425] netlink: 'syz.1.31': attribute type 13 has an invalid length. [ 88.966876][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.967646][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.129434][ T4230] dvb_usb_mxl111sf: probe of 4-1:123.0 failed with error -22 [ 89.133682][ T4230] usb 4-1: USB disconnect, device number 2 [ 89.440327][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.499746][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 90.710752][ T4444] netlink: 'syz.1.38': attribute type 29 has an invalid length. [ 91.362595][ T4444] netlink: 'syz.1.38': attribute type 29 has an invalid length. [ 92.162824][ T4462] comedi comedi1: bad chanlist[0]=0xfffffffd chan=65533 range length=1 [ 93.413909][ T4465] lo speed is unknown, defaulting to 1000 [ 94.289378][ T1324] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 94.317686][ T1324] Bluetooth: hci0: Injecting HCI hardware error event [ 94.328949][ T4193] Bluetooth: hci0: hardware error 0x00 [ 96.877506][ T4481] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 98.371487][ T4501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.430393][ T4503] netlink: 14 bytes leftover after parsing attributes in process `syz.0.55'. [ 98.553264][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.623610][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.634053][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.666873][ T1325] infiniband syz1: ib_query_port failed (-19) [ 98.685604][ T4503] bond0 (unregistering): Released all slaves [ 98.754465][ T4501] bond0 speed is unknown, defaulting to 1000 [ 98.755779][ T4230] bond0 speed is unknown, defaulting to 1000 [ 98.859064][ T4501] siw: device registration error -19 [ 98.883173][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 99.004570][ T4232] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 99.053216][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.878096][ T4232] usb 4-1: config 0 descriptor?? [ 99.931419][ T4232] as10x_usb: device has been detected [ 99.954805][ T4232] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 100.004120][ T4232] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 100.077214][ T4232] as10x_usb: error during firmware upload part1 [ 100.110243][ T4232] Registered device nBox DVB-T Dongle [ 100.211754][ T4232] usb 4-1: USB disconnect, device number 3 [ 100.271523][ T4232] Unregistered device nBox DVB-T Dongle [ 100.280715][ T4232] as10x_usb: device has been disconnected [ 101.044770][ T4530] fuse: Bad value for 'fd' [ 102.006922][ T4528] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.62'. [ 106.049797][ T4566] fuse: Bad value for 'fd' [ 109.292360][ T4594] netlink: 'syz.0.80': attribute type 29 has an invalid length. [ 109.300375][ T4594] netlink: 'syz.0.80': attribute type 29 has an invalid length. [ 109.322447][ T4592] netlink: 'syz.0.80': attribute type 29 has an invalid length. [ 109.928305][ T4601] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.75'. [ 110.125754][ T4606] input: syz0 as /devices/virtual/input/input5 [ 110.398599][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.85'. [ 112.741979][ T4639] netlink: 'syz.1.93': attribute type 29 has an invalid length. [ 112.780330][ T4639] netlink: 'syz.1.93': attribute type 29 has an invalid length. [ 112.813758][ T4638] netlink: 'syz.1.93': attribute type 29 has an invalid length. [ 112.990092][ T4641] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.94'. [ 116.124673][ T4678] netlink: 209572 bytes leftover after parsing attributes in process `syz.3.107'. [ 116.748622][ T4690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 119.412551][ T4718] netlink: 209572 bytes leftover after parsing attributes in process `syz.1.118'. [ 120.146282][ T4730] bridge0: port 3(syz_tun) entered blocking state [ 120.156481][ T4730] bridge0: port 3(syz_tun) entered disabled state [ 120.375505][ T4730] device syz_tun entered promiscuous mode [ 120.392621][ T4730] bridge0: port 3(syz_tun) entered blocking state [ 120.399580][ T4730] bridge0: port 3(syz_tun) entered forwarding state [ 121.698604][ T4744] lo speed is unknown, defaulting to 1000 [ 122.447775][ T4746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.963167][ T4230] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.497460][ T4746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.654029][ T4758] netlink: 'syz.3.129': attribute type 29 has an invalid length. [ 123.673538][ T4758] netlink: 'syz.3.129': attribute type 29 has an invalid length. [ 123.748168][ T4746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.758862][ T4230] usb 3-1: config 0 has no interfaces? [ 123.775624][ T4757] netlink: 'syz.3.129': attribute type 29 has an invalid length. [ 123.894635][ T4760] netlink: 209572 bytes leftover after parsing attributes in process `syz.3.130'. [ 123.897226][ T4746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.943374][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.003583][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.011812][ T4230] usb 3-1: Product: syz [ 124.122547][ T4746] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.201703][ T4230] usb 3-1: Manufacturer: syz [ 124.207564][ T4230] usb 3-1: SerialNumber: syz [ 124.215480][ T4230] usb 3-1: config 0 descriptor?? [ 124.224456][ T4746] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.240937][ T4746] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.418314][ T4746] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.814394][ T23] usb 3-1: USB disconnect, device number 4 [ 126.903219][ T4234] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.478038][ T4795] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.142'. [ 127.613293][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 127.736773][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.726764][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6F, skipping [ 128.764813][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.983380][ T4234] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 128.992519][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 129.053114][ T4234] usb 3-1: Product: syz [ 129.063175][ T4234] usb 3-1: Manufacturer: syz [ 129.072475][ T4234] usb 3-1: SerialNumber: syz [ 129.155376][ T4234] usb 3-1: config 0 descriptor?? [ 129.254539][ T4234] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 129.262037][ T4234] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 129.313408][ T4234] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 130.237397][ T4228] usb 3-1: USB disconnect, device number 5 [ 131.199739][ T4830] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.153'. [ 132.399005][ T4839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.155'. [ 133.043663][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050085][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.333369][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.573086][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 133.833225][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.941647][ T4845] tipc: Started in network mode [ 133.946885][ T4845] tipc: Node identity 4, cluster identity 4711 [ 133.953293][ T4845] tipc: Node number set to 4 [ 134.591690][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.601682][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.610908][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.621108][ T21] usb 5-1: config 0 descriptor?? [ 134.664242][ T21] hub 5-1:0.0: USB hub found [ 134.873311][ T21] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 135.398363][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 135.434323][ T21] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 135.482212][ T4857] IPVS: Error joining to the multicast group [ 136.176240][ T4837] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 136.288565][ T4873] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.165'. [ 138.133708][ T4882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.510811][ T4896] netlink: 'syz.1.171': attribute type 4 has an invalid length. [ 139.485650][ T4905] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.880449][ T4837] usb 5-1: can't restore configuration #0 (error=-110) [ 141.988996][ T21] usb 5-1: USB disconnect, device number 3 [ 141.991121][ T4918] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.177'. [ 142.453175][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.643314][ T4925] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.810234][ T4956] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 145.194623][ T4260] lo speed is unknown, defaulting to 1000 [ 145.743528][ T4327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.983151][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 146.113328][ T4327] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.128035][ T4327] usb 4-1: config 0 has no interface number 0 [ 146.303327][ T4327] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.318280][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.340816][ T4327] usb 4-1: Product: syz [ 146.354208][ T4327] usb 4-1: Manufacturer: syz [ 146.366980][ T4327] usb 4-1: SerialNumber: syz [ 146.751346][ T4327] usb 4-1: config 0 descriptor?? [ 147.184658][ T4327] smsc95xx v2.0.0 [ 147.885466][ T4981] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 147.894632][ T4981] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 147.904678][ T4980] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 148.299817][ T4985] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 148.373503][ T4327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 148.411028][ T4327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.443207][ T4327] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 148.530535][ T4327] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 148.746877][ T4327] usb 4-1: USB disconnect, device number 4 [ 151.723152][ T4327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.113272][ T4327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.288017][ T4327] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.078145][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.131463][ T4327] usb 5-1: config 0 descriptor?? [ 153.343677][ T4327] pwc: Askey VC010 type 2 USB webcam detected. [ 154.273292][ T4327] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.323340][ T4327] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.393265][ T4327] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.434058][ T5031] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 154.445585][ T5032] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 154.453653][ T4327] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.493448][ T4327] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.533215][ T4327] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.569804][ T5031] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 154.588324][ T5029] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 154.653189][ T1106] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.823264][ T4327] pwc: recv_control_msg error -71 req 02 val 2100 [ 154.983207][ T1106] usb 1-1: Using ep0 maxpacket: 32 [ 155.022480][ T4327] pwc: recv_control_msg error -71 req 04 val 1500 [ 155.175216][ T1106] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 155.733487][ T4327] pwc: recv_control_msg error -71 req 02 val 2500 [ 155.927704][ T1106] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.948105][ T4327] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.297781][ T4327] pwc: recv_control_msg error -71 req 02 val 2600 [ 156.308815][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.321596][ T1106] usb 1-1: Product: syz [ 156.443996][ T4327] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.489213][ T1106] usb 1-1: Manufacturer: syz [ 156.495914][ T4327] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.562342][ T1106] usb 1-1: SerialNumber: syz [ 156.606766][ T4327] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.665833][ T1106] usb 1-1: config 0 descriptor?? [ 156.693955][ T4327] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.203487][ T5027] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.365158][ T4327] pwc: Registered as video103. [ 157.568722][ T1106] usb 1-1: USB disconnect, device number 2 [ 157.592477][ T4327] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 157.721278][ T4327] usb 5-1: USB disconnect, device number 5 [ 159.842147][ T5077] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 159.876722][ T5077] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 159.907409][ T5075] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 160.656605][ T4315] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.725961][ T146] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 160.885347][ T4327] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.313505][ T4327] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 161.346711][ T4327] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 161.481590][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.510986][ T4327] usb 4-1: config 0 descriptor?? [ 161.578146][ T4327] usb 4-1: bad CDC descriptors [ 162.125941][ T4327] usb 4-1: bad CDC descriptors [ 162.137105][ T4327] usb 4-1: USB disconnect, device number 5 [ 162.247937][ T5115] mmap: syz.2.235 (5115) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 162.278709][ T5119] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 162.324327][ T5119] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 162.337236][ T5118] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 162.786996][ T4260] Bluetooth: hci5: command 0x1003 tx timeout [ 163.032316][ T146] Bluetooth: hci5: sending frame failed (-49) [ 165.083882][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 165.090996][ T146] Bluetooth: hci5: sending frame failed (-49) [ 167.320971][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 170.574485][ T5198] netlink: 'syz.4.259': attribute type 29 has an invalid length. [ 170.582311][ T5198] netlink: 'syz.4.259': attribute type 29 has an invalid length. [ 170.681192][ T5196] netlink: 'syz.4.259': attribute type 29 has an invalid length. [ 172.845881][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.181983][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 174.733281][ T4232] usb 5-1: unable to read config index 0 descriptor/all [ 174.740401][ T4232] usb 5-1: can't read configurations, error -71 [ 174.808338][ T5237] netlink: 'syz.1.272': attribute type 29 has an invalid length. [ 174.953807][ T5237] netlink: 'syz.1.272': attribute type 29 has an invalid length. [ 174.962353][ T5235] netlink: 'syz.1.272': attribute type 29 has an invalid length. [ 176.131633][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.413132][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 176.553278][ T7] usb 4-1: config 0 has no interfaces? [ 176.560769][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.630893][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.714875][ T7] usb 4-1: config 0 descriptor?? [ 178.482919][ T7] usb 4-1: USB disconnect, device number 6 [ 178.667339][ T5261] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 178.746648][ T5261] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.763321][ T4841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.138930][ T4841] usb 2-1: Using ep0 maxpacket: 32 [ 179.293592][ T4841] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 179.301817][ T4841] usb 2-1: config 0 has no interface number 0 [ 179.310327][ T4841] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.329414][ T4841] usb 2-1: config 0 interface 85 has no altsetting 0 [ 179.513078][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.728823][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.753685][ T4841] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 180.773105][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 180.781590][ T4841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.796518][ T4841] usb 2-1: Product: syz [ 180.800909][ T4841] usb 2-1: Manufacturer: syz [ 180.824179][ T4841] usb 2-1: SerialNumber: syz [ 180.849696][ T4841] usb 2-1: config 0 descriptor?? [ 180.997405][ T7] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.019191][ T7] usb 4-1: config 0 has no interface number 0 [ 181.056778][ T7] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.063380][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 181.088943][ T7] usb 4-1: config 0 interface 85 has no altsetting 0 [ 181.223244][ T21] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.231384][ T21] usb 3-1: config 0 has no interface number 0 [ 181.253206][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.292818][ T21] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.329865][ T21] usb 3-1: config 0 interface 85 has no altsetting 0 [ 181.333687][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.469337][ T7] usb 4-1: Product: syz [ 181.475812][ T7] usb 4-1: Manufacturer: syz [ 181.480560][ T7] usb 4-1: SerialNumber: syz [ 181.533781][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.549662][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.551322][ T7] usb 4-1: config 0 descriptor?? [ 181.576766][ T21] usb 3-1: Product: syz [ 181.587286][ T21] usb 3-1: Manufacturer: syz [ 181.600570][ T21] usb 3-1: SerialNumber: syz [ 181.626337][ T21] usb 3-1: config 0 descriptor?? [ 182.393183][ T4841] appletouch 2-1:0.85: Failed to request geyser raw mode [ 182.410660][ T4841] appletouch: probe of 2-1:0.85 failed with error -5 [ 182.417780][ T21] appletouch 3-1:0.85: Failed to read mode from device. [ 182.430513][ T21] appletouch: probe of 3-1:0.85 failed with error -5 [ 182.492006][ T21] usb 3-1: USB disconnect, device number 6 [ 182.498418][ T4841] usb 2-1: USB disconnect, device number 2 [ 182.683784][ T5295] netlink: 'syz.0.287': attribute type 29 has an invalid length. [ 183.055058][ T5295] netlink: 'syz.0.287': attribute type 29 has an invalid length. [ 183.500063][ T5291] netlink: 'syz.0.287': attribute type 29 has an invalid length. [ 183.523191][ T7] appletouch 4-1:0.85: Failed to request geyser raw mode [ 183.536662][ T7] appletouch: probe of 4-1:0.85 failed with error -5 [ 183.599217][ T7] usb 4-1: USB disconnect, device number 7 [ 184.875893][ T26] audit: type=1326 audit(1772693550.509:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.006818][ T26] audit: type=1326 audit(1772693550.549:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.791691][ T26] audit: type=1326 audit(1772693550.559:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.814215][ T26] audit: type=1326 audit(1772693550.559:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.836516][ T26] audit: type=1326 audit(1772693550.559:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.859930][ T26] audit: type=1326 audit(1772693550.609:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.885483][ T26] audit: type=1326 audit(1772693550.609:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.907616][ T26] audit: type=1326 audit(1772693550.609:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 185.930111][ T26] audit: type=1326 audit(1772693550.619:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 186.095363][ T26] audit: type=1326 audit(1772693550.619:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5318 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32dd9e799 code=0x7ffc0000 [ 186.771435][ T5344] netlink: 'syz.1.304': attribute type 29 has an invalid length. [ 186.784577][ T5341] process 'syz.0.305' launched '/dev/fd/6' with NULL argv: empty string added [ 186.819909][ T5344] netlink: 'syz.1.304': attribute type 29 has an invalid length. [ 186.839323][ T5337] netlink: 'syz.1.304': attribute type 29 has an invalid length. [ 186.933083][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.303125][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 187.523257][ T7] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 187.537558][ T7] usb 4-1: config 0 has no interface number 0 [ 187.550190][ T7] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.572914][ T7] usb 4-1: config 0 interface 85 has no altsetting 0 [ 187.576774][ T5358] lo speed is unknown, defaulting to 1000 [ 187.753997][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 187.775948][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.894775][ T7] usb 4-1: Product: syz [ 187.909447][ T7] usb 4-1: Manufacturer: syz [ 187.917005][ T7] usb 4-1: SerialNumber: syz [ 187.968180][ T7] usb 4-1: config 0 descriptor?? [ 190.153241][ T7] appletouch 4-1:0.85: Failed to request geyser raw mode [ 190.160433][ T7] appletouch: probe of 4-1:0.85 failed with error -5 [ 190.335729][ T7] usb 4-1: USB disconnect, device number 8 [ 191.385302][ T4327] Bluetooth: hci1: command 0x0406 tx timeout [ 191.391402][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 191.904010][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 191.910115][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 194.643393][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.649763][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.093326][ T4841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 196.395148][ T4841] usb 2-1: Using ep0 maxpacket: 8 [ 196.714445][ T4841] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 197.186719][ T4841] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 197.198122][ T4841] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.211527][ T4841] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.221284][ T4841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.264293][ T4841] usbtmc 2-1:16.0: bulk endpoints not found [ 197.787041][ T7] usb 2-1: USB disconnect, device number 3 [ 198.176632][ T5450] tmpfs: Unknown parameter 'quota' [ 199.696321][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.073081][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 200.493376][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.513117][ T7] usb 5-1: config 0 has no interfaces? [ 200.516043][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 200.703355][ T7] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 201.029544][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.639863][ T7] usb 5-1: Product: syz [ 201.661969][ T7] usb 5-1: Manufacturer: syz [ 201.683019][ T7] usb 5-1: SerialNumber: syz [ 201.714206][ T7] usb 5-1: config 0 descriptor?? [ 203.995218][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 204.004159][ T5506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.350'. [ 204.093154][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.582836][ T4841] usb 5-1: USB disconnect, device number 8 [ 204.883288][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 205.044000][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 205.081390][ T7] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 205.251639][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.428012][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.579772][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.784533][ T7] usbtmc 1-1:16.0: bulk endpoints not found [ 206.180906][ T4230] usb 1-1: USB disconnect, device number 3 [ 212.963219][ T1324] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.145813][ T1324] usb 1-1: Using ep0 maxpacket: 32 [ 214.243268][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 214.783264][ T1324] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 215.174850][ T1324] usb 1-1: config 0 has no interface number 0 [ 215.795642][ T1324] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.783628][ T1324] usb 1-1: config 0 interface 85 has no altsetting 0 [ 216.826501][ T1324] usb 1-1: string descriptor 0 read error: -71 [ 216.862810][ T1324] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 216.905958][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.140175][ T1324] usb 1-1: config 0 descriptor?? [ 218.175039][ T1324] usb 1-1: can't set config #0, error -71 [ 218.190672][ T1324] usb 1-1: USB disconnect, device number 4 [ 220.593407][ T4266] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.733159][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 221.873307][ T4266] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 221.889232][ T4266] usb 4-1: config 0 has no interface number 0 [ 221.920434][ T4266] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.932431][ T4266] usb 4-1: config 0 interface 85 has no altsetting 0 [ 222.133215][ T4266] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 222.142736][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.152328][ T4266] usb 4-1: Product: syz [ 222.157963][ T4266] usb 4-1: Manufacturer: syz [ 222.163207][ T4266] usb 4-1: SerialNumber: syz [ 222.238044][ T4266] usb 4-1: config 0 descriptor?? [ 223.446981][ T5664] ================================================================== [ 223.455495][ T5664] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 223.462759][ T5664] Read of size 8 at addr ffff888029e9b418 by task syz.0.387/5664 [ 223.470514][ T5664] [ 223.472878][ T5664] CPU: 1 PID: 5664 Comm: syz.0.387 Not tainted syzkaller #0 [ 223.480191][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.490287][ T5664] Call Trace: [ 223.493598][ T5664] [ 223.496566][ T5664] dump_stack_lvl+0x188/0x250 [ 223.501289][ T5664] ? show_regs_print_info+0x20/0x20 [ 223.506529][ T5664] ? _printk+0xda/0x130 [ 223.510716][ T5664] ? dvb_device_open+0xc6/0x370 [ 223.515608][ T5664] ? load_image+0x400/0x400 [ 223.520134][ T5664] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 223.525630][ T5664] print_address_description+0x60/0x2d0 [ 223.531219][ T5664] ? dvb_device_open+0xc6/0x370 [ 223.536099][ T5664] kasan_report+0xdf/0x130 [ 223.540552][ T5664] ? dvb_device_open+0xc6/0x370 [ 223.545529][ T5664] dvb_device_open+0xc6/0x370 [ 223.550240][ T5664] ? do_raw_spin_unlock+0x11d/0x230 [ 223.555476][ T5664] chrdev_open+0x5c5/0x6a0 [ 223.559942][ T5664] ? cd_forget+0x160/0x160 [ 223.564415][ T5664] ? fsnotify_perm+0x3a7/0x560 [ 223.569211][ T5664] ? cd_forget+0x160/0x160 [ 223.573662][ T5664] do_dentry_open+0x7ff/0xf80 [ 223.578535][ T5664] path_openat+0x26f5/0x2fa0 [ 223.583403][ T5664] ? verify_lock_unused+0x140/0x140 [ 223.588672][ T5664] ? slab_post_alloc_hook+0x4c/0x380 [ 223.594021][ T5664] ? do_filp_open+0x410/0x410 [ 223.598817][ T5664] do_filp_open+0x1e2/0x410 [ 223.603374][ T5664] ? vfs_tmpfile+0x300/0x300 [ 223.608037][ T5664] ? _raw_spin_unlock+0x24/0x40 [ 223.613018][ T5664] ? alloc_fd+0x598/0x630 [ 223.617421][ T5664] do_sys_openat2+0x150/0x4b0 [ 223.622142][ T5664] ? __lock_acquire+0x7d10/0x7d10 [ 223.627216][ T5664] ? do_sys_open+0xe0/0xe0 [ 223.631683][ T5664] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.637742][ T5664] ? lock_chain_count+0x20/0x20 [ 223.642635][ T5664] ? vtime_user_exit+0x2c8/0x3e0 [ 223.647621][ T5664] __x64_sys_openat+0x135/0x160 [ 223.652521][ T5664] do_syscall_64+0x4c/0xa0 [ 223.656985][ T5664] ? clear_bhb_loop+0x30/0x80 [ 223.661767][ T5664] ? clear_bhb_loop+0x30/0x80 [ 223.666891][ T5664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.673747][ T5664] RIP: 0033:0x7f9ebf94cfce [ 223.679255][ T5664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.703482][ T5664] RSP: 002b:00007f9ebdba3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.712092][ T5664] RAX: ffffffffffffffda RBX: 00007f9ebdba46c0 RCX: 00007f9ebf94cfce [ 223.720119][ T5664] RDX: 0000000000000002 RSI: 00007f9ebdba3c00 RDI: ffffffffffffff9c [ 223.728142][ T5664] RBP: 00007f9ebdba3c00 R08: 0000000000000000 R09: 0000000000000000 [ 223.737146][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 223.745435][ T5664] R13: 00007f9ebfc06218 R14: 00007f9ebfc06180 R15: 00007ffe955ba3d8 [ 223.753826][ T5664] [ 223.756876][ T5664] [ 223.759226][ T5664] Allocated by task 7: [ 223.763409][ T5664] __kasan_kmalloc+0xb5/0xf0 [ 223.768042][ T5664] usb_string+0x10d/0x760 [ 223.772397][ T5664] usb_cache_string+0x7b/0xf0 [ 223.777104][ T5664] usb_new_device+0x288/0x1660 [ 223.781899][ T5664] hub_event+0x2e4a/0x55e0 [ 223.786351][ T5664] process_one_work+0x85f/0x1010 [ 223.791321][ T5664] worker_thread+0xaa6/0x1290 [ 223.796034][ T5664] kthread+0x436/0x520 [ 223.800133][ T5664] ret_from_fork+0x1f/0x30 [ 223.804581][ T5664] [ 223.806931][ T5664] Freed by task 7: [ 223.810683][ T5664] kasan_set_track+0x4b/0x70 [ 223.815300][ T5664] kasan_set_free_info+0x1f/0x40 [ 223.820268][ T5664] ____kasan_slab_free+0xd5/0x110 [ 223.825419][ T5664] slab_free_freelist_hook+0xea/0x170 [ 223.830818][ T5664] kfree+0xef/0x2a0 [ 223.834653][ T5664] usb_string+0x436/0x760 [ 223.839007][ T5664] usb_cache_string+0x7b/0xf0 [ 223.843708][ T5664] usb_new_device+0x288/0x1660 [ 223.848498][ T5664] hub_event+0x2e4a/0x55e0 [ 223.852948][ T5664] process_one_work+0x85f/0x1010 [ 223.857916][ T5664] worker_thread+0xaa6/0x1290 [ 223.862631][ T5664] kthread+0x436/0x520 [ 223.866830][ T5664] ret_from_fork+0x1f/0x30 [ 223.871283][ T5664] [ 223.873623][ T5664] The buggy address belongs to the object at ffff888029e9b400 [ 223.873623][ T5664] which belongs to the cache kmalloc-256 of size 256 [ 223.887704][ T5664] The buggy address is located 24 bytes inside of [ 223.887704][ T5664] 256-byte region [ffff888029e9b400, ffff888029e9b500) [ 223.900935][ T5664] The buggy address belongs to the page: [ 223.906606][ T5664] page:ffffea0000a7a680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e9a [ 223.916798][ T5664] head:ffffea0000a7a680 order:1 compound_mapcount:0 [ 223.923511][ T5664] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 223.931628][ T5664] raw: 00fff00000010200 ffffea0001897c00 0000000400000004 ffff888016c41b40 [ 223.940249][ T5664] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 223.948849][ T5664] page dumped because: kasan: bad access detected [ 223.955294][ T5664] page_owner tracks the page as allocated [ 223.961034][ T5664] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18525498529, free_ts 0 [ 223.979044][ T5664] get_page_from_freelist+0x1bbd/0x1ca0 [ 223.984629][ T5664] __alloc_pages+0x1ee/0x480 [ 223.989251][ T5664] alloc_page_interleave+0x24/0x1e0 [ 223.994474][ T5664] new_slab+0xc0/0x4b0 [ 223.998571][ T5664] ___slab_alloc+0x80a/0xdd0 [ 224.003187][ T5664] __kmalloc_node+0x200/0x3b0 [ 224.007889][ T5664] kvmalloc_node+0x84/0x130 [ 224.012508][ T5664] v4l2_ctrl_new+0x70f/0x1310 [ 224.017218][ T5664] v4l2_ctrl_new_std+0x247/0x300 [ 224.022180][ T5664] handler_new_ref+0x14a/0x950 [ 224.026979][ T5664] v4l2_ctrl_add_handler+0x197/0x280 [ 224.032296][ T5664] vivid_create_controls+0x2a37/0x3460 [ 224.037784][ T5664] vivid_probe+0x3c47/0x67a0 [ 224.042401][ T5664] platform_probe+0x137/0x1c0 [ 224.047190][ T5664] really_probe+0x284/0xc80 [ 224.051727][ T5664] __driver_probe_device+0x18c/0x330 [ 224.057036][ T5664] page_owner free stack trace missing [ 224.062422][ T5664] [ 224.064772][ T5664] Memory state around the buggy address: [ 224.070508][ T5664] ffff888029e9b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.078685][ T5664] ffff888029e9b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.086771][ T5664] >ffff888029e9b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.094857][ T5664] ^ [ 224.099852][ T5664] ffff888029e9b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.108092][ T5664] ffff888029e9b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.116551][ T5664] ================================================================== [ 224.124653][ T5664] Disabling lock debugging due to kernel taint [ 224.144338][ T5664] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.151781][ T5664] CPU: 1 PID: 5664 Comm: syz.0.387 Tainted: G B syzkaller #0 [ 224.161022][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.171566][ T5664] Call Trace: [ 224.174867][ T5664] [ 224.178563][ T5664] dump_stack_lvl+0x188/0x250 [ 224.184446][ T5664] ? show_regs_print_info+0x20/0x20 [ 224.188706][ T5660] sched: RT throttling activated [ 224.197274][ T5664] ? load_image+0x400/0x400 [ 224.201927][ T5664] panic+0x2e5/0x810 [ 224.206564][ T5664] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 224.212863][ T5664] ? bpf_jit_dump+0xd0/0xd0 [ 224.217428][ T5664] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 224.224510][ T5664] ? _raw_spin_unlock+0x40/0x40 [ 224.229492][ T5664] ? dvb_device_open+0xc6/0x370 [ 224.235105][ T5664] check_panic_on_warn+0x80/0xa0 [ 224.240374][ T5664] ? dvb_device_open+0xc6/0x370 [ 224.245259][ T5664] end_report+0x6d/0xf0 [ 224.249471][ T5664] kasan_report+0x102/0x130 [ 224.254006][ T5664] ? dvb_device_open+0xc6/0x370 [ 224.258919][ T5664] dvb_device_open+0xc6/0x370 [ 224.263623][ T5664] ? do_raw_spin_unlock+0x11d/0x230 [ 224.268857][ T5664] chrdev_open+0x5c5/0x6a0 [ 224.273301][ T5664] ? cd_forget+0x160/0x160 [ 224.277750][ T5664] ? fsnotify_perm+0x3a7/0x560 [ 224.282545][ T5664] ? cd_forget+0x160/0x160 [ 224.286987][ T5664] do_dentry_open+0x7ff/0xf80 [ 224.291698][ T5664] path_openat+0x26f5/0x2fa0 [ 224.296324][ T5664] ? verify_lock_unused+0x140/0x140 [ 224.301555][ T5664] ? slab_post_alloc_hook+0x4c/0x380 [ 224.306871][ T5664] ? do_filp_open+0x410/0x410 [ 224.311587][ T5664] do_filp_open+0x1e2/0x410 [ 224.316135][ T5664] ? vfs_tmpfile+0x300/0x300 [ 224.320756][ T5664] ? _raw_spin_unlock+0x24/0x40 [ 224.325638][ T5664] ? alloc_fd+0x598/0x630 [ 224.329996][ T5664] do_sys_openat2+0x150/0x4b0 [ 224.334737][ T5664] ? __lock_acquire+0x7d10/0x7d10 [ 224.339791][ T5664] ? do_sys_open+0xe0/0xe0 [ 224.344229][ T5664] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.350238][ T5664] ? lock_chain_count+0x20/0x20 [ 224.355117][ T5664] ? vtime_user_exit+0x2c8/0x3e0 [ 224.360089][ T5664] __x64_sys_openat+0x135/0x160 [ 224.364967][ T5664] do_syscall_64+0x4c/0xa0 [ 224.369408][ T5664] ? clear_bhb_loop+0x30/0x80 [ 224.374107][ T5664] ? clear_bhb_loop+0x30/0x80 [ 224.378815][ T5664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.384750][ T5664] RIP: 0033:0x7f9ebf94cfce [ 224.389195][ T5664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.408824][ T5664] RSP: 002b:00007f9ebdba3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.417265][ T5664] RAX: ffffffffffffffda RBX: 00007f9ebdba46c0 RCX: 00007f9ebf94cfce [ 224.425259][ T5664] RDX: 0000000000000002 RSI: 00007f9ebdba3c00 RDI: ffffffffffffff9c [ 224.433255][ T5664] RBP: 00007f9ebdba3c00 R08: 0000000000000000 R09: 0000000000000000 [ 224.441258][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 224.449252][ T5664] R13: 00007f9ebfc06218 R14: 00007f9ebfc06180 R15: 00007ffe955ba3d8 [ 224.457260][ T5664] [ 224.460606][ T5664] Kernel Offset: disabled [ 224.464943][ T5664] Rebooting in 86400 seconds..